Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/localplugins/plugins/generate-resumenpx skills add localplugins/plugins --skill generate-resumegit clone --depth 1 https://github.com/localplugins/pluginsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00050 | $0.00702 |
| Opus 5 | $0.00025 | $0.00351 |
| Sonnet 5 | $0.00010 | $0.00140 |
| Haiku 4.5 | $0.00005 | $0.00070 |
Grade A, and why
generate-resume scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 56 lines — stays where its author put it; the contents beside it link to each section on GitHub.
generate-resume
Turn resume.json into a finished résumé file. Pure sh + awk splice, zero
Node, zero network — the browser does the actual rendering when the user
prints to PDF. This is the mechanism /cv-make drives; use it directly if
you're asked to render outside that command's flow (e.g. from /cv-tailor in
a later plan).
Inputs
- The active résumé:
resume.jsonat the repo root, valid against${CLAUDE_PLUGIN_ROOT}/schema/json-resume.schema.json(see the validation checklist incommands/cv-new.md—basics.namerequired, etc.). Stop and report the bad field rather than rendering invalid data. - The active template slug: line 1 of
cv/.active(defaultclassic-atsif unset). Itstemplate.htmllives at"${CLAUDE_PLUGIN_ROOT}/templates/<slug>/template.html". - The shared renderer:
"${CLAUDE_PLUGIN_ROOT}/templates/_shared/render-core.js"— onerenderResume(resume) -> htmlStringfunction plus its helpers (escapeHtml,formatDate,dateRange, per-section renderers). Every template reuses this same file; a template only supplies its own CSS shell.
Procedure
-
Resolve and validate the inputs above.
-
Splice the three pieces into one file with the literal splice script:
mkdir -p output sh "${CLAUDE_PLUGIN_ROOT}/lib/render.sh" \ "${CLAUDE_PLUGIN_ROOT}/templates/<slug>/template.html" \ "${CLAUDE_PLUGIN_ROOT}/templates/_shared/render-core.js" \ resume.json > "output/resume-<slug-of-name>.html"See
references/render-pipeline.mdfor exactly how the splice works, the two markers it fills, and why the result must stay self-contained. -
Write the result to
output/resume-<slug-of-name>.html(kebab-case the person's name, e.g. "Alex Rivera" →alex-rivera). -
Report the saved path and hand the user the render contract: open the file in a browser, then Print → Save as PDF. The browser is the renderer; this skill only assembles the HTML it renders.
Notes
- Never write partial output. If the splice or a downstream step fails, don't
leave a half-written file in
output/. - The output file must open correctly directly from disk (
file://) with no server and no additional requests — that's what "self-contained" means here. - This skill never produces a PDF itself. PDF generation via a headless browser/OS tool is optional and out of scope for Plan 1 (see Plan 5 in the project plan); the guaranteed, zero-dependency path is always the user's own browser doing Save as PDF.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 56 lines · 50 tokens per session scan A fe41c5d2602f
generate-resume is a skill published in the GitHub repository localplugins/plugins (5 stars, last pushed 1mo ago), licensed MIT. It adds 50 tokens to every session and 702 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
report
Export a reply or chat card as a standalone styled HTML report file, in the exact readable card template (Persian RTL with Vazirmatn, or English LTR with Inter). Use ONLY when the user explicitly asks to save, export, file, or extend THE CURRENT widget/card ("همین کارت رو ذخیره کن", "کاملترش رو بهصورت فایل بساز"…
demo-video
Orchestrates building a narrated demo video of a project — reads the codebase, writes a storyboard, prepares deterministic app state, drives the UI with Playwright to record clips (web and Electron), generates ElevenLabs voiceover, reconciles measured durations into a timeline, and renders the final cut with Remotion.…
demo-capture
Records demo video clips by driving a running app — one clip per storyboard section, with human-feeling pointer motion, dwell timing, and per-character typing. Covers the Playwright MCP video tools for web apps and a generated Playwright Electron script (plus a macOS screen-capture fallback) for desktop apps. Use when…
demo-setup
Checks and installs everything the demo-video pipeline needs — ffmpeg, Playwright browsers, the Remotion plugin, uvx, and the ElevenLabs key — and scaffolds demo/ in the target project. Use before the first demo video on a machine, when any pipeline stage reports missing tooling, when MCP video tools are absent from…
brainstorm-okrs
Brainstorm team-level OKRs aligned with company objectives — qualitative objectives with measurable key results. Use when setting quarterly OKRs, aligning team goals with company strategy, drafting objectives, or learning how to write effective OKRs.
pre-mortem
Run a pre-mortem risk analysis on a PRD or launch plan. Categorizes risks as Tigers (real problems), Paper Tigers (overblown concerns), and Elephants (unspoken worries), then classifies as launch-blocking, fast-follow, or track. Use when preparing for launch, stress-testing a product plan, or identifying what could go…