Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Lonsdale201/wp-agent-skills --skill vp-woo-pont-shipping-labelsgit clone --depth 1 https://github.com/Lonsdale201/wp-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lonsdale201/wp-agent-skills/vp-woo-pont-shipping-labels)<a href="https://agentmods.dev/skills/lonsdale201/wp-agent-skills/vp-woo-pont-shipping-labels"><img src="https://agentmods.dev/badge/skills/lonsdale201/wp-agent-skills/vp-woo-pont-shipping-labels/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lonsdale201/wp-agent-skills/vp-woo-pont-shipping-labels"><img src="https://agentmods.dev/badge/skills/lonsdale201/wp-agent-skills/vp-woo-pont-shipping-labels.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00128 | $0.02041 |
| Opus 5.5 | $0.00051 | $0.00816 |
| Sonnet 5.5 | $0.00026 | $0.00408 |
| Haiku 4.5 | $0.00013 | $0.00204 |
Grade A, and why
vp-woo-pont-shipping-labels scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Shipping-label integration
Let the plugin own carrier authentication, provider requests, PDFs, parcel metadata, and duplicate prevention. A companion plugin should modify the normalized payload or react to lifecycle hooks.
PRO and side-effect boundary
Ordinary Foxpost, Packeta, GLS, DPD, MPL/Posta, Sameday, Express One, Trans-Sped, Csomagpiac, and custom label generation is a PRO feature. Kvikk follows a separately configured path in 4.2.8 and is exempt from the generic PRO gate in generate_label().
Generating or voiding a label calls an external carrier service and may create a chargeable shipment. Require explicit user authorization immediately before a companion UI, REST route, CLI command, or automation performs that call.
Normalized data pipeline
VP_Woo_Pont()->labels->prepare_order_data( $order ) creates a carrier-neutral array:
| Key | Meaning |
|---|---|
order_id, order_number |
Internal ID and display order number. |
reference_number, cod_reference_number |
Setting-selected references; may come from order number, order ID, invoice number, or custom order meta. |
invoice_number |
Számlázz.hu or Woo Billingo invoice number when present. |
customer |
Shipping identity, billing fallbacks, phone, and email. |
package |
Total, insurance total, weight, COD flag, currency, quantity, and resolved package size. |
point_id, provider |
Canonical order metadata. |
options |
Manual package count, pickup date, contents, weight, extra services, or packaging overrides. |
source |
Usually orders_table or metabox. |
Filter timing matters:
vp_woo_pont_prepare_label_data( $data, $order )runs at the end of the neutral builder.vp_woo_pont_prepare_order_data_for_label( $data, $order, $provider )runs immediately before provider dispatch.- A provider-specific filter such as
vp_woo_pont_gls_labelorvp_woo_pont_packeta_labelmay then change the provider request.
Prefer the neutral filters when the change applies to multiple carriers:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 28d ago First seen · 161 lines · 128 tokens per session scan A ae66e54d0844
vp-woo-pont-shipping-labels is a skill published in the GitHub repository Lonsdale201/wp-agent-skills (24 stars, last pushed 4d ago), licensed MIT. It adds 128 tokens to every session and 2,041 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-27.
Other skills, from other repositories
commerce-app-business-config
Manage custom business configuration in an Adobe Commerce app. Use when the user wants to add, modify, or remove merchant-configurable settings (config fields, admin config, store configuration) exposed through Commerce Admin. Creates typed config fields (text, password, email, url, tel, boolean, list) in…
commerce-app-api-mesh
Scaffold or update an Adobe API Mesh configuration (mesh.json) in front of a Commerce app: add GraphQL/OpenAPI sources, extend an existing Commerce GraphQL type with a new field, and wire a cross-source resolver for it. Use when the user mentions API Mesh, mesh.json, extending a Commerce GraphQL type (e.g. adding a…
doku-payment-gateway
Expert guide for integrating DOKU Payment Gateway: DOKU Checkout (Hosted & Modal Popup with HMAC-SHA256), Direct API SNAP BI Standard (VA, QRIS, Direct Debit with HMAC-SHA512), and Direct API Non-SNAP (Card Payment Page, OVO Push). Covers single-integration checkout, direct host-to-host APIs, webhook verification, and…
woocommerce-plugin-development
Create custom WooCommerce plugins using action/filter hooks, the Settings API, and REST API extensions to add features without modifying core.
webhook-integration
Dodo Payments webhook handling, covering endpoint setup, Standard Webhooks signature verification on the raw body, payment, subscription, and refund event types, idempotency with webhook-id, retries, and local testing. Use when receiving Dodo events, verifying webhook-signature headers, or syncing your database from…
better-auth-integration
Dodo Payments plugin for Better Auth (@dodopayments/better-auth) covering customer sync on signup, authenticated checkout, customer portal, usage ingestion, and verified webhooks. Use when an app uses Better Auth and needs the dodopayments, dodopaymentsClient, checkout, portal, usage, or webhooks plugins; for other…