Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Lonsdale201/wp-agent-skills --skill vp-woo-pont-tracking-automationsgit clone --depth 1 https://github.com/Lonsdale201/wp-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lonsdale201/wp-agent-skills/vp-woo-pont-tracking-automations)<a href="https://agentmods.dev/skills/lonsdale201/wp-agent-skills/vp-woo-pont-tracking-automations"><img src="https://agentmods.dev/badge/skills/lonsdale201/wp-agent-skills/vp-woo-pont-tracking-automations/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lonsdale201/wp-agent-skills/vp-woo-pont-tracking-automations"><img src="https://agentmods.dev/badge/skills/lonsdale201/wp-agent-skills/vp-woo-pont-tracking-automations.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00122 | $0.01989 |
| Opus 5.5 | $0.00049 | $0.00796 |
| Sonnet 5.5 | $0.00024 | $0.00398 |
| Haiku 4.5 | $0.00012 | $0.00199 |
Grade A, and why
vp-woo-pont-tracking-automations scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 151 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Tracking and automation integration
Shipment tracking, carrier-status synchronization, customer tracking pages, tracking emails, and status automations are PRO features. Feature-detect the runtime and settings; do not assume that the presence of the free plugin means tracking is enabled.
Tracking state
| Order meta | Meaning |
|---|---|
_vp_woo_pont_parcel_number |
Tracking/parcel number created with the label. |
_vp_woo_pont_parcel_info |
Provider-normalized event array, newest-first in the built-in UI. |
_vp_woo_pont_parcel_info_time |
Last successful synchronization timestamp. |
_vp_woo_pont_tracking_link |
Random token for the plugin's customer tracking URL. Treat it as a secret. |
_vp_woo_pont_tracking_emails_sent |
Names of tracking emails already sent. |
Read them through WC_Order::get_meta(). A normalized event generally contains event, date, and optional label, but event values remain provider-specific. Do not compare raw GLS, Packeta, MPL, or Foxpost codes across carriers.
Use the public helpers for links:
$order = wc_get_order( $order_id );
if ( $order instanceof WC_Order ) {
$carrier_link = VP_Woo_Pont()->tracking->get_tracking_link( $order );
$private_page = VP_Woo_Pont()->tracking->get_internal_tracking_link( $order );
}
The internal URL contains order ID plus _vp_woo_pont_tracking_link. Do not log, index, cache-share, or expose that token to unrelated users.
Scheduler lifecycle
After vp_woo_pont_label_created, supported non-custom carriers schedule a recurring Action Scheduler job:
| Contract | Value |
|---|---|
| Hook | vp_woo_pont_update_tracking_info |
| Argument | order_id |
| Group | vp_woo_pont |
| Default interval | Two hours |
vp_woo_pont_tracking_sync_interval( $seconds, $order, $provider ) changes the interval. Keep it large enough for carrier limits.
The updater cancels future work when the order is missing, the parcel number is absent, the sync deadline expires, or the latest normalized state is delivered. The default deadline is two weeks and can be changed through vp_woo_pont_tracking_info_sync_deadline.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 28d ago First seen · 151 lines · 122 tokens per session scan A 7e367d1ea4d9
vp-woo-pont-tracking-automations is a skill published in the GitHub repository Lonsdale201/wp-agent-skills (24 stars, last pushed 4d ago), licensed MIT. It adds 122 tokens to every session and 1,989 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-27.
Other skills, from other repositories
commerce-app-business-config
Manage custom business configuration in an Adobe Commerce app. Use when the user wants to add, modify, or remove merchant-configurable settings (config fields, admin config, store configuration) exposed through Commerce Admin. Creates typed config fields (text, password, email, url, tel, boolean, list) in…
commerce-app-api-mesh
Scaffold or update an Adobe API Mesh configuration (mesh.json) in front of a Commerce app: add GraphQL/OpenAPI sources, extend an existing Commerce GraphQL type with a new field, and wire a cross-source resolver for it. Use when the user mentions API Mesh, mesh.json, extending a Commerce GraphQL type (e.g. adding a…
doku-payment-gateway
Expert guide for integrating DOKU Payment Gateway: DOKU Checkout (Hosted & Modal Popup with HMAC-SHA256), Direct API SNAP BI Standard (VA, QRIS, Direct Debit with HMAC-SHA512), and Direct API Non-SNAP (Card Payment Page, OVO Push). Covers single-integration checkout, direct host-to-host APIs, webhook verification, and…
woocommerce-plugin-development
Create custom WooCommerce plugins using action/filter hooks, the Settings API, and REST API extensions to add features without modifying core.
webhook-integration
Dodo Payments webhook handling, covering endpoint setup, Standard Webhooks signature verification on the raw body, payment, subscription, and refund event types, idempotency with webhook-id, retries, and local testing. Use when receiving Dodo events, verifying webhook-signature headers, or syncing your database from…
better-auth-integration
Dodo Payments plugin for Better Auth (@dodopayments/better-auth) covering customer sync on signup, authenticated checkout, customer portal, usage ingestion, and verified webhooks. Use when an app uses Better Auth and needs the dodopayments, dodopaymentsClient, checkout, portal, usage, or webhooks plugins; for other…