Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ml8s/liki --skill liki-naminggit clone --depth 1 https://github.com/ml8s/likiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ml8s/liki/liki-naming)<a href="https://agentmods.dev/skills/ml8s/liki/liki-naming"><img src="https://agentmods.dev/badge/skills/ml8s/liki/liki-naming/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ml8s/liki/liki-naming"><img src="https://agentmods.dev/badge/skills/ml8s/liki/liki-naming.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 12 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 17 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Data Exfiltration · line 116 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00078 | $0.01024 |
| Opus 5 | $0.00039 | $0.00512 |
| Sonnet 5 | $0.00016 | $0.00205 |
| Haiku 4.5 | $0.00008 | $0.00102 |
Grade A, and why
liki-naming scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Liki 起名 — 八字用神 + 五行选字
覆盖通用起名、外国人起中文名与自选名评估。八字与字库属性由引擎计算，LLM 只在引擎返回范围内做语义、出处、音韵与文化适配筛选。
启动与 RPC
- 外部安装副本先读本地
VERSION与https://liki.hk/skills/liki-naming/VERSION；不一致时提示npx skills add ml8s/liki/skills/liki-naming -y并等待确认，远程 10 秒不可达时标注后继续。托管环境跳过检查。 - POST JSON-RPC：默认
https://liki.hk/jsonrpc，设置LIKI_RPC_URL时使用该端点；Content-Type 为application/json。 - 用
rpc.discover读取bazi.chart,bazi.fullchart,qiming,city.coords,tianwen.time的最终 schema。 - 完成上述检查后进入路由。
路由
| 用户问题 | 入口 |
|---|---|
| 起名 / 改名 | app/naming.md |
| 外国人起中文名 | app/foreign.md |
| 评估自选名字 | app/selfcheck.md |
核心流程
| 步骤 | 条件 | 动作 | 产物 |
|---|---|---|---|
| 1 | 有出生信息 | bazi.chart → bazi.fullchart |
用神 / 喜神 / 忌神 |
| 1 | 无出生信息 | 询问期望五行或按“不限”处理 | 五行策略 |
| 2 | 生成名字 | 确认偏好 → qiming.pick |
字池 |
| 3 | 生成名字 | 在返回 chars 内过滤 → qiming.compose |
候选名 |
| 4 | 生成名字 | qiming.check(given_names) |
字库 / 音韵 / 五行校验 |
| 5 | 自选名评估 | 直接 qiming.check(given_names) |
评估事实 |
| 6 | 输出 | 按 app 模板综合 | 推荐 + 依据 + 可商榷点 |
硬边界
- 排盘、用神、字池、字符属性全部来自 RPC；缺失字段标注不可用。
- 生成流候选字仅从
qiming.pick返回的chars过滤；必含字冲突时报告并请用户选择。 qiming.compose只传字；qiming.check的given_names只传不含姓的名。- 无出生信息时跳过五行匹配，并明确输出未评估用神。
- 出处分为直接典故、字义联想、现代审美、未确认；直接典故必须给可核书名、篇名与原文。
- 起名仅使用八字，不引入紫微合参。
输出契约
- 生成类首轮 5-8 个精选候选；每个候选列优点、可商榷点与五行 / 音韵 / 出处依据，不创建分数或新的吉凶档。
- 附代表性不推荐清单和具体淘汰原因；候选不足时如实说明。
- 有排盘时说明用神依据；无排盘时说明未评估用神。
- 输出语言跟随用户；英文首次出现核心术语时括注英文；外国用户中文名保留拼音，解释可用英文。
JSON-RPC 参数错误按 schema 修正后重试；网络超时告知用户可重试；HTTP 403 更换 HTTP 客户端或请求头。反馈提交到 https://liki.hk/api/feedback，请求体使用 UTF-8。
交互与安全
- 参数收集一次列出默认建议和编号选项；关键候选名先确认再深入。
- 仅服务起名话题；明显焦虑时引导专业帮助，避免相貌 / 命运定型化表述。
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · -63 lines scan B → A 08b450e59725
- 5d ago Changed · +7 lines 11caebf95d2b
- 6d ago Changed · +2 tokens per session a5e28b51a20b
- 10d ago First seen · 115 lines · 76 tokens per session scan B 15954817c647
liki-naming is a skill published in the GitHub repository ml8s/liki (58 stars, last pushed today), licensed MIT. It adds 78 tokens to every session and 1,024 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
aov-mingyu-api
An interface to the aov.cc public API for Chinese astrology, divination, tarot, calendars, and related prompt generation.
meihua-yishu
A Meihua Yishu divination tool, a traditional Chinese method related to the I Ching that interprets hexagrams, or six-line symbols. It can create readings from time, numbers, words or observed surroundings.
yueyuan
A specialised BaZi analysis system, where BaZi is a Chinese birth-chart method based on birth date and time. It is designed for structured analysis with explicit uncertainty and requires the user to check the chart before deeper interpretation.
horosa-agent
Use this skill when an AI agent is connected to Horosa Skill through MCP, CLI, Cursor, Claude, Codex, OpenClaw, Open WebUI, or another local-first client and needs to call Horosa metaphysics tools, generate reports, store memory, or debug user-facing results.
bazi-skill-gaoxin492-main
A Chinese Four Pillars astrology skill that uses local Python scripts to calculate and store birth charts, while the agent interprets the results. Four Pillars is a traditional Chinese system based on birth date and time.
fengshui-master
A guide to traditional Chinese feng shui, the practice of assessing places through their layout, surroundings, direction, and timing. It covers approaches including Flying Stars, Eight Houses, landform analysis, date selection, and links with Four Pillars astrology.