Borrowing it
Nothing to install: this file belongs to moberghr/mtk-agent-toolkit. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/moberghr/mtk-agent-toolkit/main/.claude/skills/mtk/SKILL.mdgit clone --depth 1 https://github.com/moberghr/mtk-agent-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/moberghr/mtk-agent-toolkit/mtk)<a href="https://agentmods.dev/skills/moberghr/mtk-agent-toolkit/mtk"><img src="https://agentmods.dev/badge/skills/moberghr/mtk-agent-toolkit/mtk/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/moberghr/mtk-agent-toolkit/mtk"><img src="https://agentmods.dev/badge/skills/moberghr/mtk-agent-toolkit/mtk.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 21 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Rogue Agent · line 203 Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.Fix: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime.
- medium Agent Snooping · line 128 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 130 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 129 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 138 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 131 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 132 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 133 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 134 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 135 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 136 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 137 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 139 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 140 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 141 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 142 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 143 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 144 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 145 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Excessive Agency · line 172 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.03505 |
| Opus 5.5 | $0.00007 | $0.01402 |
| Sonnet 5.5 | $0.00003 | $0.00701 |
| Haiku 4.5 | $0.00002 | $0.00350 |
Grade A, and why
mtk scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
MTK — Unified Entry Point
You are a router. Classify the user's intent from their input, then load and follow the matching workflow skill inline. Do not do the work yourself — delegate by reading the target skill and following it end-to-end.
Route Table
Match the user's input against these patterns. Check from top to bottom; first match wins.
Order matters — do not "tidy" it. batch-fix sits above pre-commit-review and fix on purpose: its multi-word phrases (apply review findings, batch fix, several fixes) contain those rows' single-word keywords (review, fix), so a lower position would let them shadow it. The PR-mining row sits above pre-commit-review for the same reason: "mine PR reviews" contains review. The duplicates row sits high too: lower down, add (implement) or the bare audit (setup redirect) would take "find duplicate capabilities before I add another mapper" or "audit duplicates". The converge row sits above the setup redirect so the bare principles keyword cannot turn it into a full setup run. scripts/run-fixtures.sh simulates first-match-wins precedence and will fail if the order regresses.
| Pattern (keywords / intent) | Route to | Example inputs |
|---|---|---|
escalated from fix (batch) (internal marker: fix found multiple independent fixes) |
.claude/skills/batch-fix/SKILL.md |
— internal self-escalation only |
escalated from fix, escalated from batch-fix (internal markers from Scope Guards) |
.claude/skills/implement/SKILL.md |
— internal self-escalation only |
batch fix, apply findings, apply review findings, corrective batch, several fixes, multiple fixes |
.claude/skills/batch-fix/SKILL.md |
"apply these review findings", "run a batch fix over these nits" |
audit duplicates, audit-duplicates, duplicate capabilities, find existing helper, find an existing helper, is there an existing helper, already have a helper |
.claude/skills/prior-work-check/SKILL.md |
"audit duplicates", "find duplicate capabilities before I add another mapper" |
mine pr, pr mining, pr review mining, reviewer feedback, reviewers keep |
.claude/skills/repo-health/SKILL.md (PR-mining section) |
"mine PR reviews", "what do reviewers keep repeating?" |
review, check, commit, staged, pre-commit, before I commit |
.claude/skills/pre-commit-review/SKILL.md |
"review before commit", "check staged changes" |
repo-health, repo health, readiness, scorecard, ai-ready, ai ready, repo report |
.claude/skills/repo-health/SKILL.md |
"is this repo AI-ready?", "run repo-health" |
doctor, install broken, integrity, install health |
.claude/skills/mtk-doctor/SKILL.md |
"run mtk doctor", "is the install broken?" |
toolkit health, usage, stats, analytics, adoption |
.claude/skills/mtk-doctor/SKILL.md (--usage) |
"toolkit health", "show usage stats" |
research, best practice, best-practice, current way, latest version, up to date, migration guide, upgrade guide |
.claude/skills/research-context/SKILL.md |
"research the current EF Core batching approach", "what's the best-practice for X in v9" |
fix, bug, broken, error, typo, patch, wrong, failing |
.claude/skills/fix/SKILL.md |
"fix the null check", "this test is broken" |
add, create, build, feature, implement, new, endpoint, refactor (multi-file) |
.claude/skills/implement/SKILL.md |
"add user auth", "create a payment endpoint" |
status, what's loaded, context report, diagnostic, active config |
.claude/skills/mtk-doctor/SKILL.md |
"what's loaded?", "show toolkit status", "context report" |
audit claude.md, claude.md audit, is claude.md still good, claude.md stale, memory rot, claude.md quality, audit agents.md, agents.md audit, instructions audit, audit instructions |
.claude/skills/instructions/SKILL.md (mode audit) |
"audit AGENTS.md", "is CLAUDE.md still good?" |
capture claude.md, update claude.md, save what we learned, session learnings, remember this for next time, revise claude.md, capture instructions, instructions capture, update agents.md |
.claude/skills/instructions/SKILL.md (mode capture) |
"save what we learned to AGENTS.md", "capture instructions from this session" |
promote lesson, promote this lesson, share lesson, share this lesson |
.claude/skills/lessons/SKILL.md (mode promote) |
"promote this lesson to the team", "share that lesson" |
mine lessons, what did we learn, harvest lessons, lesson sweep, mine transcripts |
.claude/skills/lessons/SKILL.md (mode mine) |
"mine lessons from last week", "what did we learn this sprint?" |
refresh lessons, audit lessons, stale lessons, prune lessons, clean up lessons |
.claude/skills/lessons/SKILL.md (mode refresh) |
"are the lessons stale?", "clean up lessons.md" |
capture this lesson, capture a lesson, capture lesson, record this lesson, golden path, correction capture |
.claude/skills/lessons/SKILL.md (mode capture) |
"capture this lesson", "record this lesson for the team" |
hand off, handoff, save state, snapshot session, resume, pick up, continue from handoff |
.claude/skills/handoff/SKILL.md |
"hand off to a teammate", "save state before I stop" |
converge, convergence, principle drift, drift from the principles, drifted from the principles |
.claude/skills/mtk-setup/SKILL.md (direct the user to /mtk-setup --check) |
"converge", "where has the code drifted from the principles?" |
setup, bootstrap, init, initialize, first time, prepare repo, audit, architecture, principles |
/mtk-setup (direct the user) |
"set up this repo", "audit this repo" |
help, commands, what can you do |
(print help below) | "help", "what commands are there?" |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed 882d86019e34
- 16d ago Changed · -107 lines 2ccf077a60f8
- 1mo ago Changed 6fcec67d3780
- 1mo ago Changed 9db347d101d6
- 2mo ago First seen · 225 lines · 17 tokens per session scan A 40bf91468040
mtk is a skill published in the GitHub repository moberghr/mtk-agent-toolkit (9 stars, last pushed 8d ago), licensed MIT. It adds 17 tokens to every session and 3,505 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…