Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add narrative-io/narrative-skills-marketplace --skill create-workflowgit clone --depth 1 https://github.com/narrative-io/narrative-skills-marketplaceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/narrative-io/narrative-skills-marketplace/create-workflow)<a href="https://agentmods.dev/skills/narrative-io/narrative-skills-marketplace/create-workflow"><img src="https://agentmods.dev/badge/skills/narrative-io/narrative-skills-marketplace/create-workflow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/narrative-io/narrative-skills-marketplace/create-workflow"><img src="https://agentmods.dev/badge/skills/narrative-io/narrative-skills-marketplace/create-workflow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high System Prompt Leakage · line 125 Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.Fix: Remove any instructions that reveal, print, or output system prompts or internal rules. System instructions should never be exposed to end users.
- medium Excessive Agency · line 426 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 431 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00138 | $0.04993 |
| Opus 5.5 | $0.00055 | $0.01997 |
| Sonnet 5.5 | $0.00028 | $0.00999 |
| Haiku 4.5 | $0.00014 | $0.00499 |
Grade A, and why
create-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 452 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Create Workflow
Persona
You are a senior data engineer who turns a fuzzy "automate this" request into a Narrative workflow specification and submits it. You optimize for:
- Specification correctness — the YAML conforms to the Serverless
Workflow DSL Narrative implements, every task
callis one of the seven supported tasks, and everywith:block has the fields that task actually accepts. - Reuse over invention — start from the closest matching example in
assets/examples/, adapt it, and only add structure the user actually asked for. No conditional branches, no parallel fan-out, no retry logic — those are not supported. - Transparency before submit — the user sees and approves a
plain-English description of what the workflow does, the chosen
data plane, and the
trigger_immediately/schedule_immediatelyflags before anything is created server-side. Most users on this skill are non-technical; the raw YAML is hidden by default and shown only when the user asks for it (--show-specor--dry-run).
You never submit a workflow without showing the spec first, never
invent a task name, parameter, or NQL identifier, and never claim a
run succeeded without observing it in narrative_workflow_runs_list.
Output rules
Don't surface _nio_* field names to the user. Columns and
fields whose names start with _nio_ (e.g., _nio_last_modified_at,
_nio_sample_128) are platform-managed internals. Handle them
silently as this skill instructs — filtering, skipping, or accepting
auto-generated mappings — but do not name them in user-facing output:
lists, tables, summaries, warnings, status messages, or final
responses. Refer to them generically ("platform-managed columns",
"reserved internal fields") if you need to acknowledge them at all.
Exception: if the user expressly asks about _nio_* fields, answer
normally.
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/examples/01-single-materialized-view.yaml 1.1 KB
- assets/examples/02-refresh-existing-view.yaml 708 B
- assets/examples/03-multi-step-pipeline.yaml 1.5 KB
- assets/examples/04-data-passing-export-context.yaml 1.6 KB
- assets/examples/05-scheduled-daily-refresh.yaml 984 B
- assets/examples/06-create-rosetta-stone-mappings.yaml 1.6 KB
- assets/examples/07-identity-resolution-label-components.yaml 2.4 KB
- assets/examples/08-dml-audit-log.yaml 1.1 KB
- assets/examples/09-run-model-inference.yaml 1.4 KB
- assets/examples/10-dataset-sample-after-refresh.yaml 757 B
- assets/examples/11-identity-graph-multi-source-build.yaml 10 KB
- assets/INDEX.md 2.6 KB
- assets/templates/workflow-skeleton.yaml 1.0 KB
- references/DSL_INVARIANTS.md 2.5 KB
- references/EDGE_CASES.md 1.8 KB
- references/HARNESS_FALLBACK.md 1.7 KB
- references/HARNESS_FALLBACK.md.tmpl 1.2 KB
- references/MODES.md 2.5 KB
- SKILL.md.tmpl 18 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 452 lines · 138 tokens per session scan A c0fe80e5d501
create-workflow is a skill published in the GitHub repository narrative-io/narrative-skills-marketplace (9 stars, last pushed yesterday), licensed MIT. It adds 138 tokens to every session and 4,993 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
create-workflow compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| create-workflownarrative-io/narrative-skills-marketplace | Skill | 9 | yesterday | MIT | A | 138 | Claude Code |
| ops-demoSnowflake-Labs/cocoplus | Skill | 728 | 3d ago | MIT | A | 46 | Claude Code |
| managing-astro-local-envastronomer/agents | Skill | 459 | 7d ago | Apache-2.0 | A | 63 | Claude Code |
| checking-freshnessastronomer/agents | Skill | 459 | 7d ago | Apache-2.0 | A | 44 | Claude Code |
| daily-life-discoverymagnus919/agent-skills | Skill | 172 | yesterday | MIT | A | 101 | Claude Code, Codex |
| esp32-developmentmagnus919/agent-skills | Skill | 172 | yesterday | MIT | A | 133 | Claude Code, Codex |
| diarySnowflake-Labs/cocoplus | Skill | 728 | 3d ago | MIT | A | 12 | Claude Code, Codex |