Borrowing it
Nothing to install: this file belongs to niaka3dayo/agent-skills-vrc-udon. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/niaka3dayo/agent-skills-vrc-udon/dev/.claude/skills/unity-vrc-skills-renovator/SKILL.mdgit clone --depth 1 https://github.com/niaka3dayo/agent-skills-vrc-udonWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/niaka3dayo/agent-skills-vrc-udon/unity-vrc-skills-renovator)<a href="https://agentmods.dev/skills/niaka3dayo/agent-skills-vrc-udon/unity-vrc-skills-renovator"><img src="https://agentmods.dev/badge/skills/niaka3dayo/agent-skills-vrc-udon/unity-vrc-skills-renovator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/niaka3dayo/agent-skills-vrc-udon/unity-vrc-skills-renovator"><img src="https://agentmods.dev/badge/skills/niaka3dayo/agent-skills-vrc-udon/unity-vrc-skills-renovator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Rogue Agent · line 8 Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.Fix: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime.
- medium Agent Snooping · line 50 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 51 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00101 | $0.02303 |
| Opus 5.5 | $0.00040 | $0.00921 |
| Sonnet 5.5 | $0.00020 | $0.00461 |
| Haiku 4.5 | $0.00010 | $0.00230 |
Grade A, and why
unity-vrc-skills-renovator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 257 lines — stays where its author put it; the contents beside it link to each section on GitHub.
VRC Skills Renovator
Overview
A guide for renovating (filling knowledge, refreshing, and improving quality of) VRChat-related skills in this repository.
Three Pillars of Renovation
| Pillar | Description | Examples |
|---|---|---|
| Fill | Adding missing knowledge | Undocumented APIs, patterns, tips |
| Refresh | Updating outdated information | New SDK version support, removing deprecated APIs |
| Quality Improvement | Improving accuracy and coverage of existing knowledge | Adding code examples, improving explanations |
Target Skills
Path notation:
skills/refers to theskills/directory at the repository root.rules/refers to files underskills/unity-vrc-udon-sharp/rules/. This skill itself resides at.claude/skills/unity-vrc-skills-renovator/(dev-only, not distributed via npm).
| Skill | Directory | Content |
|---|---|---|
unity-vrc-udon-sharp |
skills/unity-vrc-udon-sharp/ |
UdonSharp coding, networking, events |
unity-vrc-world-sdk-3 |
skills/unity-vrc-world-sdk-3/ |
VRC components, layer settings, world optimization |
Renovation Procedure
Phase 1: Current State Analysis
- Check the active and verified SDK target for each skill
Read: skills/unity-vrc-udon-sharp/SKILL.md
Read: skills/unity-vrc-world-sdk-3/SKILL.md
→ Check the "Active support / last verified" line in each file
- Check the file list for each skill
Glob: skills/unity-vrc-udon-sharp/**/*
Glob: skills/unity-vrc-world-sdk-3/**/*
Phase 2: Information Gathering
Execute the following search queries in parallel to collect the latest information:
# Required searches (parallel execution recommended)
1. "VRChat SDK {current year} new features updates changelog"
2. "UdonSharp VRChat SDK 3.{next minor version} changes"
3. "VRChat Worlds SDK {current year} UdonSharp"
4. "VRChat World SDK components new features {current year}"
# Supplementary searches (as needed)
5. "VRChat SDK NetworkCallable parameters"
6. "VRChat SDK persistence PlayerData"
7. "VRChat SDK PhysBones Contacts worlds"
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed 651da9abaff5
- 1mo ago Changed e502b307196e
- 1mo ago First seen · 257 lines · 101 tokens per session scan A ebb8fd15c59c
unity-vrc-skills-renovator is a skill published in the GitHub repository niaka3dayo/agent-skills-vrc-udon (339 stars, last pushed 1mo ago), licensed MIT. It adds 101 tokens to every session and 2,303 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
neo4j-snowflake-graph-analytics-skill
Run Neo4j Graph Analytics algorithms (PageRank, Louvain, WCC, Dijkstra, KNN, Node2Vec, FastRP, GraphSAGE) directly inside Snowflake without moving data. Use when running graph algorithms against Snowflake tables via the Neo4j Snowflake Native App ("GDS Snowflake", "graph algorithms in Snowflake", "Neo4j Graph…
neo4j-aura-graph-analytics-skill
Serverless Aura Graph Analytics (AGA) GDS Sessions — covers GdsSessions, AuraGraphDataScience, AuraAPICredentials, DbmsConnectionInfo, SessionMemory, getorcreate, remote graph projection with gds.graph.project.cypher and gds.graph.project.remote, gds.graph.project.native, gds.graph.construct, graphdatascience client…
neo4j-document-import-skill
Ingests unstructured and semi-structured documents into Neo4j as a knowledge graph. Use when chunking PDFs, HTML, plain text, or Markdown; extracting entities and relationships from text with an LLM (SimpleKGPipeline, neo4j-graphrag); loading JSON via apoc.load.json; building Document→Chunk→Entity graph structures; or…
neo4j-import-skill
Import structured data into Neo4j — LOAD CSV, CALL IN TRANSACTIONS, neo4j-admin database import full (offline bulk), apoc.load.csv/json, apoc.periodic.iterate, driver batch writes. Covers method selection, header file format, type coercion, null handling, ON ERROR modes, CONCURRENT TRANSACTIONS, pre-import constraint…
neo4j-aura-agent-skill
Manages Neo4j Aura Agents via the v2beta1 REST API — create, list, get, update, delete, and invoke Aura agents backed by an AuraDB instance. Use when configuring Aura Agent tools (CypherTemplate, SimilaritySearch, Text2Cypher), setting system prompts, deploying agents to REST or MCP endpoints, invoking agents with…
neo4j-driver-dotnet-skill
Neo4j .NET Driver v6 — IDriver lifecycle, DI registration (singleton), ExecutableQuery fluent API, ExecuteReadAsync/ExecuteWriteAsync managed transactions, IResultCursor (FetchAsync/ ToListAsync), record value access (.Get /As ), null safety, UNWIND batching, temporal types, await using, EagerResult, object mapping…