Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ooooooooooooooooooop/agent-tools/skill-quality-gatenpx skills add ooooooooooooooooooop/agent-tools --skill skill-quality-gategit clone --depth 1 https://github.com/ooooooooooooooooooop/agent-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ooooooooooooooooooop/agent-tools/skill-quality-gate)<a href="https://agentmods.dev/skills/ooooooooooooooooooop/agent-tools/skill-quality-gate"><img src="https://agentmods.dev/badge/skills/ooooooooooooooooooop/agent-tools/skill-quality-gate.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00070 | $0.00703 |
| Opus 5 | $0.00035 | $0.00351 |
| Sonnet 5 | $0.00014 | $0.00141 |
| Haiku 4.5 | $0.00007 | $0.00070 |
Grade A, and why
skill-quality-gate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
83% identical to luban — 526 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
What it actually says
Skill 质量门禁
适用范围
使用本 Skill 审查一个 Skill 包或一个 Skill 仓库的行为质量，重点关注：
- 触发条件是否足够具体，是否明确不适用场景。
- 工作流程是否有顺序、边界和可执行的判断。
- 输出契约是否能让用户和测试复核结果。
- 安全边界、事实/假设区分和副作用控制是否完整。
- 示例、脚本和回归测试是否真正覆盖 Skill 的关键行为。
默认只读。用户明确要求修改时，先输出问题清单和最小改动面，再实施修改。
不适用场景
- 只检查
skills.json、目录、链接或元数据完整性：使用skill-repository-maintainer。 - 只需要执行一个已知 Skill，而不是评估 Skill 本身。
- 没有目标 Skill、示例或可观察输出，无法进行行为评估时；应报告证据不足，不得凭感觉打分。
审查流程
- 确认目标路径、版本、语言、依赖和本次审查范围。
- 读取
SKILL.md、agents/openai.yaml、示例、引用资料和脚本；不把运行时文件当作 Skill 内容。 - 评估触发、边界、流程、输出、验证和安全六个维度，分别记录事实、推断和缺失证据。
- 优先运行包内已有的 smoke test、示例检查或质量脚本；失败时保留原始错误。
- 按影响和修复成本排序，给出最小修复建议；不为了对称性重写整个包。
输出契约
输出以下内容：
PASS、PARTIAL或BLOCKED。- 目标 Skill 和版本。
- 通过项、失败项和证据路径。
- 触发边界、流程、输出、验证、安全六维结论。
- 按 P0/P1/P2 排序的改进项。
- 未验证的行为、残余风险和明确不应修改的范围。
不要把“结构校验通过”写成“行为质量通过”，也不要把旧输出或旧哈希当作本次修改的证据。
验证
对仓库内的 Skill 包运行：
python3 skill-quality-gate/scripts/quality_report.py --root . --strict
脚本只使用 Python 标准库，检查 frontmatter、长度、边界/输出/验证章节、UI 元数据和非空示例。复杂 Skill 仍需运行自己的回归测试；结构脚本不能替代真实任务前测。
详细评分维度见 质量评分表。
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 58 lines · 70 tokens per session scan A 79d170d53a47
skill-quality-gate is a skill published in the GitHub repository ooooooooooooooooooop/agent-tools (2 stars, last pushed 5d ago), licensed MIT. It adds 70 tokens to every session and 703 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 83% identical to luban, differing in 526 lines, and is treated as a copy.
Other skills, from other repositories
zlog
Multi-agent session log compressor and storage optimizer. Compresses .log, .out, .txt, .trace (>10KB) to .zst, .xz, or .gz (saving 77%-99.9% disk space) across /.gemini, /.config/Cursor, /.ollama, /.claude, /.windsurf, /.codex, etc. Auto-discovers AI log dirs, purges empty 0-byte logs. Safe for concurrent…
amazon-reviews-api-skill
This skill helps users automatically extract Amazon product reviews via the Amazon Reviews API. Agent should proactively apply this skill when users express needs like getting reviews for Amazon product with ASIN B07TS6R1SF, analyzing customer feedback for a specific Amazon item, getting ratings and comments for a…
amazon-competitor-analyzer
Scrapes Amazon product data from ASINs using browseract.com automation API and performs surgical competitive analysis. Compares specifications, pricing, review quality, and visual strategies to identify competitor moats and vulnerabilities.
muapi-media-editing
Edit and enhance images and videos with AI via muapi.ai — prompt-based editing, upscaling, background removal, face swap, lipsync, video effects, and more.
ctf-malware
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process…
ecommerce-landing-page
Audit and optimize e-commerce landing pages for conversion. CTA placement, trust signals, page structure, copy optimization, and A/B testing strategy for product pages, collection pages, and campaign landing pages.