Borrowing it
Nothing to install: this file belongs to parawanderer/OpenTagViewer. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/parawanderer/OpenTagViewer/main/.claude/skills/add-strings/SKILL.mdgit clone --depth 1 https://github.com/parawanderer/OpenTagViewerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/parawanderer/opentagviewer/add-strings)<a href="https://agentmods.dev/skills/parawanderer/opentagviewer/add-strings"><img src="https://agentmods.dev/badge/skills/parawanderer/opentagviewer/add-strings/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/parawanderer/opentagviewer/add-strings"><img src="https://agentmods.dev/badge/skills/parawanderer/opentagviewer/add-strings.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium analysis-evasion · line 1 Suspicious Unicode normalization or mixed-script contentFix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.01188 |
| Opus 5.5 | $0.00018 | $0.00475 |
| Sonnet 5.5 | $0.00009 | $0.00238 |
| Haiku 4.5 | $0.00005 | $0.00119 |
Grade A, and why
add-strings scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 117 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Adding user-facing strings
The app ships ten locales. A string missing from one silently falls back to English — nothing fails, and it looks correct in whichever language you happen to read. So every UI string has to land in every locale in one go.
The rule that matters
Never pass translations through a shell argument. Write a JSON file with the Write tool,
then point the script at it. Passing non-ASCII text through bash -c, sed or a here-doc has
corrupted it twice in this repo — a French apostrophe reached the screen as a literal
\’. The Write tool does not go through shell quoting; a for loop does.
For the same reason, do not hand-edit ten strings.xml files with ten Edit calls unless the
script cannot do what you need. It is slower and it is what the script exists to replace.
Workflow
-
Find out which locales are required — do not assume, they are discovered from the tree:
python scripts/add_strings.py --locales -
Write the JSON with the Write tool, one entry per string, every locale present:
{ "how_do_i_get_the_zip": { "default": "How do I get the zip?", "en": "How do I get the zip?", "de": "Wie erhalte ich die ZIP-Datei?", "fr": "Comment obtenir l’archive zip ?", "nl": "Hoe kom ik aan de zip?", "ru": "Как получить zip-архив?", "ja": "zip ファイルの入手方法", "ko": "zip 파일은 어떻게 받나요?", "zh-rCN": "如何获取 zip 文件?", "zh-rTW": "如何取得 zip 檔案?" } }Put it in the scratchpad or
tmp/, not in the repo root. -
Apply, then confirm nothing drifted:
python scripts/add_strings.py tmp/new_strings.json python scripts/add_strings.py --check -
Build.
aaptis the real judge of whether the XML is acceptable:JAVA_HOME='C:\Program Files\Android\Android Studio\jbr' ./gradlew.bat :app:assembleDebug
Flags
| Command | What it does |
|---|---|
add_strings.py (no args) |
Prints full usage and the input format |
--locales |
Lists discovered locales and their files |
<file.json> |
Adds strings; errors if any locale is missing or the name already exists |
--fill <file.json> |
Adds only where missing — for back-filling what --check reported |
--show <name>... |
Prints existing strings in the input format, ready to edit |
--replace <file.json> |
Rewords strings that already exist; errors if one is not defined everywhere |
--remove <name>... |
Deletes strings from every locale; errors if a name exists nowhere |
--check |
Fails if any locale lacks a string the default locale has. Run before a PR |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 117 lines · 46 tokens per session scan A 0b122e85d1f0
add-strings is a skill published in the GitHub repository parawanderer/OpenTagViewer (450 stars, last pushed 3d ago), licensed MIT. It adds 46 tokens to every session and 1,188 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
maui-localization-theming
Implement MAUI localization and theming. USE FOR: RESX/AppResources, runtime culture switching, RTL/FlowDirection, platform language metadata, AppThemeBinding, DynamicResource, light/dark/system themes, UserAppTheme. DO NOT USE FOR: general layout, accessibility audits, icon/splash assets.
gplay-metadata-sync
Store listing text and images as an on-disk tree synced with Play via gplay metadata. Use when editing a store listing or its screenshots, adding a locale, pulling the listing into version control, or gating a listing change in CI.
swift-formatstyle
Locale-aware value formatting and parsing on iOS/macOS with Foundation's FormatStyle / ParseableFormatStyle protocols — the modern replacement for NumberFormatter / DateFormatter / DateComponentsFormatter subclasses. Covers number styles (IntegerFormatStyle / FloatingPointFormatStyle via .number with .precision /…
localization-patterns
Localization patterns for mobile - string resources, plurals, RTL support, Compose localization, KMP shared strings, and locale management.
localization-patterns
Localization patterns for mobile - string resources, plurals, RTL support, Compose localization, KMP shared strings, and locale management.
cn-android-flavor
A release guide for the China-market Android version of a Flutter app. It covers China-based services such as JPush, WeChat, Alipay, and content moderation, while requiring the app to exclude Google services and follow local app-name and data-collection rules.