Borrowing it
Nothing to install: this file belongs to PsychQuant/che-ical-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/PsychQuant/che-ical-mcp/main/.agents/skills/spectra-apply/SKILL.mdgit clone --depth 1 https://github.com/PsychQuant/che-ical-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/psychquant/che-ical-mcp/spectra-apply)<a href="https://agentmods.dev/skills/psychquant/che-ical-mcp/spectra-apply"><img src="https://agentmods.dev/badge/skills/psychquant/che-ical-mcp/spectra-apply/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/psychquant/che-ical-mcp/spectra-apply"><img src="https://agentmods.dev/badge/skills/psychquant/che-ical-mcp/spectra-apply.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00014 | $0.02798 |
| Opus 5 | $0.00007 | $0.01399 |
| Sonnet 5 | $0.00003 | $0.00560 |
| Haiku 4.5 | $0.00001 | $0.00280 |
Grade A, and why
spectra-apply scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 292 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Implement tasks from a Spectra change.
Input: Optionally specify a change name (e.g., $spectra-apply add-auth). If omitted, check if it can be inferred from conversation context. If vague or ambiguous you MUST prompt for available changes.
Task tracking is file-based only. The tasks file's markdown checkboxes (- [ ] / - [x]) are the single source of truth for progress. Do NOT use any external task management system, built-in task tracker, or todo tool. When a task is done, edit the checkbox in the tasks file — that is the only way to record progress.
Prerequisites: This skill requires the spectra CLI. If any spectra command fails with "command not found" or similar, report the error and STOP.
Steps
-
Select the change
If a name is provided, use it. Otherwise:
- Infer from conversation context if the user mentioned a change
- Auto-select if only one active change exists
- If ambiguous, run
spectra list --jsonANDspectra list --parked --jsonto get all available changes (including parked ones). Parked changes should be annotated with "(parked)" in the selection list. Use the AskUserQuestion tool to let the user select
Always announce: "Using change: " and how to override (e.g.,
$spectra-apply <other>). -
Check status to understand the schema
spectra status --change "<name>" --jsonIf the command fails: show the error and STOP.
If the command succeeds, check whether the change is parked (status can succeed even for parked changes):
spectra list --parked --jsonLook for the change name in the
parkedarray of the JSON output.-
If the change IS in the parked list (it's parked): Inform the user that this change is currently parked(暫存). Use the AskUserQuestion tool to ask whether to continue. Two options:
- Continue: Unpark the change and proceed with apply
- Cancel: Stop the workflow
If the user chooses to continue:
spectra unpark "<name>"Then mark it as in-progress:
spectra in-progress add "<name>"This is a silent operation — do not show the output to the user.
Then re-run
spectra status --change "<name>" --jsonand continue normally.If there is no AskUserQuestion tool available (non-Claude-Code environment): Inform the user that this change is currently parked(暫存)and ask via plain text whether to unpark and continue, or cancel. Wait for the user's response. If the user confirms, run
spectra unpark "<name>", then setspectra in-progress add "<name>", and continue normally. -
If the change is NOT in the parked list: mark it as in-progress and proceed normally.
spectra in-progress add "<name>"This is a silent operation — do not show the output to the user.
Parse the JSON to understand:
schemaName: The workflow being used (e.g., "spec-driven")- Which artifact contains the tasks (typically "tasks" for spec-driven, check status for others)
-
-
Get apply instructions
spectra instructions apply --change "<name>" --jsonThis returns:
- Context file paths (varies by schema)
- Progress (total, complete, remaining)
- Task list with status
- Dynamic instruction based on current state
Handle states:
- If
state: "blocked"(missing artifacts): show message, suggest using$spectra-proposeto create the change artifacts first - If
state: "all_done": congratulate, suggest archive - Otherwise: proceed to implementation
3b. Preflight check
If the apply instructions JSON includes a preflight field, act on its status:
"clean": silently continue — no output needed."warnings": display a brief summary, then continue automatically:
Only show the lines that are relevant (skip drifted if none, skip staleness if not stale).⚠ Preflight warnings: - Drifted files (modified after change was created): <list paths> - Change is <N> days old Continuing..."critical": display missing files with their source artifact, then use the AskUserQuestion tool to ask the user:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 292 lines · 14 tokens per session scan A ccd9484a7750
spectra-apply is a skill published in the GitHub repository PsychQuant/che-ical-mcp (36 stars, last pushed yesterday), licensed MIT. It adds 14 tokens to every session and 2,798 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
apple-pim
Native macOS personal information management for calendars, reminders, contacts, and local Mail.app. Use when the user wants to schedule meetings, create events, check their calendar, create or complete reminders, look up contacts, find someone's phone number or email, manage tasks and to-do lists, triage local…
apple-calendar-cli
You have access to apple-calendar-cli, a command-line tool for managing Apple Calendar events via EventKit on macOS.
macos-harness
Control a whole Mac from one persistent Python session with screenshots, PID-targeted input, an animated virtual pointer, targeted Apple Accessibility, Apple Events, Browser Harness CDP, and filesystem access. Use for native, Electron, browser, dialog, file, or cross-app tasks without moving the physical cursor or…
findmy
Query Find My friend locations on macOS via the findmy-cli plugin tools. Returns name, coarse location (city, state), staleness, and distance for everyone in the FindMy.app People sidebar. Use when the user asks "where is X", "is X home", "how far is X", or wants a location refresh.
fetch-weather-report
Fetch the current weather forecast for a specified location and return a structured summary.
macos-control
Control macOS GUI applications via mouse automation, keyboard input, screenshots, image recognition, and AppleScript execution. Use when you need to interact with macOS app UIs, take screenshots, click buttons, type text, scroll, drag, or locate images on screen.