data2story-pro

data2story-pro is a skill for Claude Code from QinghongLin/data2story-skill. It costs 128 tokens per session (14,102 once invoked), scanned A, original, MIT.

A workflow that turns a dataset into a checked, multimedia blog article, including data analysis, charts, images, writing, and interactive elements.

In plain words
What is it for?
Use it to create a data-driven article or interactive dashboard from a dataset, with supporting analysis, visual material, written copy, and design.
Why use it?
It organizes many newsroom-style tasks and adds review steps for image quality, data sources, reproducibility, assets, and licensing. This reduces the risk of publishing unsupported findings or unusable visuals.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: names the AskUserQuestion tool.

Needs its repository: it reads a path above its own folder, which exists only inside the repository. The line is **Sibling-skill dependency.** This skill requires the sibling skills **`frontend-design-pro/`** and **`dataviz-craft/`** to live under the same `skills/` parent.

Part of the data2story-pro plugin — 25 skills shipped together

Good fit Use it to create a data-driven article or interactive dashboard from a dataset, with supporting analysis, visual material, written copy, and design.

Compare 6 skills from other repositories ↓
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/QinghongLin/data2story-skill
agentmods
npx agentmods add skills/qinghonglin/data2story-skill/data2story-pro

Made for: Claude Code.

Or install data2story-pro, the plugin that ships this one along with the rest of its 25 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for data2story-pro

README.md
[![agentmods](https://agentmods.dev/badge/skills/qinghonglin/data2story-skill/data2story-pro/github.svg)](https://agentmods.dev/skills/qinghonglin/data2story-skill/data2story-pro)
Your own site
<a href="https://agentmods.dev/skills/qinghonglin/data2story-skill/data2story-pro"><img src="https://agentmods.dev/badge/skills/qinghonglin/data2story-skill/data2story-pro/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for data2story-pro

Your own site · 80×15
<a href="https://agentmods.dev/skills/qinghonglin/data2story-skill/data2story-pro"><img src="https://agentmods.dev/badge/skills/qinghonglin/data2story-skill/data2story-pro.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 128 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 14,102 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Excessive Agency · line 42
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00128 $0.14102
Opus 5.5 $0.00051 $0.05641
Sonnet 5.5 $0.00026 $0.02820
Haiku 4.5 $0.00013 $0.01410

Measured 2mo ago against content hash 8b6e66d00811, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

data2story-pro scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

The scan reads SKILL.md. This mod also ships 14 executable files (auditor/scripts/playtest_drive.js, auditor/scripts/render_capture.js, designer/scripts/openrouter-embeddings/scripts/embed.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/data2story-pro/SKILL.md · 317 lines

How it starts

The opening of the file, as written. The whole thing — 317 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Data Journalist Agent (Data2Story)

Turn $ARGUMENTS into a blog. Orchestrates the roles below in sequence.

Orchestration rituals

Five process rules earned from real runs. Each is one rule + why it exists; follow them across every run regardless of topic.

  • (D1) Candidate-image review loop. For any hero/cover image of a named person or specific real object, generate N candidates, then run a VLM (or human) review and select one — never ship the first render. Why: text2image of named people intermittently refuses outright and quality varies shot-to-shot, so a single render is a coin-flip; a small candidate pool plus a review step is the only reliable way to land a usable, correctly-identified image.
  • (D2) Audit-before-finalize. Run the read-only multi-agent audit (provenance / repro / assets / IP lenses) to find every defect FIRST, collect them, and only THEN make one editing pass to fix them. Why: interleaving find-and-fix makes agents edit the same file against a moving target and re-introduce each other's defects; separating the finding phase from the fixing phase prevents that churn.
  • (D3) Single owner of one big file. Parallel agents may produce data and assets concurrently, but exactly ONE agent writes index.html. Why: the HTML is one indivisible artifact; concurrent edits to it interleave and corrupt it, so it must have a single writer even when everything feeding it is parallel.
  • (D4) Headless-verify-then-defer-render. Prove everything you can without a browser — node --check the scripts, recompute a known model output and compare, byte-compare each inline JSON island to its verify/ file — then hand the final visual/browser sign-off to the user. Why: deterministic checks catch the failures that don't need eyes cheaply and early, while genuine render correctness needs a real browser this harness can't drive, so the human does that last mile (see also the chart-width-0 class of bug, invisible to node shims).
  • (D5) Verify-coexistence-with-zero-engine-edits. New interactive features layer on top of the frozen Verify engine (the in-page Inspector panel + verify/ artifacts); never edit the engine to make a feature fit. Why: the Verify layer is the paper's coding verifier and a hard gate — editing it to accommodate a feature risks silently breaking provenance, so features adapt to it, not the reverse.

Read the full file on GitHub · 317 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 317 lines · 128 tokens per session scan A 8b6e66d00811

Subscribe to this mod's changes

data2story-pro is a skill published in the GitHub repository QinghongLin/data2story-skill (161 stars, last pushed 4mo ago), licensed MIT. It adds 128 tokens to every session and 14,102 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

data2story-pro compared with skills from other repositories

data2story-pro next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
data2story-proQinghongLin/data2story-skillSkill1614mo agoMITA128Claude Code
chdb-sqlchdb-io/chdbSkill2.9k6d agoApache-2.0A214Claude Code, Codex
waxchristopherkarani/WaxSkill8062d agoApache-2.0A76Codex
wax-memory-maintenancechristopherkarani/WaxSkill8062d agoApache-2.0A18Claude Code, Codex
alterlab-timesfmAlterLab-IEU/AlterLab-Academic-SkillsSkill85yesterdayMITA150Claude Code
alterlab-cobrapyAlterLab-IEU/AlterLab-Academic-SkillsSkill85yesterdayMITA91Claude Code
alterlab-molecular-dynamicsAlterLab-IEU/AlterLab-Academic-SkillsSkill85yesterdayMITA98Claude Code