Skills Hub is a cross-platform desktop application for installing, organizing, updating, and syncing Agent Skills across AI coding tools. Developers use it to maintain one central skill library and distribute selected skills to tools such as Claude Code, Codex, Cursor, OpenCode, and Antigravity. Its catalogue instructions describe how to work with the managed skills.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add qufei1993/skills-hub --skill dsh-pre-push-checksgit clone --depth 1 https://github.com/qufei1993/skills-hubWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/qufei1993/skills-hub/dsh-pre-push-checks)<a href="https://agentmods.dev/skills/qufei1993/skills-hub/dsh-pre-push-checks"><img src="https://agentmods.dev/badge/skills/qufei1993/skills-hub/dsh-pre-push-checks/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/qufei1993/skills-hub/dsh-pre-push-checks"><img src="https://agentmods.dev/badge/skills/qufei1993/skills-hub/dsh-pre-push-checks.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.00486 |
| Opus 5.5 | $0.00020 | $0.00194 |
| Sonnet 5.5 | $0.00010 | $0.00097 |
| Haiku 4.5 | $0.00005 | $0.00049 |
Grade A, and why
dsh-pre-push-checks scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
验证是否具备交付条件
阅读项目上下文和验证证据。本流程负责验证；推送、提交和部署须属于相应任务范围。
- 检查当前改动、适用指令、清单、构建脚本和 CI。将必需检查与有针对性的辅助检查分开。即使只改文档，也保留项目要求的完整检查。
- 确认前置条件以及实际测试的源码或构建产物。需要时重新构建，并验证运行入口确实使用该产物。根据实际进程和产物识别旧服务，不能只看熟悉的端口或页面标题。
- 执行必需检查，记录命令、退出状态、选中的用例和输出。查明失败原因，不通过删除断言、盲改期望、串行化测试或添加重试掩盖问题。资源或并发故障使用测试可靠性。不得隐瞒工具缺失或网络失败。
- 验收规则变化时，在隔离样例中故意违反规则，确认真实检查入口会拒绝，再确认合法样例通过。现有检查未覆盖的行为，应通过真实调用方验证并查看结果。
- 检查最终差异和工作区状态，确认没有意外修改、生成产物遗漏或陈旧文档。修复改变了被测内容时，重跑受影响检查；不能声称早先证据适用于后来的文件状态。
只有全部必需检查和变化的行为都有证据支持时，才报告“可以交付”。否则明确列出失败、跳过、未运行或环境阻塞的检查，以及下一步最小操作。单元测试通过，但必需集成检查失败或交付构建陈旧，仍不具备交付条件。
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 17 lines · 51 tokens per session scan A f1fe06ad9259
dsh-pre-push-checks is a skill published in the GitHub repository qufei1993/skills-hub (1,848 stars, last pushed today), licensed MIT. It adds 51 tokens to every session and 486 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-31.
Other skills, from other repositories
workflow-patterns
Use this skill when implementing tasks according to Conductor's TDD workflow, handling phase checkpoints, managing git commits for tasks, or understanding the verification protocol.
finishing-a-branch
Wrap up finished code work safely: confirm the tests pass, then let the Commander choose to merge it, open a pull request, or keep it for later. Nothing is deleted or overwritten without the Commander's clear go-ahead.
Changelog Test Mapper
Map changelog entries and release notes to affected test cases, ensuring every user-facing change has corresponding test coverage verification.
AI Release Guardian
Analyze a git diff, map affected risks, select the tests that matter, detect coverage gaps on changed lines, run configurable quality gates, and produce a go/no-go release report with cited evidence. Recommends only; never merges or deploys.
github-issue-to-pr
Carry a GitHub issue to a verified PR with honest CI state.
agentbro-pr-merge
Use when reviewing, fixing CI for, approving workflows for, or merging AgentBro pull requests into dev/main, especially external contributor PRs where contributor attribution matters.