Borrowing it
Nothing to install: this file belongs to QuickerHub/quicker-rpc. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/QuickerHub/quicker-rpc/main/.cursor/skills/quicker-agent-llm-apikey-config/SKILL.mdgit clone --depth 1 https://github.com/QuickerHub/quicker-rpcWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/quickerhub/quicker-rpc/quicker-agent-llm-apikey-config)<a href="https://agentmods.dev/skills/quickerhub/quicker-rpc/quicker-agent-llm-apikey-config"><img src="https://agentmods.dev/badge/skills/quickerhub/quicker-rpc/quicker-agent-llm-apikey-config/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/quickerhub/quicker-rpc/quicker-agent-llm-apikey-config"><img src="https://agentmods.dev/badge/skills/quickerhub/quicker-rpc/quicker-agent-llm-apikey-config.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00101 | $0.01074 |
| Opus 5 | $0.00051 | $0.00537 |
| Sonnet 5 | $0.00020 | $0.00215 |
| Haiku 4.5 | $0.00010 | $0.00107 |
Grade A, and why
quicker-agent-llm-apikey-config scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.
QuickerAgent LLM API Key 配置
配置文件一览（勿 commit 含 Key 的文件）
| 文件 | 用途 | Agent 动作 |
|---|---|---|
llm-publish.config.json |
发布内置 endpoint；CI + OSS | 发布 → Sync-LlmPublishConfig.ps1 |
llm-dev.config.json |
仅 pnpm dev 合并调试（dev 优先） |
只改文件；不上传 |
llm-config.json |
默认 provider 模板（通常无明文 Key） | 只改文件；不上传 |
publish/.env |
Bitiful + LLM_REMOTE_PUBLISH_CIPHER_PEPPER |
一次性；pepper 勿轮换 |
设置页 / llm-secrets.json |
用户自备 Key | UI 行为；非本 skill |
示例：llm-publish.config.example.json、llm-dev.config.example.json
用户说「发布 publish config」— 仅此一条命令
pwsh -NoProfile -File ./publish/Sync-LlmPublishConfig.ps1
| 会更新 | 不会动 |
|---|---|
GitHub BUNDLED_LLM_CONFIG（endpoint 内容） |
LLM_REMOTE_PUBLISH_CIPHER_PEPPER（永久固定） |
Bitiful 加密 OSS { version:1, enc } |
secret 名称、加密算法 |
预览：-DryRun；仅 GitHub：-SkipBitiful
Agent 必做：确认 JSON 合法 → 执行脚本 → 汇报 endpoint 数与上传结果。
禁止：build.ps1 -t；常规发布跑 Sync-LlmRemoteCipherPepper.ps1；commit 密钥文件。
GitHub secrets
| Secret | 何时写 | 日常发布 |
|---|---|---|
BUNDLED_LLM_CONFIG |
每次 Sync-LlmPublishConfig.ps1 |
更新 |
LLM_REMOTE_PUBLISH_CIPHER_PEPPER |
一次性 Sync-LlmRemoteCipherPepper.ps1 |
勿动 |
BITIFUL_* |
publish/.env；CI 可选 |
勿改 |
pepper 在 publish/.env 与 GitHub publish 环境须一致，跨版本通用。
一次性初始化（新机器）
# publish/.env ← publish/.env.example
pwsh -NoProfile -File ./publish/Sync-LlmRemoteCipherPepper.ps1 # 已存在则自动跳过
pwsh -NoProfile -File ./publish/Sync-LlmPublishConfig.ps1
Sync-LlmRemoteCipherPepper.ps1 仅 -Force 可覆盖（破坏旧版 OSS 解密）。
数据流
llm-publish.config.json
├─► BUNDLED_LLM_CONFIG → CI 安装包内置 Key
└─► Bitiful enc（pepper 固定）→ 已安装 Agent 运行时拉取
正式 QuickerAgent 安装包 Release：quicker-rpc-publish / /publish（Release 前确认 BUNDLED_LLM_CONFIG 已同步）。
故障排查
| 现象 | 处理 |
|---|---|
| OSS 缺 pepper | 补 publish/.env；仅首次 Sync-LlmRemoteCipherPepper.ps1 |
| 解密失败 | 对齐 .env 与 GitHub pepper，重跑 Sync-LlmPublishConfig.ps1 |
| dev 不见新 endpoint | 重启 dev；或改的是 publish 则需发布 OSS |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 102 lines · 101 tokens per session scan A 11cb00e974d1
quicker-agent-llm-apikey-config is a skill published in the GitHub repository QuickerHub/quicker-rpc (13 stars, last pushed 28d ago), licensed MIT. It adds 101 tokens to every session and 1,074 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
llm-gateway-routing
Canonical LLM gateway/routing/proxy playbook: multi-provider failover, token reduction proxies, and cost wrappers.
gws-events
Subscribe to Google Workspace events.
gws-events-renew
Google Workspace Events: Renew/reactivate Workspace Events subscriptions.
gws-script-push
Google Apps Script: Upload local files to an Apps Script project.
groq-inference
Ultra-fast LLM inference on custom LPU hardware. OpenAI-compatible API at api.groq.com. Lowest latency in the industry (500-1000+ tok/s). Supports chat completions, vision, audio (Whisper STT + TTS), tool calling, JSON mode, and streaming. Free tier available. Inference only — no training.
voiden
Create and edit Voiden .void files for API testing. Covers the .void file format and all enabled extension block types.