Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/redhuntlabs/wizard/using-wizardnpx skills add redhuntlabs/wizard --skill using-wizardgit clone --depth 1 https://github.com/redhuntlabs/wizardWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00027 | $0.00674 |
| Opus 5 | $0.00014 | $0.00337 |
| Sonnet 5 | $0.00005 | $0.00135 |
| Haiku 4.5 | $0.00003 | $0.00067 |
Grade C, and why
using-wizard scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
<!-- token-budget-exception: boot skill must include 1% rule, excuses table, warning signs, and discovery instructions in one file --> How it starts
The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Using Wizard
What this does
Boots you into the Wizard framework. Tells you what's loaded, where it lives, and the one rule that makes it work.
When to use
- At the start of every session when this plugin is loaded.
What you bring (Inputs)
Nothing. This skill loads itself.
What you get (Output)
Awareness of two things: the library, and the 1% rule.
How it works (Steps)
- Two folders are available:
skills/(framework) andspells/(bundled seed). The user's library is$WIZARD_HOME(default~/.wizard/). User versions override bundled. - To build a new spell, invoke
building-a-spell. - To use one, load its SKILL.md from the appropriate folder.
- To browse, invoke
discovering-spells.
The non-negotiable rule
If you think there is even a 1% chance any spell applies to what the user is doing, invoke it.
Excuses and counters
| If you think... | Reality |
|---|---|
| "This is a simple question" | Questions are tasks. Check spells. |
| "I need more context first" | Skill check comes BEFORE clarifying questions. |
| "The skill is overkill" | Simple things become complex. Use it. |
| "I remember this skill" | Skills evolve. Read the current version. |
| "I'll just do this one thing first" | Check BEFORE doing anything. |
Warning signs
- About to answer without checking the library
- About to ask a clarifying question without checking the library first
- About to say "you don't need a skill for this"
Hard gates
Quality bar
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 83 lines · 27 tokens per session scan C e43b919726d2
using-wizard is a skill published in the GitHub repository redhuntlabs/wizard (9 stars, last pushed 4mo ago), licensed MIT. It adds 27 tokens to every session and 674 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
fastapi
FastAPI - 高性能 Python Web API 框架.
fzf
Skill "fzf" from CN-big-cabbage/github-skill-distiller, covering fzf 通用命令行模糊查找器, 技能概述, 使用流程, 关键章节导航 and ai 助手能力.
glances
Skill "glances" from CN-big-cabbage/github-skill-distiller, covering glances 跨平台系统监控工具, 技能概述, 使用流程, 关键章节导航 and ai 助手能力.
lazydocker
本技能帮助用户通过 lazydocker 的终端 UI 界面管理 Docker 容器、镜像、卷和网络，支持以下场景：.
paper-checking
论文查重系统 - 一亿字次级论文库秒级查重，支持纵向查重和横向查重.
you-get
网页媒体下载助手 - 从YouTube、Bilibili等网站下载视频、音频、图片.