Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rockyflux/yq-workflow --skill yq-config-gengit clone --depth 1 https://github.com/rockyflux/yq-workflowWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rockyflux/yq-workflow/yq-config-gen)<a href="https://agentmods.dev/skills/rockyflux/yq-workflow/yq-config-gen"><img src="https://agentmods.dev/badge/skills/rockyflux/yq-workflow/yq-config-gen/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rockyflux/yq-workflow/yq-config-gen"><img src="https://agentmods.dev/badge/skills/rockyflux/yq-workflow/yq-config-gen.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.00667 |
| Opus 5 | $0.00013 | $0.00333 |
| Sonnet 5 | $0.00005 | $0.00133 |
| Haiku 4.5 | $0.00003 | $0.00067 |
Grade A, and why
yq-config-gen scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
YQ Config Generation
Overview
整理运行配置、环境参数和模板文件，明确哪些可变、哪些敏感、哪些需要按环境分层管理。
Core principle: 配置必须可理解、可替换、可审计，不能靠口口相传。
When to Use
- 需要生成
.env.example、配置模板或部署参数说明 - 功能涉及多环境差异、密钥、开关或外部依赖
- 需要统一默认值、必填项和覆盖规则
- 你怀疑交付时会因配置不清而出故障
Route Elsewhere
- 主要是系统架构设计：转
yq-system-design - 主要是代码实现：转
yq-code-gen - 主要是部署或分支交付说明：转
yq-doc-gen、yq-git-helper
Process
- 枚举运行所需配置及其责任归属。
- 区分必填、可选、敏感和派生配置。
- 定义默认值、环境差异和覆盖顺序。
- 生成模板、注释和安全使用说明。
- 标出缺失配置时的失败方式与排查入口。
Output
# Configuration Plan
## Config Inventory
## Required and Optional Settings
## Environment Differences
## Defaults and Override Rules
## Secret Handling Notes
## Example Template
## Recommended Next Step
Related Skills
- 上游通常来自
yq-system-design - 下游通常接
yq-code-gen、yq-doc-gen - 涉及敏感项时可配合
yq-security-scan
Recommended Next Step
- 默认交给
yq-code-gen，把配置读取、校验和失败语义落到实现里 - 如果重点已经转到交付说明或运行手册，改接
yq-doc-gen - 如果配置里包含密钥、凭证或高风险开关，补
yq-security-scan
Common Mistakes
- 混淆敏感配置和普通参数
- 没有说明默认值和覆盖顺序
- 配置模板和真实运行要求不一致
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 87 lines · 26 tokens per session scan A 0609bbf02d4f
yq-config-gen is a skill published in the GitHub repository rockyflux/yq-workflow (2 stars, last pushed yesterday), licensed MIT. It adds 26 tokens to every session and 667 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
gke-compute-classes
Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto…
gke-reliability
Improves GKE workload reliability, using PDBs, health probes, and topology spread constraints. Use when configuring GKE workload reliability, setting up PDBs, or configuring GKE health probes (liveness, readiness, startup). Don't use for disaster recovery setup or full cluster backups (use gke-backup-dr instead).
gke-workload-security
Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (auditcluster.sh), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny…
azure-mgmt-botservice-dotnet
Azure Resource Manager SDK for Bot Service in .NET. Management plane operations for creating and managing Azure Bot resources, channels (Teams, DirectLine, Slack), and connection settings. Triggers: "Bot Service", "BotResource", "Azure Bot", "DirectLine channel", "Teams channel", "bot management .NET", "create bot".
nemo-automodel-launcher-config
Configure NeMo AutoModel job launches for interactive runs, Slurm clusters, and SkyPilot cloud execution.
cloud-architect
Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure, and GCP. Use when designing cloud architectures, planning migrations, or optimizing multi-cloud deployments. Invoke for Well-Architected Framework, cost…