Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rojim666/SztuCode --skill generate-fillable-contract-htmlgit clone --depth 1 https://github.com/rojim666/SztuCodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rojim666/sztucode/generate-fillable-contract-html)<a href="https://agentmods.dev/skills/rojim666/sztucode/generate-fillable-contract-html"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/generate-fillable-contract-html/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rojim666/sztucode/generate-fillable-contract-html"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/generate-fillable-contract-html.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.00488 |
| Opus 5 | $0.00026 | $0.00244 |
| Sonnet 5 | $0.00010 | $0.00098 |
| Haiku 4.5 | $0.00005 | $0.00049 |
Grade A, and why
generate-fillable-contract-html scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
待填合同 HTML 生成
生成完整、真实的中文业务 HTML，适合交给 html-to-docx 转换。
待填字段规则
硬性要求：
- 表格里面不要用横线当书签，用空格当书签。
- 书签必须换成中文名。
每个字段保留稳定的英文 data-docx-field，并使用 data-docx-bookmark 指定唯一中文书签名。重复业务字段在中文名后添加 _01、_02。
<p>甲方名称：<span data-docx-field="buyer_name" data-docx-bookmark="甲方名称">________________</span></p>
表格字段使用 提供可见空白书签范围，不使用下划线：
<tr>
<th>软件名称</th>
<td><span data-docx-field="software_name" data-docx-bookmark="软件名称"> </span></td>
</tr>
不得使用正文普通空格、只有冒号的空值、请输入/待填写 提示文案、英文书签名或表格下划线书签。
输出要求
- 输出完整 HTML5 文档，包含
html、head、style与body。
自检
- 每个字段同时包含英文
data-docx-field和唯一中文data-docx-bookmark。 - 正文书签范围使用连续下划线；表格书签范围只使用
。 - 中文书签名无空格；重复字段使用
_01、_02区分。 - 不含提示性占位文案、正文普通空格填空或表格下划线书签。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 44 lines · 52 tokens per session scan A 9ba033cbf0f8
generate-fillable-contract-html is a skill published in the GitHub repository rojim666/SztuCode (64 stars, last pushed yesterday), licensed MIT. It adds 52 tokens to every session and 488 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.
Other skills, from other repositories
contract-review
Legal contract analysis using CUAD dataset (41 risk categories). Supports NDA, SaaS, M&A, employment, payment/merchant, and finder/broker agreements. Identifies red flags, suggests redlines, compares to market standards.
upload-artifact
Upload a file as a ClosedLoop document (PRD, implementation plan, feature, or template). Reads file content and uploads via MCP without consuming conversation context. Also supports creating new versions of existing documents. Triggers on: "upload artifact", "upload PRD", "upload implementation plan", "upload…
data-policy
Use when building internal data-governance machinery: a retention schedule (period, lawful basis, expiry action, system where deletion runs), an Art. 6 lawful-basis register, an Art. 30 ROPA, or a consent capture/withdrawal model. NOT the public privacy notice or DSAR handling (that is gdpr-privacy), NOT SOC 2 posture…
extract-plan-md
Sync plan.md with plan.json content. MUST be used after ANY edit to plan.json to keep plan.md in sync. Triggers: After editing plan.json with Edit tool (REQUIRED - always sync after edits) User asks to "sync plan.md", "update plan.md", "extract the md from a plan" Converting plan.json to markdown or viewing plan as…
copperhead
Change or verify a KiCad project through copperhead's gated pipeline. Use whenever a task touches .kicadsch or .kicadpcb files, a schematic, a PCB layout, a netlist, ERC/DRC, a BOM, or hardware design docs — instead of editing those files directly.
Gmail, Google Calendar, Drive, Docs, Sheets and Contacts for a connected Google account: read and search mail, send and reply, book and move meetings, find files, read and write Docs and Sheets, look people up. Use whenever the user mentions their email, inbox, calendar, meetings, Drive, a Google Doc or Sheet.