Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rojim666/SztuCode --skill generate-fillable-contract-htmlgit clone --depth 1 https://github.com/rojim666/SztuCodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rojim666/sztucode/generate-fillable-contract-html)<a href="https://agentmods.dev/skills/rojim666/sztucode/generate-fillable-contract-html"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/generate-fillable-contract-html/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rojim666/sztucode/generate-fillable-contract-html"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/generate-fillable-contract-html.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.00488 |
| Opus 5.5 | $0.00021 | $0.00195 |
| Sonnet 5.5 | $0.00010 | $0.00098 |
| Haiku 4.5 | $0.00005 | $0.00049 |
Grade A, and why
generate-fillable-contract-html scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
待填合同 HTML 生成
生成完整、真实的中文业务 HTML，适合交给 html-to-docx 转换。
待填字段规则
硬性要求：
- 表格里面不要用横线当书签，用空格当书签。
- 书签必须换成中文名。
每个字段保留稳定的英文 data-docx-field，并使用 data-docx-bookmark 指定唯一中文书签名。重复业务字段在中文名后添加 _01、_02。
<p>甲方名称：<span data-docx-field="buyer_name" data-docx-bookmark="甲方名称">________________</span></p>
表格字段使用 提供可见空白书签范围，不使用下划线：
<tr>
<th>软件名称</th>
<td><span data-docx-field="software_name" data-docx-bookmark="软件名称"> </span></td>
</tr>
不得使用正文普通空格、只有冒号的空值、请输入/待填写 提示文案、英文书签名或表格下划线书签。
输出要求
- 输出完整 HTML5 文档，包含
html、head、style与body。
自检
- 每个字段同时包含英文
data-docx-field和唯一中文data-docx-bookmark。 - 正文书签范围使用连续下划线；表格书签范围只使用
。 - 中文书签名无空格；重复字段使用
_01、_02区分。 - 不含提示性占位文案、正文普通空格填空或表格下划线书签。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 44 lines · 52 tokens per session scan A 9ba033cbf0f8
generate-fillable-contract-html is a skill published in the GitHub repository rojim666/SztuCode (109 stars, last pushed 4d ago), licensed MIT. It adds 52 tokens to every session and 488 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.
Other skills, from other repositories
pii-redaction
Redact or remove PII (SSNs, EINs, names, addresses, phones, emails, account numbers) from documents while keeping the file in its original format and style. Use when asked to redact, mask, anonymize, scrub, sanitize, or de-identify a document.
data-policy
Use when building internal data-governance machinery: a retention schedule (period, lawful basis, expiry action, system where deletion runs), an Art. 6 lawful-basis register, an Art. 30 ROPA, or a consent capture/withdrawal model. NOT the public privacy notice or DSAR handling (that is gdpr-privacy), NOT SOC 2 posture…
${id}
Polish office systems through the e-urzad CLI - EZD RP cases, documents and tasks, e-Doręczenia deliveries, proofs and ADE search, and XAdES/PAdES/CAdES signature checks. Office writes, and opening a delivery, wait for the owner's approval.
pptx-official
Creates, edits, inspects, and renders PowerPoint presentations (.pptx, .potx): pitch decks, executive readouts, board and training material, template fills, slide reordering or duplication, speaker notes, text and chart-data extraction, and deck-to-PDF or slide-to-image rendering. Use when a PowerPoint file is the…
docx-official
Creates, edits, inspects, and converts Microsoft Word documents (.docx, .dotx): reports, letters, memos, contracts, proposals, filled templates, tracked-change acceptance, review comments, and text, table, or metadata extraction. Use when a Word file is the deliverable or the source of record, or the user mentions…
xlsx-official
Builds, edits, cleans, and inspects spreadsheet files (.xlsx, .xltx, .csv, .tsv) when the file is the deliverable or the record being changed: financial and operating models with live formulas, formula-driven summaries, template fills, cell and row patches, messy-data repair, sheet-to-CSV or PDF export, formula…