Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rojim666/SztuCode --skill librarygit clone --depth 1 https://github.com/rojim666/SztuCodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rojim666/sztucode/library)<a href="https://agentmods.dev/skills/rojim666/sztucode/library"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/library/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rojim666/sztucode/library"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/library.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00208 | $0.03249 |
| Opus 5 | $0.00104 | $0.01625 |
| Sonnet 5 | $0.00042 | $0.00650 |
| Haiku 4.5 | $0.00021 | $0.00325 |
Grade A, and why
资料库 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 138 lines — stays where its author put it; the contents beside it link to each section on GitHub.
资料库使用指南
调用前置
静默读取运行环境,仅用于内部路由和鉴权;除非用户明确询问,不在过程说明、确认或成功回执中提及:
python3 "${CODEBUDDY_SKILL_DIR}/runtime_context.py"
- 输出
mode=sandbox:不调connect_open_platform、不传 token;mode=client:按客户端模式鉴权。 mode=client的鉴权调用必须严格执行:先用ToolSearch精确查询{"tool_names":["connect_open_platform"]},再用DeferExecuteTool调用{"toolName":"connect_open_platform","params":{"skill_id":"library"}}。拿到authenticated=true且非空的token后,才能执行本 skill 的网络脚本。connect_open_platform是 deferred MCP 工具,不是 shell/CLI 命令,也不是space_api.py子命令。禁止通过 Bash、cbc、codebuddy、Python 或space_api.py connect_open_platform调用;禁止在环境变量、本地文件、凭证目录、进程、二进制或 RPC 中搜索/探测 token;禁止用空值或伪造值调用--token-stdin。ToolSearch未找到工具或DeferExecuteTool换票失败时立即停止,不改走其它凭证路径。- 目标空间由所有模块按以下顺序统一决定:
- 操作已有节点:用户给出
nodeId或节点链接时,按该节点的实际归属执行,不套用默认空间。 - 用户显式指定空间或目录:以该目标为准;已给出或解析出
spaceId时传实际值,仅明确指定我的文档但未给 ID 时可省略可选spaceId;按parentId新建时,先取得其所属spaceId,确认二者匹配后同时传入。 - 无显式目标:创建、导入、上传时省略可选的
--space-id/space_id,由后端默认落我的文档。
- 操作已有节点:用户给出
以脚本输出为准。脚本失败时停止,简要说明无法继续即可。
远端变更
凡创建/上传、修改、删除、移动或重命名远端资料,先静默执行 mutation.md,按其规则判定实际目标空间分类与是否需要停下确认。
检索授权
明确给出单个节点时只读取该节点,不扩展成全库搜索。“写报告”“做方案”等泛化创作不触发检索。写入目标不等于检索授权。
按 kind 直取入口
访问/处理任一资料库节点前,先归一化为 nodeId(/space/d/{id} 或 *.workbuddy.link/p/{id} 直接提取 {id} 为 nodeId、搜索结果取 nodeId),再用 space.workspace.node-info 读 kind。
按下表读取对应的 entry:
| kind | 场景 | 入口 |
|---|---|---|
| doc | 在线文档读/改 | doc/entry.md |
| web / page | HTML 页面 | page/entry.md |
| database | 结构化表 | database/entry.md |
| link | 网页剪藏 | link/entry.md |
| drive | 网盘文件 | drive/entry.md |
| smh | 历史媒体节点 | smh/entry.md |
| 目录 / 空间导航 / 全局搜索 | 管理 | manage/entry.md |
目标选择
- 说「存到资料库」且未点名外部产品时,默认且唯一是原生资料库,不反问存哪、不把外部产品拼成选择题。
- 只在缺文档主题时问主题。
- 仅写入失败/权限不足/多个同名空间/语义指向团队空间但名称不全时消歧,且只列原生空间(
space.workspace.list-user-spaces)。
文件夹意图
说「建文件夹/做目录/把文档归到一起/建知识库」时,不默认建空间;先让用户在两种做法间选,措辞用「挂到下面/目录树」,不用「父/子节点」:
| 做法 | 怎么做 | 适合 |
|---|---|---|
| 文档目录(默认) | 新建一篇文档当目录页,其余文档挂到它下面成目录树 | 灵活聚合 |
| 独立空间 | 单独建空间统一管理;长期+多人协同推荐团队空间 | 长期沉淀 |
What ships with it
36 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- attachment/entry.md 2.1 KB
- database/csv-import-flow.md 5.4 KB
- database/entry.md 22 KB
- database/params-reference.md 14 KB
- doc/action_decision.md 5.2 KB
- doc/batch_replace_sop.md 1.2 KB
- doc/content_contract.md 3.6 KB
- doc/doc_references.md 18 KB
- doc/edit_core.md 4.9 KB
- doc/entry.md 2.6 KB
- doc/error_handling.md 6.5 KB
- doc/revision_flows.md 3.0 KB
- doc/scripts/examples/README.md 2.5 KB
- doc/server_pitfalls.md 1.3 KB
- doc/tasks/complex_edit.md 2.0 KB
- doc/tasks/read_create.md 1.6 KB
- doc/tasks/revision.md 2.2 KB
- doc/tasks/table_edit.md 2.3 KB
- doc/tasks/text_block_edit.md 2.8 KB
- doc/workflows.md 5.3 KB
- drive/entry.md 3.2 KB
- error_handling.md 3.8 KB
- link/entry.md 1.4 KB
- manage/entry.md 8.8 KB
- mutation.md 5.9 KB
- page/beautify-flow.md 22 KB
- page/clone-flow.md 16 KB
- page/data-page-flow.md 28 KB
- page/database-sdk-contract.md 6.2 KB
- page/edit-flow.md 13 KB
- page/entry.md 35 KB
- page/html-parse-spec.md 23 KB
- page/import-flow.md 7.2 KB
- page/md-to-html-flow.md 19 KB
- page/wbp-presentation-contract.md 15 KB
- smh/entry.md 726 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 138 lines · 208 tokens per session scan A a15b191b0d71
资料库 is a skill published in the GitHub repository rojim666/SztuCode (64 stars, last pushed today), licensed MIT. It adds 208 tokens to every session and 3,249 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.
Other skills, from other repositories
upload-artifact
Upload a file as a ClosedLoop document (PRD, implementation plan, feature, or template). Reads file content and uploads via MCP without consuming conversation context. Also supports creating new versions of existing documents. Triggers on: "upload artifact", "upload PRD", "upload implementation plan", "upload…
Gmail, Google Calendar, Drive, Docs, Sheets and Contacts for a connected Google account: read and search mail, send and reply, book and move meetings, find files, read and write Docs and Sheets, look people up. Use whenever the user mentions their email, inbox, calendar, meetings, Drive, a Google Doc or Sheet.
google-workspace-ops
Operate across Google Workspace tools with reusable patterns for docs, sheets, calendar, drive, and gmail.
xlsx-official
Use this skill to build, edit, clean, or inspect a spreadsheet file (.xlsx, .xlsm, .xltx, .csv, or .tsv) when that file is the deliverable or the record being changed: financial and operating models, formula-driven summaries, template fills, cell and row patches, messy-data repair, sheet-to-CSV export, and workbook…
business-data-structuring
Inspect messy CSV/XLSX tables and create a reviewed clean business dataset with normalized headers, types, dates and amounts. Use for preparing a table; do not operate CRM entities or turn the preparation step into business analysis.
spreadsheet-analyst
Use when the user asks to inspect, clean, analyze, transform, calculate, or produce CSV or spreadsheet workbooks. Inspect sheets, schemas, formulas, and available spreadsheet tools first, preserve source data, and validate results with independent totals and rendered or structural checks.