marketplace-skill-installer

marketplace-skill-installer is a skill for Claude Code from rojim666/SztuCode. It costs 67 tokens per session (1,411 once invoked), scanned A, original, MIT.

A workflow for searching WorkBuddy's recommended marketplace and installing a Skill. A Skill is an add-on that gives the coding agent instructions for a particular kind of task.

In plain words
What is it for?
Use it when you want to find, install, or update a Skill by giving its name or a search phrase.
Why use it?
It avoids manual service calls and prevents guessed skill IDs or direct handling of login credentials. It also checks whether a matching Skill is already installed or needs an update.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Good fit Use it when you want to find, install, or update a Skill by giving its name or a search phrase.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/rojim666/sztucode/marketplace-skill-installer
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add rojim666/SztuCode --skill marketplace-skill-installer
Clone the repo
git clone --depth 1 https://github.com/rojim666/SztuCode

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for marketplace-skill-installer

README.md
[![agentmods](https://agentmods.dev/badge/skills/rojim666/sztucode/marketplace-skill-installer/github.svg)](https://agentmods.dev/skills/rojim666/sztucode/marketplace-skill-installer)
Your own site
<a href="https://agentmods.dev/skills/rojim666/sztucode/marketplace-skill-installer"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/marketplace-skill-installer/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for marketplace-skill-installer

Your own site · 80×15
<a href="https://agentmods.dev/skills/rojim666/sztucode/marketplace-skill-installer"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/marketplace-skill-installer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 67 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,411 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00067 $0.01411
Opus 5.5 $0.00027 $0.00564
Sonnet 5.5 $0.00013 $0.00282
Haiku 4.5 $0.00007 $0.00141

Measured 1mo ago against content hash 1ce69af2a54a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

marketplace-skill-installer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

packages/runtime-ts/prompts/Sztubuddy/skills/marketplace-skill-installer/SKILL.md · 107 lines

How it starts

The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Marketplace Skill Installer

帮助用户用一句话从 Sztubuddy 推荐市场(BuiltinMarket)安装 Skill。

When to Use

只要用户表达"安装某个技能/skill"的意图就用此 Skill,例如:

  • 「帮我安装飞书套件」
  • 「安装一个 lark-unified 的 skill」
  • 「我想用 X 技能,帮我装下」
  • 「install Y skill」

严格的工具调用约束

  • 禁止直接构造任何 HTTP 请求,禁止涉及 token/cookie/Authorization。
  • 只能通过 Sztubuddy_marketplace_skill 这个内置工具完成全部操作;鉴权和后端调用由宿主处理。
  • 禁止伪造或猜测 skillId——必须从 search 结果中拿到。

Workflow

Step 1:识别关键字

从用户输入中抽取一个搜索 keyword:

  • 如果用户说了显示名(例:"飞书套件"),用显示名;
  • 如果用户说了技术名(例:"lark-unified"),用技术名;
  • 既没说显示名也没说技术名(仅说"装个 skill")→ 礼貌追问"想安装哪个技能?可以告诉我名字或关键字"。

Step 2:搜索

调用 Sztubuddy_marketplace_skill,action 为 search:

{ "action": "search", "keyword": "飞书套件", "limit": 5 }

limit 一般保持默认 5,必要时可上调到 10–20。

返回字段说明:

  • success: false → 把 error 透传给用户,停下;
  • results: [](空数组)→ 告诉用户"未在推荐市场找到匹配的 skill",停下;
  • results.length === 1 → 直接进入 Step 3;
  • results.length >= 2 → 进入 Step 4 让用户挑。

Step 3:单一命中

逻辑分支(r = results[0]):

  • 未安装(r.installed === false)→ 直接调 install:
    { "action": "install", "skillId": "<r.skillId>" }
    
  • 已安装且已是最新(r.installed === true && r.updateAvailable === false)→ 告诉用户"该 Skill 已是最新版本 v<r.version>,无需重复安装",停下;
  • 已安装且有新版(r.installed === true && r.updateAvailable === true)→ 询问用户"已安装 v<r.installedVersion>,最新版本是 v<r.version>,是否更新?"。用户同意后再调 install。

⚠️ 不要自己用字符串相等判断版本新旧;updateAvailable 字段已用 semver 计算好。

Step 4:多命中

把 results 列出来让用户选。展示时只展示 name、version、description 的前 60 字、是否 installed。不要把 skillId 透露给用户——那是机器内部 id。例:

找到了多个相关 Skill,请选择要安装的:
1. 飞书套件 v1.2.0 — 集成飞书文档/会议/审批  ✅ 已安装 v1.1.0
2. 飞书文档助手 v0.9.1 — 智能写作与摘要
3. 飞书会议助手 v0.5.0 — 自动纪要

用户选定后取对应 results[i].skillId,按 Step 3 的分支处理。

Step 5:调用 install 后

Sztubuddy_marketplace_skill 的 install action 返回:

  • success: true → 用 message 告诉用户安装到了哪里、版本是什么;可附一句"在【技能管理】面板里能看到它"。不要手动构造路径——直接用 message 字段。
  • success: false → 把 error 透传,并按错误类型给提示(见下表)。

Read the full file on GitHub · 107 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +2 tokens per session 1ce69af2a54a
  2. 1mo ago First seen · 107 lines · 65 tokens per session scan A 1b0e7cfdf19d

Subscribe to this mod's changes

marketplace-skill-installer is a skill published in the GitHub repository rojim666/SztuCode (110 stars, last pushed yesterday), licensed MIT. It adds 67 tokens to every session and 1,411 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.

Related

Other skills, from other repositories

codex-delegate

Delegate a coding task to the OpenAI Codex CLI as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to hand implementation work to Codex — phrasings like "have Codex do X", "delegate this to Codex", "run it through Codex", or "use Codex to implement/fix/refactor" …

amElnagdy/delegate-skills · 155 tokens

commandcode-delegate

Delegate a coding task to the Command Code CLI (cmd) as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to hand implementation work to Command Code — phrasings like "have Command Code do X", "delegate this to commandcode", "run it through cmd", or "use Command Code…

amElnagdy/delegate-skills · 123 tokens

claude-delegate

Delegate a coding task to a separate Claude Code CLI process or another Claude session as an implementer, then review its diff and land it yourself. Use only when the user explicitly asks to delegate implementation to Claude Code, another Claude session, or the claude CLI — for example, "have another Claude implement…

amElnagdy/delegate-skills · 117 tokens

copilot-delegate

Delegate a coding task to the GitHub Copilot CLI (copilot) as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to delegate implementation work to Copilot - phrasings like "have Copilot implement X", "delegate this to copilot", "run it through Copilot CLI", or "use…

amElnagdy/delegate-skills · 129 tokens

cursor-delegate

Delegate a coding task to the Cursor Agent CLI (cursor-agent) as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to hand implementation work to Cursor — phrasings like "have Cursor implement X", "delegate this to Cursor", "run it through Cursor Agent", or "use…

amElnagdy/delegate-skills · 120 tokens

cline-delegate

Delegate a coding task to the Cline coding agent CLI (cline) as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to delegate implementation work to Cline - phrasings like "have Cline implement X", "delegate this to cline", "run it through Cline", or "use cline to…

amElnagdy/delegate-skills · 126 tokens