Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rojim666/SztuCode --skill marketplace-skill-installergit clone --depth 1 https://github.com/rojim666/SztuCodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rojim666/sztucode/marketplace-skill-installer)<a href="https://agentmods.dev/skills/rojim666/sztucode/marketplace-skill-installer"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/marketplace-skill-installer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rojim666/sztucode/marketplace-skill-installer"><img src="https://agentmods.dev/badge/skills/rojim666/sztucode/marketplace-skill-installer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00067 | $0.01411 |
| Opus 5.5 | $0.00027 | $0.00564 |
| Sonnet 5.5 | $0.00013 | $0.00282 |
| Haiku 4.5 | $0.00007 | $0.00141 |
Grade A, and why
marketplace-skill-installer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Marketplace Skill Installer
帮助用户用一句话从 Sztubuddy 推荐市场(BuiltinMarket)安装 Skill。
When to Use
只要用户表达"安装某个技能/skill"的意图就用此 Skill,例如:
- 「帮我安装飞书套件」
- 「安装一个 lark-unified 的 skill」
- 「我想用 X 技能,帮我装下」
- 「install Y skill」
严格的工具调用约束
- 禁止直接构造任何 HTTP 请求,禁止涉及 token/cookie/Authorization。
- 只能通过
Sztubuddy_marketplace_skill这个内置工具完成全部操作;鉴权和后端调用由宿主处理。 - 禁止伪造或猜测
skillId——必须从 search 结果中拿到。
Workflow
Step 1:识别关键字
从用户输入中抽取一个搜索 keyword:
- 如果用户说了显示名(例:"飞书套件"),用显示名;
- 如果用户说了技术名(例:"lark-unified"),用技术名;
- 既没说显示名也没说技术名(仅说"装个 skill")→ 礼貌追问"想安装哪个技能?可以告诉我名字或关键字"。
Step 2:搜索
调用 Sztubuddy_marketplace_skill,action 为 search:
{ "action": "search", "keyword": "飞书套件", "limit": 5 }
limit 一般保持默认 5,必要时可上调到 10–20。
返回字段说明:
success: false→ 把error透传给用户,停下;results: [](空数组)→ 告诉用户"未在推荐市场找到匹配的 skill",停下;results.length === 1→ 直接进入 Step 3;results.length >= 2→ 进入 Step 4 让用户挑。
Step 3:单一命中
逻辑分支(r = results[0]):
- 未安装(
r.installed === false)→ 直接调 install:{ "action": "install", "skillId": "<r.skillId>" } - 已安装且已是最新(
r.installed === true && r.updateAvailable === false)→ 告诉用户"该 Skill 已是最新版本 v<r.version>,无需重复安装",停下; - 已安装且有新版(
r.installed === true && r.updateAvailable === true)→ 询问用户"已安装 v<r.installedVersion>,最新版本是 v<r.version>,是否更新?"。用户同意后再调 install。
⚠️ 不要自己用字符串相等判断版本新旧;
updateAvailable字段已用 semver 计算好。
Step 4:多命中
把 results 列出来让用户选。展示时只展示 name、version、description 的前 60 字、是否 installed。不要把 skillId 透露给用户——那是机器内部 id。例:
找到了多个相关 Skill,请选择要安装的:
1. 飞书套件 v1.2.0 — 集成飞书文档/会议/审批 ✅ 已安装 v1.1.0
2. 飞书文档助手 v0.9.1 — 智能写作与摘要
3. 飞书会议助手 v0.5.0 — 自动纪要
用户选定后取对应 results[i].skillId,按 Step 3 的分支处理。
Step 5:调用 install 后
Sztubuddy_marketplace_skill 的 install action 返回:
success: true→ 用message告诉用户安装到了哪里、版本是什么;可附一句"在【技能管理】面板里能看到它"。不要手动构造路径——直接用message字段。success: false→ 把error透传,并按错误类型给提示(见下表)。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +2 tokens per session 1ce69af2a54a
- 1mo ago First seen · 107 lines · 65 tokens per session scan A 1b0e7cfdf19d
marketplace-skill-installer is a skill published in the GitHub repository rojim666/SztuCode (110 stars, last pushed yesterday), licensed MIT. It adds 67 tokens to every session and 1,411 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.
Other skills, from other repositories
codex-delegate
Delegate a coding task to the OpenAI Codex CLI as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to hand implementation work to Codex — phrasings like "have Codex do X", "delegate this to Codex", "run it through Codex", or "use Codex to implement/fix/refactor" …
commandcode-delegate
Delegate a coding task to the Command Code CLI (cmd) as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to hand implementation work to Command Code — phrasings like "have Command Code do X", "delegate this to commandcode", "run it through cmd", or "use Command Code…
claude-delegate
Delegate a coding task to a separate Claude Code CLI process or another Claude session as an implementer, then review its diff and land it yourself. Use only when the user explicitly asks to delegate implementation to Claude Code, another Claude session, or the claude CLI — for example, "have another Claude implement…
copilot-delegate
Delegate a coding task to the GitHub Copilot CLI (copilot) as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to delegate implementation work to Copilot - phrasings like "have Copilot implement X", "delegate this to copilot", "run it through Copilot CLI", or "use…
cursor-delegate
Delegate a coding task to the Cursor Agent CLI (cursor-agent) as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to hand implementation work to Cursor — phrasings like "have Cursor implement X", "delegate this to Cursor", "run it through Cursor Agent", or "use…
cline-delegate
Delegate a coding task to the Cline coding agent CLI (cline) as a background implementer, then review its diff and land it yourself. Use this whenever the user wants to delegate implementation work to Cline - phrasings like "have Cline implement X", "delegate this to cline", "run it through Cline", or "use cline to…