Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add seed-forge/harness-ai-kit --skill work-sc-docx-comment-replygit clone --depth 1 https://github.com/seed-forge/harness-ai-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/seed-forge/harness-ai-kit/work-sc-docx-comment-reply)<a href="https://agentmods.dev/skills/seed-forge/harness-ai-kit/work-sc-docx-comment-reply"><img src="https://agentmods.dev/badge/skills/seed-forge/harness-ai-kit/work-sc-docx-comment-reply.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.00801 |
| Opus 5 | $0.00032 | $0.00400 |
| Sonnet 5 | $0.00013 | $0.00160 |
| Haiku 4.5 | $0.00006 | $0.00080 |
Grade A, and why
work-sc-docx-comment-reply scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Word 批注回复（.docx/.doc）
这个 skill 解决的问题：把 Word 文档里的批注（comments）按“原文锚点上下文”整理出来，生成待回复清单，然后把回复以 threaded replies 的方式写回到新的 .docx 文件里（不改原文件）。
适用场景：专利/论文/合同/内部评审等需要“逐条回复批注”的文档。
输出物（约定）
在当前工作目录的 outputs/ 下生成：
*_批注定位与上下文_*.md：人可读的批注+锚点上下文报告*_comment_context_*.json：机器可读上下文（用于并行写回复/自动化）*_replies_todo_*.json：待回复模板（键=comment_id，值=空字符串）*_批注已回复_*.docx：写回批注回复后的最终交付文件
工作流（推荐）
1) 提取批注上下文
python scripts/extract_comment_context.py --input "path\\to\\file.docx"
如果输入是 .doc，脚本会尝试用 LibreOffice soffice 转成 .docx 后继续。
2) 生成回复（由你/Claude 来写）
- 打开
outputs\\*_批注定位与上下文_*.md，逐条写回复。 - 把回复填进
outputs\\*_replies_todo_*.json（保持 JSON 结构不变）。
回复口径（强约束）
- 直接回答问题（别写“后续补充”但不说补什么）
- 必须贴合锚点原文（避免泛泛而谈）
- 不要用“老师您好/您好”类开头；口语化但专业
3) 写回批注回复并生成新 docx
python scripts/apply_comment_replies.py `
--unpacked "outputs\\<xxx>_unpacked_<timestamp>" `
--replies "outputs\\<xxx>_replies_todo_<timestamp>.json" `
--author "YourName" `
--initials "YN"
4) 校验（必须）
脚本默认会在保存时做 schema + redlining 校验；如需单独验证：
python ..\\docx\\ooxml\\scripts\\validate.py "outputs\\<unpacked_dir>" --original "outputs\\<out>.docx"
推荐输出格式
执行完毕后按以下结构输出：
状态：✅ 成功 / ⚠️ 部分成功 / ❌ 失败
| <输入→输出文件/格式/路径> | <值/状态> | 说明 |
|---|
下一步：<可执行动作>
并行（XL 可选）
当批注数量较多（例如 ≥20 条）：
- 先跑提取脚本得到
comment_context.json - 以 comment_id 分片给子代理写回复（每个子代理 prompt 末尾加
$vibe） - 合并为一个 replies JSON，再执行
apply_comment_replies.py
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 75 lines · 63 tokens per session scan A a665f9811a6e
work-sc-docx-comment-reply is a skill published in the GitHub repository seed-forge/harness-ai-kit (22 stars, last pushed 7d ago), licensed Apache-2.0. It adds 63 tokens to every session and 801 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
secrets-in-file-metadata
Extract and interpret embedded file metadata with exiftool — EXIF GPS coordinates, camera make, model and serial, DateTimeOriginal and CreateDate timestamps, XMP and IPTC fields, and Office and PDF properties such as Author, Company, LastModifiedBy, template paths and revision counts. Use when reading EXIF from a…
audit-bundle-size
Analyse and shrink JavaScript bundle size for any web app. Use when asked to "reduce bundle size", "analyse bundle", "tree shaking", "lazy loading", "code splitting", "slow initial load", "large JS", "chunk size", "build performance", "LCP caused by JS", "why is the bundle so big", or "first load JS too large".
RAG Chunking Strategy Advisor
Given a document type and retrieval goal, recommends the optimal chunking strategy for a RAG pipeline to minimize retrieval failures.
pydicom
Use pydicom to read, inspect, write, transform, and safely preflight local DICOM datasets and pixel data. Applies to DICOM metadata, transfer syntaxes, compression plugins, frames, private elements, JSON, and bounded de-identification review.
baoyu-youtube-transcript
A tool for downloading the written captions, subtitles, chapter information, speaker labels, and cover image from a YouTube video using its URL or ID.
comprehensive-enrichment
Enrich any person or company from any identifier — email, name, LinkedIn URL, domain, company name, Twitter/X handle. Use when asked to enrich, look up, or research a lead, contact, person, or company.