Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add serejaris/kimi-skills --skill corr-insightgit clone --depth 1 https://github.com/serejaris/kimi-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/serejaris/kimi-skills/corr-insight)<a href="https://agentmods.dev/skills/serejaris/kimi-skills/corr-insight"><img src="https://agentmods.dev/badge/skills/serejaris/kimi-skills/corr-insight/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/serejaris/kimi-skills/corr-insight"><img src="https://agentmods.dev/badge/skills/serejaris/kimi-skills/corr-insight.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00073 | $0.01408 |
| Opus 5 | $0.00036 | $0.00704 |
| Sonnet 5 | $0.00015 | $0.00282 |
| Haiku 4.5 | $0.00007 | $0.00141 |
Grade A, and why
corr-insight scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 140 lines — stays where its author put it; the contents beside it link to each section on GitHub.
correlation-explorer
相关性分析工具 —— 对表格数据计算 Pearson/Spearman 相关矩阵、偏相关矩阵,并自动识别疑似伪相关(由混淆变量导致的虚假关联)。
能力概览
| 功能 | 说明 |
|---|---|
| Pearson 相关矩阵 | 线性相关系数 + p 值,适用于连续且近似正态的变量 |
| Spearman 相关矩阵 | 秩相关系数 + p 值,适用于非线性单调关系或有序变量 |
| 偏相关矩阵 | 控制所有其他变量后的净相关(精度矩阵法),揭示变量间的直接关联 |
| 伪相关识别 | 自动对比简单相关与偏相关,标记因混淆变量导致的虚假显著相关 |
| 通俗解读 | 用中文对每对变量的相关强度、显著性、偏相关变化给出说明 |
Quick Start
# 分析所有数值列的相关性
python3 scripts/correlation_explorer.py data.csv
# 只分析指定列
python3 scripts/correlation_explorer.py data.csv -f "age,income,spending,score"
# 只算 Pearson
python3 scripts/correlation_explorer.py data.csv -m pearson
# 保存结果到 JSON
python3 scripts/correlation_explorer.py data.csv -o result.json
详细用法
基本调用
python3 scripts/correlation_explorer.py <数据文件> [选项]
选择相关系数类型
# 同时计算 Pearson 和 Spearman(默认)
python3 scripts/correlation_explorer.py data.csv -m all
# 只计算 Pearson
python3 scripts/correlation_explorer.py data.csv -m pearson
# 只计算 Spearman
python3 scripts/correlation_explorer.py data.csv -m spearman
调整伪相关检测灵敏度
# 更严格:相关系数下降 30% 即报警
python3 scripts/correlation_explorer.py data.csv -d 0.3
# 更宽松:下降 70% 才报警
python3 scripts/correlation_explorer.py data.csv -d 0.7
# 使用 0.01 显著性水平
python3 scripts/correlation_explorer.py data.csv -a 0.01
参数说明
| 参数 | 缩写 | 必填 | 默认值 | 说明 |
|---|---|---|---|---|
input |
— | 是 | — | 输入文件路径(CSV/TSV/Excel/JSON) |
--features |
-f |
否 | 全部数值列 | 要分析的列名,逗号分隔 |
--method |
-m |
否 | all |
相关系数类型:all / pearson / spearman |
--alpha |
-a |
否 | 0.05 |
显著性水平 |
--drop-threshold |
-d |
否 | 0.5 |
伪相关判定的下降阈值(0~1,默认 50%) |
--output |
-o |
否 | 标准输出 | 结果 JSON 保存路径 |
输出结构(JSON)
{
"n_observations": 200,
"n_variables": 4,
"features": ["age", "income", "spending", "score"],
"pearson": {
"columns": ["age", "income", "spending", "score"],
"correlation": [[1.0, 0.72, ...], ...],
"p_values": [[0.0, 0.0001, ...], ...]
},
"spearman": { "..." : "同 pearson 结构" },
"partial_correlation": {
"columns": ["age", "income", "spending", "score"],
"partial_correlation": [[1.0, 0.15, ...], ...],
"p_values": [[0.0, 0.32, ...], ...],
"df": 196
},
"spurious_correlations": [
{
"var_x": "age",
"var_y": "spending",
"pearson_r": 0.65,
"partial_r": 0.08,
"drop_pct": 87.7,
"reasons": ["偏相关不显著", "相关系数下降 87.7%"]
}
],
"interpretation": {
"概览": ["分析了 4 个变量的相关性..."],
"最强相关对": ["income <-> spending:r = 0.82(很强正相关)"],
"偏相关洞察": ["age <-> spending:控制其他变量后减弱了 87.7%"],
"伪相关检测": ["发现 1 对疑似伪相关..."]
}
}
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 140 lines · 73 tokens per session scan A e56e4f8ce8d7
corr-insight is a skill published in the GitHub repository serejaris/kimi-skills (6 stars, last pushed 1mo ago), licensed MIT. It adds 73 tokens to every session and 1,408 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
offensive-wifi
Wireless / 802.11 attack methodology for red team engagements and wireless security assessments. Covers monitor-mode setup, WPA/WPA2-PSK handshake capture and PMKID attacks, WPA3 SAE downgrade and Dragonblood, WPA-Enterprise (EAP) attacks (MSCHAPv2 cracking, EAP-TLS cert theft, evil-twin RADIUS), Karma / Known Beacons…
syndic
Gère un parc de copropriétés en France avec vue portfolio consolidée. Couvre administration, comptabilité (décret 2005, plan comptable copro, 5 annexes), assemblées générales (convocation, PV, notification), appels de fonds, travaux, fournisseurs, recouvrement d'impayés et transition de syndic. Maîtrise les majorités…
offensive-bluetooth-classic
Bluetooth Classic (BR/EDR) attack methodology — device discovery, service enumeration via SDP, LMP/L2CAP layer attacks, legacy PIN cracking (BlueBorne / KNOB), Bluetooth file-transfer abuse (BlueSnarfing legacy), unauthenticated profile abuse (HSP, HFP, OPP), and modern relevance against older industrial / automotive…
agent-wiki
Incremental LLM-friendly wiki generator for Obsidian note vaults. Use when: (1) Building wiki from notes, (2) Ingesting notes to wiki, (3) Obsidian LLM wiki, (4) Incremental knowledge base management. Triggers: 'build wiki from notes', 'ingest notes to wiki', 'Obsidian LLM wiki', 'incremental knowledge base'.
design-md-validator
Validate DESIGN.md files against the official Google specification using the @google/design.md CLI linter. Works with local files. Use when the user wants to lint a DESIGN.md, check spec compliance, find broken token references, verify WCAG contrast ratios, diff two versions, export tokens to Tailwind or DTCG format…
agent-ready-oauth-protected-resource
Sub-skill de agent-ready-cloudflare: Implement OAuth Protected Resource Metadata.