Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add SonicGarden/copy-tuner-ruby-client --skill copy-tuner-to-t-migrategit clone --depth 1 https://github.com/SonicGarden/copy-tuner-ruby-clientWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sonicgarden/copy-tuner-ruby-client/copy-tuner-to-t-migrate)<a href="https://agentmods.dev/skills/sonicgarden/copy-tuner-ruby-client/copy-tuner-to-t-migrate"><img src="https://agentmods.dev/badge/skills/sonicgarden/copy-tuner-ruby-client/copy-tuner-to-t-migrate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sonicgarden/copy-tuner-ruby-client/copy-tuner-to-t-migrate"><img src="https://agentmods.dev/badge/skills/sonicgarden/copy-tuner-ruby-client/copy-tuner-to-t-migrate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 29 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00206 | $0.04266 |
| Opus 5 | $0.00103 | $0.02133 |
| Sonnet 5 | $0.00041 | $0.00853 |
| Haiku 4.5 | $0.00021 | $0.00427 |
Grade A, and why
copy-tuner-to-t-migrate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 181 lines — stays where its author put it; the contents beside it link to each section on GitHub.
tt → t 移行スキル（copy_tuner_client v2.0.0）
copy_tuner_client がかつて ActionView にフックして生やしていた独自ヘルパー tt（シグネチャは
tt(key, **options)、引数は t と完全同一）を、Rails 標準の t（translate）へ置き換えるワークフロー。
gem を v2.0.0 に上げたアプリのビューに tt(...) が残っていると NoMethodError（未定義ヘルパー） になる。
このスキルは破壊的な一括書き換えを含むため、ユーザが明示的に呼んだときだけ動く（disable-model-invocation）。
なぜ tt を t へ置換するのか
tt はもともと「copyray マーカーを注入しない生の訳文を取る」ためのヘルパーだった。旧方式では t('key') の
戻り値そのものにマーカーが埋め込まれ、truncate / length 等で訳文を文字列加工する箇所でマーカー長が
混入して壊れる問題があり、その対策が tt だった。
PR #122 のマーカー方式刷新で、マーカー注入は戻り値ではなく middleware（CopyrayMiddleware → Rewriter）で
行い HTML 配信前に完全除去するようになった。これにより通常の t がどこでも安全に使えるようになり、tt は
存在理由を失って削除された。背景の詳細は skills/copy-tuner/SKILL.md の「翻訳ヘルパー（t）」と
「落とし穴: 開発環境で訳文にマーカートークンが混入する」を参照。
ただし罠が一つ残る。 マーカー除去は「最終的に HTML へ出力される訳文」に対してのみ効く。development で
t('key') の戻り値をビュー内で文字列加工するコードは、除去前のマーカー込み文字列に作用してしまう（本番では
middleware 自体が無いので再現しない＝開発環境だけ壊れる）。
→ つまり tt を素朴に t へ変えてよいのは「文字列加工していない箇所」だけ。文字列加工している tt を
t にすると、tt がもともと潰していたバグをそのまま復活させてしまう。そこは middleware のラッパーを通らない
I18n.t（絶対キー） へ移すのが正解で、機械的には決められないため 1 件ずつ確認する。
もう一つの罠: label の第一引数に渡す
文字列加工していなくても危険な経路がもう一つある。t(...) の戻り値を label 系ヘルパーの第一引数
（form builder の f.label / label_tag / 素の label）に渡しているケース:
= f.label t('activerecord.attributes.field.keywords'), class: 'form-label'
f.label の第一引数は「ラベルテキスト」ではなく method 名（for 属性・id・ラベル文字列の元）として
扱われる。そのため development では次の連鎖でマーカーが消せない位置に残る:
t(...)が⟦CT:activerecord.attributes.field.keywords⟧分類を返す。f.labelがこれを method 名と解釈し、ラベルテキストとfor属性の 2 か所に展開する。- ラベルテキスト側は Rails の
humanizeで小文字化され⟦ct:…⟧になる。 - Rewriter のマーカー検出プレフィックスは 大文字
⟦CT:固定（lib/copy_tuner_client/copyray/marker.rbのPREFIX）。小文字化された⟦ct:は一致せず、除去されないまま画面に残る。
これも v1.x では tt（マーカー無し版）だったため表面化せず、tt → t 一括置換で初めて顕在化する回帰。
重要: このケースは I18n.t 化では直らない。 マーカーを消しても、t/I18n.t の戻り値（訳文文字列）を
label の第一引数に渡す構造自体が humanize / for 属性の挙動として不適切だからだ。正しい修正は
method 名を第一引数・表示テキストを第二引数に分離すること:
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 181 lines · 206 tokens per session scan A b3f2403f0edc
copy-tuner-to-t-migrate is a skill published in the GitHub repository SonicGarden/copy-tuner-ruby-client (11 stars, last pushed 4d ago), licensed MIT. It adds 206 tokens to every session and 4,266 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
chinese-documentation
A Chinese technical-documentation style guide covering spacing, punctuation, numbers, terminology, and links when Chinese and English appear together.
azure-ai-translation-text-py
Azure AI Text Translation SDK for real-time text translation, transliteration, language detection, and dictionary lookup. Use for translating text content in applications. Triggers: "text translation", "translator", "translate text", "transliterate", "TextTranslationClient".
harden
Improve interface resilience through better error handling, i18n support, text overflow handling, and edge case management. Makes interfaces robust and production-ready. Use when the user asks to harden, make production-ready, handle edge cases, add error states, or fix overflow and i18n issues.
seedance-vocab-ja
This skill should be used when the user asks for Japanese Seedance 2.0 prompt wording, Japanese cinematic vocabulary, or translation of camera, lighting, action, VFX, audio, and production terms into Japanese.
asc-subscription-localization
Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names and descriptions without App Store Connect UI work.
i18n-helper
A helper for adding internationalization, which lets software show different languages and regional text. It finds user-visible text written directly in code and moves it into language files.