Borrowing it
Nothing to install: this file belongs to starcat-app/Starcat. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/starcat-app/Starcat/main/.claude/skills/starcat-public-site-and-promo/SKILL.mdgit clone --depth 1 https://github.com/starcat-app/StarcatWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/starcat-app/starcat/starcat-public-site-and-promo)<a href="https://agentmods.dev/skills/starcat-app/starcat/starcat-public-site-and-promo"><img src="https://agentmods.dev/badge/skills/starcat-app/starcat/starcat-public-site-and-promo/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/starcat-app/starcat/starcat-public-site-and-promo"><img src="https://agentmods.dev/badge/skills/starcat-app/starcat/starcat-public-site-and-promo.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00104 | $0.00647 |
| Opus 5 | $0.00052 | $0.00324 |
| Sonnet 5 | $0.00021 | $0.00129 |
| Haiku 4.5 | $0.00010 | $0.00065 |
Grade A, and why
starcat-public-site-and-promo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Starcat 官网与推广同步
使用这个 skill 处理 supports/starcat-site/ 官网部署、nginx 配置发布、官网 changelog 生成，以及 supports 各项目 README 推广区块同步。
硬性规则
- 先说明会改本地文件还是远程服务器，等确认后再执行。
supports/starcat-site/direct/deploy.sh会通过ssh/rsync修改aliyun2服务器，属于生产副作用。supports/starcat-site/direct/deploy.sh会依次上传 nginx 配置、reload nginx 并同步静态资源，必须确认完整副作用。sync-starcat-readme-promo.py会批量改 supports 多个 README，执行前先说明影响范围。- 不要复制公开图片到各项目；推广区块统一引用
starcat-pro的远程图片。
入口选择
| 任务 | 使用入口 |
|---|---|
| 部署 Direct 官网与 nginx | cd supports/starcat-site/direct && ./deploy.sh |
| 部署 Direct 测试站与 nginx | cd supports/starcat-site/direct-test && ./deploy.sh |
| 生成官网 changelog 页面 | python3 supports/starcat-site/direct/generate-changelog.py |
| 同步 README 推广区块 | supports/scripts/sync-starcat-readme-promo.py |
| Direct 发布时全链路官网/appcast | 使用 starcat-release skill 的 release-direct.sh |
标准工作流
- 读取
references/site-promo-map.md。 - 只读检查：
git status --shortls supports/starcat-sitetest -f supports/starcat-site/direct/starcat.ink.conf- 需要远程操作时先确认
~/.ssh/config有aliyun2。
- 对本地生成类任务先执行并检查 diff。
- 对远程部署类任务先说明命令、远程目录和可验证 URL。
- 等确认后执行。
- 验证：
- 官网：
https://starcat.ink - changelog：
https://starcat.ink/changelog.html - nginx：
ssh aliyun2 "nginx -t"或脚本内校验结果。
- 官网：
参考
详细命令、排除规则、README marker 和失败恢复见 references/site-promo-map.md。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 47 lines · 104 tokens per session scan A 6f550a5c0222
starcat-public-site-and-promo is a skill published in the GitHub repository starcat-app/Starcat (165 stars, last pushed yesterday), licensed MIT. It adds 104 tokens to every session and 647 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
my-wiki
A skill for managing a local Markdown knowledge vault that stores captured webpages, PDFs, Office files, notes, images, folders, and ZIP files. It links preserved source material, called References, to durable topic pages, called Concepts.
memobase
A Russian-language skill for searching a local knowledge base built from documents and other sources such as web pages, YouTube, audio, and Obsidian notes.
chromadb-manager
Query the ChromaDB Manager document base over MCP.
clone-projects
Clone or sync the project repositories you work on into a local workspace laid out by the same domains as the vault, so notes and code sit side by side. Use when setting up a machine, onboarding a new project, or refreshing all clones.
skill-installer
A cross-platform assistant for installing coding-agent skills on Windows, macOS, and Linux. It adapts installation commands and handles common Git, network, and file-path issues.
mem0-test-integration
Verify a Mem0 integration produced by /mem0-integrate. Runs in the same workspace on the same branch (loose coupling) — installs dependencies, runs the repo's native test suite, then exercises a real end-to-end smoke flow against the user's API key. Produces a scorecard. TRIGGER when: user has just run /mem0-integrate…