Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add stark-ai-de/agent-skills --skill skillopt-setupgit clone --depth 1 https://github.com/stark-ai-de/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/stark-ai-de/agent-skills/skillopt-setup)<a href="https://agentmods.dev/skills/stark-ai-de/agent-skills/skillopt-setup"><img src="https://agentmods.dev/badge/skills/stark-ai-de/agent-skills/skillopt-setup.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.02842 |
| Opus 5 | $0.00037 | $0.01421 |
| Sonnet 5 | $0.00015 | $0.00568 |
| Haiku 4.5 | $0.00007 | $0.00284 |
Grade A, and why
skillopt-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 153 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SkillOpt Setup
Goal
Set up and operate a local SkillOpt workflow that improves one Agent Skill at a time while preserving frontmatter, validation, and public-proof boundaries.
When to use
- Installing or checking Microsoft SkillOpt for this repo.
- Preparing SkillOpt train/val/test data from
skill-evals/. - Configuring provider-backed, hybrid Codex CLI, or exploratory all-Codex CLI execution.
- Running SkillOpt for a target
SKILL.md. - Reviewing, summarizing, or importing
best_skill.md. - Creating public run evidence without committing raw transcripts.
When not to use
- Ordinary skill authoring or manual
SKILL.mdreview. - Trigger-description tuning only.
- Repo validation without SkillOpt.
- Directly implementing an optimized skill before review.
Inputs to inspect
- Target skill path under
skills/orincubator/skills/. skill-evals/<skill>/README.md,cases/,fixtures/,expected/,rubric.md, andruns/.- Current
SKILL.mdfrontmatter and body. .gitignoreandAGENTS.mdsafety rules.- Local
.agents/tools/SkillOptstate, if present. - Local
.agents/artifact audit when mining prior setup work or troubleshooting stale workspaces. - Local
uvavailability and local Python 3.10+ compatibility. - Local Codex CLI availability and login state if Codex mode is requested.
- Visual assertion cases, render-capable requirements, and draw.io Desktop CLI availability when target evals need PNG/SVG artifacts.
Workflow
Guide the user through setup as a short wizard. Ask one decision at a time unless the user already supplied the answer; do not dump every command or option before the relevant step.
- Wizard step: target. Identify exactly one target skill and whether it is incubator or promoted. If missing or ambiguous, ask which skill should be optimized.
- Wizard step: existing setup. Immediately inspect
.agents/tools/SkillOpt,.agents/tools/SkillOpt.commit, and.agents/skillopt-work. If any exist, ask whether to remove the current local setup or reuse/update it before dry-run or production setup. Cleanup is global to the local SkillOpt setup and must not remove.agents/skills/. - If the user chooses cleanup, run
setup-skillopt-local.mjs --cleanup-only --approvedyourself before setup. Do not present cleanup as a copy-paste command. - When the user asks to move prior
.agents/learnings into the skill, runaudit-skillopt-local-artifacts.mjsfirst. Promote only sanitized scripts, references, templates, eval cases, or curated summaries; never promote raw clones, installed skill copies, data splits, run outputs, transcripts, or readiness diagnostics. - Wizard step: setup goal. Explain the recommended branches:
- easiest no-provider path:
codex-cli-all, exploratory, uses Codex CLI login for rollouts, semantic judging, and adapter-managed reflection; keep slow update and meta skill disabled in this mode because those upstream epoch-boundary mechanisms call the provider-backed optimizer path, - best official-parity path:
hybrid-codex-targetornative-provider, provider-backed optimizer/reflection, requires credentials and model pins.
- Wizard step: Python. Prefer
uv. Ifuvis missing, ask whether to installuvor explicitly use compatible local Python 3.10+. - Wizard step: data quality. Run readiness or split preparation early enough to report positive, validation, and test counts. Official-parity proof needs at least 20 positive cases, 5 validation cases, and 5 test cases; otherwise classify the run as exploratory or blocked for proof.
- Wizard step: execution and visual readiness. Require the bounded strict-config capability probe for every active Codex target, judge, or reflection role, including text-only cases. If any cases declare
visual_assertions, also checkvisualArtifactReadiness, generatedtool_rollout_for_visual_assertions, andvisual_eval_policy. Visual Codex cases may use bounded file edits and shell commands only under the enforced read-isolated rollout permission profile, for copied helper scripts, draw.io XML, validation, and requested PNG/SVG exports; non-visual Codex rollouts remain text-only with no workspace read or write grant. If draw.io CLI is missing, use the generateddata-text-onlysplit and report that full visual proof still requires the renderer. Native-providerautomode must also selectdata-text-onlybecause provider chat targets cannot create local artifacts. - Wizard step: best-practice configuration. For official-parity, require provider credential presence plus
SKILLOPT_OPTIMIZER_MODEL,SKILLOPT_TARGET_MODEL, and judge model pins. Forcodex-cli-all, preserve exploratory defaults, require slow update/meta skill to stay disabled, and report which upstream provider-backed behavior is bypassed. - Wizard step: dry-run. Ask whether the user wants a dry-run first unless already answered. If yes, run setup without
--approved, report the dry-run result only, and ask whether to continue. Do not show production setup commands or SkillOpt training commands after dry-run. - Wizard step: production setup. If the user skips dry-run or approves continuation, run production-grade setup with
--approved, using.agents/as the persistent workspace and passing--existing-setup-choice reusewhen reuse was chosen. - Prepare or update the ignored SkillOpt workspace, split JSON, local adapter, target manifest, and mode/profile config.
- When the user wants a guaranteed training-ready setup, use
--strict-training-ready; block rather than hand off a training command if credentials, model pins, Codex probe, visual artifact readiness, adapter patches, or refreshed target manifest checks are missing. - After successful production setup, recommend the paste-ready new-terminal SkillOpt command. It must stream logs, print explicit success/failure, run artifact verification, show a compact summary, and run
best_skill.mddry-run adoption preview. - Include manual rerun commands with short descriptions for artifact verification, run summary, dry-run adoption preview, eval-only evaluation, and optional WebUI.
- Offer current-session execution only as an explicit option:
Should I run SkillOpt training for <target-skill> in this agent session anyway? - Inspect
best_skill.md, diff it against the original skill body, validate adoption gates, ask before tracked writes, and save only curated public evidence underskill-evals/<target>/runs/.
What ships with it
38 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/agent-skills-benchmark/adapter.py.template 14 KB
- assets/agent-skills-benchmark/codex_cli_reflector.py.template 28 KB
- assets/agent-skills-benchmark/config.codex-cli-all.yaml 1.5 KB
- assets/agent-skills-benchmark/config.hybrid-codex-target.yaml 1.7 KB
- assets/agent-skills-benchmark/config.native-provider.yaml 1.3 KB
- assets/agent-skills-benchmark/dataloader.py.template 6.6 KB
- assets/agent-skills-benchmark/evaluator.py.template 63 KB
- assets/agent-skills-benchmark/prompts/analyst_error_full_rewrite.md 215 B
- assets/agent-skills-benchmark/prompts/analyst_error.md 193 B
- assets/agent-skills-benchmark/prompts/analyst_success_full_rewrite.md 157 B
- assets/agent-skills-benchmark/prompts/analyst_success.md 183 B
- assets/agent-skills-benchmark/prompts/codex_cli_reflect_failure.md 202 B
- assets/agent-skills-benchmark/prompts/codex_cli_reflect_success.md 186 B
- assets/agent-skills-benchmark/README.md 1.7 KB
- assets/agent-skills-benchmark/rollout.py.template 144 KB
- assets/agent-skills-benchmark/schemas/codex_cli_patch.schema.json 1.2 KB
- assets/agent-skills-benchmark/schemas/codex_cli_rollout.schema.json 854 B
- references/adapter-contract.md 5.8 KB
- references/adoption-policy.md 1.0 KB
- references/codex-cli-runner.md 3.3 KB
- references/credential-modes.md 5.8 KB
- references/data-schema.md 7.7 KB
- references/local-artifact-audit.md 1.9 KB
- references/local-openai-gateway.md 5.1 KB
- references/official-best-practices.md 4.1 KB
- references/runbook.md 20 KB
- references/troubleshooting.md 5.8 KB
- scripts/apply-skillopt-best.mjs 14 KB runs code
- scripts/audit-skillopt-local-artifacts.mjs 22 KB runs code
- scripts/check-skillopt-readiness.mjs 100 KB runs code
- scripts/codex-local-openai-chat-gateway.mjs 52 KB runs code
- scripts/prepare-local-skillopt-adapter.mjs 25 KB runs code
- scripts/prepare-skillopt-split.mjs 23 KB runs code
- scripts/probe-codex-cli.mjs 4.3 KB runs code
- scripts/probe-openai-compatible-endpoint.mjs 7.9 KB runs code
- scripts/setup-skillopt-local.mjs 41 KB runs code
- scripts/summarize-skillopt-run.mjs 18 KB runs code
- scripts/verify-skillopt-run-artifacts.mjs 7.4 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 153 lines · 74 tokens per session scan A 347cd233aea0
skillopt-setup is a skill published in the GitHub repository stark-ai-de/agent-skills (5 stars, last pushed today), licensed Apache-2.0. It adds 74 tokens to every session and 2,842 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
openlore-brainstorm
Transform a feature idea into an annotated story using a Domain Sketch or Constrained Option Tree. Use when asked to brainstorm, explore, or shape a feature before implementation.
openlore-debug
Debug with OpenLore structural context, an explicit root-cause hypothesis, and RED/GREEN verification. Use when a bug, failure, or regression needs diagnosis and repair.
openlore-execute-refactor
Apply a confirmed .openlore/refactor-plan.md with a test gate after each change. Use when asked to execute or continue an OpenLore refactoring plan.
openlore-implement-story
Implement a brownfield story with OpenLore orientation, risk checks, spec validation, tests, and drift detection. Use when asked to implement or continue a story in an existing codebase.
openlore-plan-refactor
Identify a high-priority refactoring target, assess its blast radius, and write .openlore/refactor-plan.md without changing code. Use when asked to plan or prioritize a refactor.
openlore-write-tests
Write and run real tests for a function or spec scenario after reading implementation and contract evidence. Use when asked to add, improve, or repair tests without stubs or placeholders.