Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add SummerSec/SumSec-Skills --skill claude-agents-symlinkgit clone --depth 1 https://github.com/SummerSec/SumSec-SkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/summersec/sumsec-skills/claude-agents-symlink)<a href="https://agentmods.dev/skills/summersec/sumsec-skills/claude-agents-symlink"><img src="https://agentmods.dev/badge/skills/summersec/sumsec-skills/claude-agents-symlink/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/summersec/sumsec-skills/claude-agents-symlink"><img src="https://agentmods.dev/badge/skills/summersec/sumsec-skills/claude-agents-symlink.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00092 | $0.00952 |
| Opus 5 | $0.00046 | $0.00476 |
| Sonnet 5 | $0.00018 | $0.00190 |
| Haiku 4.5 | $0.00009 | $0.00095 |
Grade A, and why
claude-agents-symlink scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
CLAUDE 指向 AGENTS 软链接统一
目标
将仓库根目录的 Claude 文件改为指向根目录 AGENTS 文件的软链接，同时对已有的非链接文件保持保守处理。
工作流
- 确认项目根目录。
优先使用
git rev-parse --show-toplevel。如果当前目录不是 Git 仓库，就使用用户明确提供的根目录路径。 - 定位目标 AGENTS 文件。
接受
AGENTS.md或agents.md。如果两者都不存在，停止并询问用户哪个文件应该作为真实来源。 - 检查 Claude 侧文件。
接受
CLAUDE.md或claude.md。 如果它已经是指向 AGENTS 文件的软链接，直接报告成功并停止。 如果它是普通文件，或者软链接指向了别处，先检查内容，再决定是否替换。 - 保护已有内容。 如果现有 Claude 文件不是软链接且包含独立内容，不要静默覆盖。替换前必须征得用户确认。
- 优先使用随附脚本。
使用
scripts/ensure_claude_symlink.py，这样同一套流程可以同时覆盖 Windows、macOS、Linux。 - 变更后再次校验。 确认软链接已创建、指向的是 AGENTS 文件、使用相对目标路径，并把备份路径回报给用户。
推荐命令
优先在项目根目录执行随附脚本。
macOS / Linux:
python3 scripts/ensure_claude_symlink.py --root "$(git rev-parse --show-toplevel)"
Windows PowerShell:
py -3 scripts/ensure_claude_symlink.py --root (git rev-parse --show-toplevel)
如果检查后确认需要替换已有 Claude 文件：
python3 scripts/ensure_claude_symlink.py \
--root "$(git rev-parse --show-toplevel)" \
--replace-existing
安全规则
- 未经明确批准，不要覆盖一个不是软链接的 Claude 文件。
- 替换前优先备份已有 Claude 文件。除非显式传入
--no-backup，随附脚本会自动保留备份。 - 如果一侧已经存在文件名大小写形式，尽量沿用该形式。
- 优先使用相对软链接目标，例如
AGENTS.md，保证仓库跨机器迁移时仍可用。 - 如果仓库有意采用反向关系，例如
AGENTS.md -> CLAUDE.md，先停下来确认，不要直接翻转。 - 如果大写和小写变体同时存在，不要猜测，先让用户明确选择规范文件名。
Windows 说明
- Python 在 Windows 上可以创建软链接，但如果系统未开启开发者模式，或者当前 shell 缺少权限，可能会失败。
- 如果 Python 创建软链接失败，要把具体报错告诉用户，并建议先完成以下任一处理后再重试：
- 开启 Windows 开发者模式。
- 使用管理员权限重新运行 shell。
- 改用 Windows 原生命令重试。
PowerShell 兜底命令：
New-Item -ItemType SymbolicLink -Path CLAUDE.md -Target AGENTS.md -Force
cmd.exe 兜底命令：
mklink CLAUDE.md AGENTS.md
校验
- 在 macOS 或 Linux 上，使用
ls -l CLAUDE.md AGENTS.md。 - 在 Windows PowerShell 上，使用
Get-Item CLAUDE.md | Select-Object LinkType, Target。 - 确认通过
CLAUDE.md和AGENTS.md读取到的是同一份内容。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 87 lines · 92 tokens per session scan A 8b2cdbcd830a
claude-agents-symlink is a skill published in the GitHub repository SummerSec/SumSec-Skills (8 stars, last pushed 27d ago), licensed Apache-2.0. It adds 92 tokens to every session and 952 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
j-space
Use this skill to establish and operate the model's inner workspace — the J-space — for any task that needs more than fluent output: multi-step or chained reasoning, planning, long-horizon and agentic work, competition-level problems, complex debugging, keeping many parts of a deliverable globally consistent, holding…
install-openviking-memory
Install and configure the OpenViking long-term memory plugin for OpenClaw via natural conversation. Once installed, the plugin automatically captures facts from chats and recalls relevant context before each reply (auto-capture + auto-recall, cross-session). Covers prerequisites, install through OpenClaw's plugin…
openviking-context-database
Use OpenViking from OpenClaw through @openviking/openclaw-plugin: long-term memory, session archives, resource and Agent Skill import, semantic recall, recall trace debugging, and externalized tool-result recovery. Prefer this skill when the user wants to use, query, debug, or operate OpenViking context from an…
ov-experience-memory
Retrieve and apply OpenViking Experience memories through the Agent runtime's generic OpenViking search and read tools. Use before or during executable, multi-step, or tool-based work such as coding, file or data changes, configuration, deployment, workflow execution, and failure recovery when prior operational…
openviking-memory
Recall and persist long-term memory through the OpenViking MCP tools. Use at the start of any substantive task (coding, configuration, debugging, multi-step or tool-based work) to retrieve relevant prior knowledge with find/search/read, and during or after work to persist durable facts, preferences, decisions, and…
experience_loader
Load relevant OpenViking experience memories via case-linked experience candidates before solving a task.