Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Teddy563/mcwrench --skill permissions-helpergit clone --depth 1 https://github.com/Teddy563/mcwrenchWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/teddy563/mcwrench/permissions-helper)<a href="https://agentmods.dev/skills/teddy563/mcwrench/permissions-helper"><img src="https://agentmods.dev/badge/skills/teddy563/mcwrench/permissions-helper/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/teddy563/mcwrench/permissions-helper"><img src="https://agentmods.dev/badge/skills/teddy563/mcwrench/permissions-helper.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00141 | $0.00795 |
| Opus 5 | $0.00071 | $0.00398 |
| Sonnet 5 | $0.00028 | $0.00159 |
| Haiku 4.5 | $0.00014 | $0.00080 |
Grade A, and why
permissions-helper scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Permissions Helper
Default permission engine: LuckPerms (luckperms.net/wiki). Vault bridges economy/perms
for plugins that read through it. Get the model right before writing nodes.
The four concepts (do not conflate them)
- Groups carry permissions; users inherit groups.
/lp creategroup vip,/lp group vip permission set essentials.fly true,/lp user Steve parent add vip. - Tracks are ordered ladders of groups for promotion/demotion only —
/lp track staff append helper,…append mod. Per the wiki: "tracks act only as a means for easy promotion and demotion… and do not influence inheritance."/lp user Steve promote staff. - Contexts (
key=value) restrict where a permission/parent/meta applies. Built-in keys:server,world,gamemode,dimension-type. Seereferences/luckperms-contexts.md. - Meta — prefix, suffix, weight, and custom meta keys (read elsewhere via PlaceholderAPI
%luckperms_meta_key%)./lp group vip meta setprefix 10 "&a[VIP] ".
Node convention
plugin.feature.action, e.g. essentials.home.multiple.vip, worldguard.region.bypass.
Wildcards (essentials.home.*) work but were historically discouraged in Bukkit; LuckPerms can
apply child permissions with apply-bukkit-child-permissions: true. Prefer explicit nodes for
auditability; use wildcards knowingly.
Inheritance & prefix resolution
- Primary-group calculation defaults to
parents-by-weight. Give groups a weight (/lp group admin meta setweight 100) so the highest-weight group wins prefix/suffix. - Negated nodes (
-some.node) override positives by specificity/weight — use to carve exceptions. - Temporary perms/parents:
/lp user Steve permission settemp … 7d.
Networks (multiple servers, one DB)
- Point every backend at the same LuckPerms SQL database for a shared identity.
- Use static server contexts (per-server
contexts.yml, e.g.server-type=skyblock) or the server'sservercontext so one DB grants per-server perks without leaking them network-wide. - Run LuckPerms on the Velocity proxy too (LuckPerms-Velocity) for proxy-level perms; keep the API jar versions aligned across proxy and backends, or contexts break on update.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 63 lines · 141 tokens per session scan A 04d200412014
permissions-helper is a skill published in the GitHub repository Teddy563/mcwrench (1 stars, last pushed 2d ago), licensed MIT. It adds 141 tokens to every session and 795 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
develop-web-game
Use when Codex is building or iterating on a web game (HTML/JS) and needs a reliable development + testing loop: implement small changes, run a Playwright-based test script with short input bursts and intentional pauses, inspect screenshots/text, and review console errors with rendergametotext.
game-feel
Add "juice" and game feel that makes actions satisfying — screen shake, hit-stop/freeze frames, tweened/eased motion, squash & stretch, knockback, and layered audio-visual feedback — as engine-neutral techniques that pair with the detected engine's tween, particle, and camera APIs. Use when the user mentions game…
performance-optimization
Find and fix game performance problems methodically — measure with the engine profiler first, reason about the frame-time budget, locate the CPU-vs-GPU bottleneck, then apply the right fix: object pooling, draw-call batching, fewer allocations/GC spikes, and asset budgets. Engine- neutral method that pairs with each…
steam-publish
Publish or update a game on Steam with Steamworks and SteamPipe: configure depots and packages, upload builds with steamcmd, set a build live on a branch, and run the release checklists. Use for Steam publishing, appbuild.vdf/steamcmd uploads, depots, beta branches, or a store page release.
ai-behavior-trees-utility-ai
Build a production behavior-tree runtime (Blackboard, action/condition leaves, sequence/selector/parallel composites, decorators) and a Utility AI system (response curves — linear, exponential, sigmoid, quadratic — considerations, and action evaluators), plus hybrid BT-drives-Utility agents. Use when implementing a…
audio-design
Implement game audio practice — bus/mixer architecture and gain in decibels, ducking (sidechain), adaptive/dynamic music via layering and re-sequencing, SFX variation, and beat synchronization. Engine-neutral. Use when the user mentions audio mixing, audio buses, adaptive/dynamic music, ducking, SFX variation, music…