Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add tmchow/illo-skill --skill illogit clone --depth 1 https://github.com/tmchow/illo-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tmchow/illo-skill/illo)<a href="https://agentmods.dev/skills/tmchow/illo-skill/illo"><img src="https://agentmods.dev/badge/skills/tmchow/illo-skill/illo/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tmchow/illo-skill/illo"><img src="https://agentmods.dev/badge/skills/tmchow/illo-skill/illo.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 106 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 106 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium MCP Rug Pull · line 264 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Excessive Agency · line 665 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00169 | $0.12827 |
| Opus 5.5 | $0.00068 | $0.05131 |
| Sonnet 5.5 | $0.00034 | $0.02565 |
| Haiku 4.5 | $0.00017 | $0.01283 |
Grade A, and why
illo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 781 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Illo
Make original, distinctive editorial illustrations for written content. One
image explains one idea: a key judgment, a flow, a before/after, a trap, a
loop. A recurring mascot is the one performing the idea in every scene —
the subject, never decoration. When one idea advances through stages, it can
be a mini-comic: 2–4 panels inside a single image. And when the idea is
itself a traceable structure — a pipeline, labeled stages, a fan-out, a
timeline, a loop — it can be an explainer: the same mascot and look
drawing the structure as a hand-built sketch-diagram with arrows and
callouts (references/composition.md, "Two registers" and "Pick the
diagram type"; editorial scene is always the default). A named pipeline
or recipe is labeled stages inside that register — named phases in
order, one connected system, pack-solved for this body, never a new look.
Or a character cutout: the mascot alone on a transparent PNG for downstream overlay
— pose and contact continuity only, no idea, no text, no environment
(references/cutout.md).
This is a configurable house style, not a generic image generator. The
methodology is the constant; the character pack and palette are the
parameters — and a character pack carries its style with it: one look
per pack, chosen from the bundled look library (riso — grainy halftone,
ink-layer offset, paper grain, one bold softly-rounded outline — plus
blueprint, woodcut, pixel, clay, manila, chalk, phosphor, enamel,
gouache, felt, diorama, sketchbook, bricks, fizz, bloom, and snes) or a custom style file. The default mascot is
Blot, a deadpan ink-drop in riso. Palettes come
from presets, the user's own palette file, or one derived color. Whatever the
parameters, it is intentionally not a photo — with one deliberate exception, the
bricks look, a toy-brick photography style — not a logo, not a corporate
infographic, not a formal boxes-and-diamonds flowchart look, not a UI
mockup. Asking for a flowchart still means labeled stages in the pack's
look — the formality ban is a look constraint, not a refusal of the word.
What ships with it
37 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/character-reference-pixel.png 107 KB
- assets/character-reference.webp 165 KB
- assets/checksums.txt 416 B
- NOTICE 703 B
- README.md 19 KB
- references/article-set-character-reroute.md 3.8 KB
- references/backends.md 20 KB
- references/character-builder.md 13 KB
- references/character.md 11 KB
- references/composition.md 34 KB
- references/cutout.md 16 KB
- references/models.md 6.5 KB
- references/pack-sharing.md 6.5 KB
- references/palettes.md 5.3 KB
- references/prompt-recipe.md 17 KB
- references/quality-bar.md 18 KB
- references/styles/bloom.md 5.5 KB
- references/styles/blueprint.md 2.9 KB
- references/styles/bricks.md 6.5 KB
- references/styles/chalk.md 2.8 KB
- references/styles/clay.md 3.6 KB
- references/styles/diorama.md 5.4 KB
- references/styles/enamel.md 3.9 KB
- references/styles/felt.md 5.4 KB
- references/styles/fizz.md 5.2 KB
- references/styles/gouache.md 3.1 KB
- references/styles/manila.md 3.2 KB
- references/styles/phosphor.md 3.0 KB
- references/styles/pixel.md 2.9 KB
- references/styles/sketchbook.md 6.8 KB
- references/styles/snes.md 8.4 KB
- references/styles/woodcut.md 2.6 KB
- references/surprise.md 28 KB
- references/visual-style.md 3.4 KB
- scripts/diagram_route.py 25 KB runs code
- scripts/illo.py 105 KB runs code
- scripts/repair-hermes-assets.sh 2.1 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 28d ago Changed · +61 lines e8f14bc5ea44
- 1mo ago Changed 9d096f3a794a
- 1mo ago First seen · 720 lines · 169 tokens per session scan A 592503f91a15
illo is a skill published in the GitHub repository tmchow/illo-skill (407 stars, last pushed 29d ago), licensed MIT. It adds 169 tokens to every session and 12,827 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
article-illustrations
Generate hand-drawn 16:9 article illustrations with the Grav character IP, sparse annotations, and absurd but clear visual metaphors.
ian-xiaohei-illustrations
A method for creating hand-drawn Chinese illustrations that explain the main idea, structure, process, or metaphor in an article or document. It uses a recurring black character called Xiaohei as the central figure.
photo-revival
Turn ordinary photos or everyday snapshots into poetic hand-drawn illustrations with large white-paper negative space, vivid localized color, subtle collage accents, and tiny handwritten captions. Use when a user wants a real photo reimagined as an illustration rather than filtered, beautified, or photorealistically…
vision-review
A tool for reading images and checking screenshots, including text, layout, visual defects, watermarks, and logos.
media-tools
A guide and script for generating images, illustrations, avatars, backgrounds, and banners through configured image-generation services. It uses available API keys from environment or local secret files.
codex-imagegen
A Codex skill for creating or editing raster images—bitmap files such as PNG, JPEG, or WebP—using an image-generation model.