Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/tykisgod/quick-question/executenpx skills add tykisgod/quick-question --skill executegit clone --depth 1 https://github.com/tykisgod/quick-questionWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00028 | $0.04215 |
| Opus 5 | $0.00014 | $0.02107 |
| Sonnet 5 | $0.00006 | $0.00843 |
| Haiku 4.5 | $0.00003 | $0.00421 |
Grade B, and why
execute scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
Before marking execution complete, run **every** grep command in that checklist (Grep tool / `rg`) and confirm each fan-out point is handled — either your diff edited it, or you can justify "no change needed". Do **not** How it starts
The opening of the file, as written. The whole thing — 279 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Respond in the user's preferred language (detect from their recent messages, or fall back to the language setting in CLAUDE.md).
Read a plan, execute it fully. Execution is always automatic — never ask "proceed?" or "start?" during implementation. The user invoked execute; that IS the go-ahead.
Live Unity editing during execution: if a plan step needs to poke the live Unity Editor (inspect a component, modify a scene object, invoke a runtime method) instead of writing new C# code, consult
shared/tykit-reference.mdfor the command map. Use tykit commands directly via the MCP tools (unity_query,unity_object,unity_assets,unity_physics) or direct HTTP (/ping,/health,/focus-unityfor recovery). Only fall back to code-writing for changes that need version control or compile-time validation.
Arguments: $ARGUMENTS
- A file path to a plan/design document
--no-worktree: skip worktree guard--auto: after completion, auto-select and run the next workflow step instead of asking the user (includes push — user should be aware)- No arguments: detect the plan source from conversation or
Docs/qq/
1. Worktree Guard (strict — do NOT bypass)
Worktree isolation is non-negotiable for /qq:execute. Executing a multi-step plan directly on a shared branch pollutes main, blocks parallel work, and makes rollback surgical instead of trivial. You MUST enter a worktree unless one of these three conditions is explicitly met:
- You are already inside a git worktree (check with
git rev-parse --show-toplevel— if it matches.git/worktrees/<name>/in the output ofgit worktree list, you're in one). Skip to step 2. - The user passed
--no-worktreeas a literal flag in$ARGUMENTS. Not "semantically meant" — the exact token must be present. Agent-invented--no-worktree semanticsis forbidden. - The plan is trivially small (≤ 3 steps touching ≤ 3 files, and no .cs compilation). For anything larger, you need a worktree.
Do NOT invent other bypass conditions. If you encounter an obstacle that seems to require skipping the worktree, fix the obstacle, don't skip the safety check. Common obstacles and their correct fixes:
| Obstacle | ❌ Wrong reaction | ✅ Correct reaction |
|---|---|---|
| Plan file is untracked | "switching worktree loses plan → skip worktree" | git add <plan_file> && git commit -m "docs(plan): <slug>" → now plan is in git → enter worktree → plan is visible from worktree. |
| Uncommitted unrelated changes in working tree | "dirty tree → can't worktree → skip" | Commit them (if related to this plan) or stash them (if unrelated). Then enter worktree. If user wants to keep them dirty, they must pass --no-worktree explicitly. |
| Conversation has ephemeral state (open files, scratch edits) | "would lose context → skip" | Conversation state IS lost on worktree entry by design — that's the point of isolation. Re-load plan from disk in the new session. Do not skip for this reason. |
EnterWorktree tool unavailable |
"no tool → skip" | Fall back to ${CLAUDE_PLUGIN_ROOT}/bin/qq-worktree.py create --name <slug>, tell the user to reopen in the new path, and stop. Don't proceed in the main dir. |
The procedure:
-
Verify plan is in git. If the plan file is untracked or has uncommitted changes:
git status -- <plan_file>If dirty, commit it now:
git add <plan_file> git commit -m "docs(plan): <slug> plan document"Announce: "Committed plan doc before entering worktree so it's accessible from the new worktree."
-
Capture source state BEFORE creating the worktree (required for verification in step 5):
SOURCE_BRANCH=$(git rev-parse --abbrev-ref HEAD) SOURCE_HEAD=$(git rev-parse HEAD) echo "Source: $SOURCE_BRANCH @ $SOURCE_HEAD"Remember these — you'll verify the new worktree inherits them.
-
Derive a slug from the plan filename (lowercase, dashes, no extension).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 279 lines · 28 tokens per session scan B 07b44c0ff56c
execute is a skill published in the GitHub repository tykisgod/quick-question (11 stars, last pushed 7d ago), licensed MIT. It adds 28 tokens to every session and 4,215 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
geometry-and-math
Use this skill when using Phaser 4 math and geometry utilities. Covers vectors, rectangles, circles, triangles, polygons, random number generation, angles, distance, interpolation, and snapping. Triggers on: Vector2, Rectangle, Circle, math, distance, angle, random, lerp.
text-and-bitmaptext
Use this skill when displaying text in Phaser 4. Covers Text game objects, BitmapText, web fonts, text styling, word wrap, alignment, padding, and dynamic text content. Triggers on: Text, BitmapText, this.add.text, font, word wrap, text style.
gameobject-component-destroy
Destroy one or more Components from a target GameObject. Missing (null) components are skipped — they cannot be destroyed. Use 'gameobject-find' and 'gameobject-component-get' to identify the components first.
assets-create-folder
Create a new folder under a parent folder inside 'Assets/'. The parent path must start with 'Assets/' and every intermediate folder in it must already exist. Refreshes the AssetDatabase at the end and returns the GUID(s) of the created folder(s).
assets-prefab-save
Save the currently opened prefab edit stage back to its prefab asset without exiting the stage. Pair with 'assets-prefab-open' to enter the edit mode first.
mobile-games
Mobile game development principles. Touch input, battery, performance, app stores.