Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/unicorn-plugins/dmap/publishnpx skills add unicorn-plugins/dmap --skill publishgit clone --depth 1 https://github.com/unicorn-plugins/dmapWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00015 | $0.02344 |
| Opus 5 | $0.00008 | $0.01172 |
| Sonnet 5 | $0.00003 | $0.00469 |
| Haiku 4.5 | $0.00002 | $0.00234 |
Grade A, and why
publish scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 254 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Publish
목표
개발 완료된 DMAP 플러그인을 GitHub 원격 저장소에 배포하고, 사용자가 마켓플레이스를 통해 플러그인을 바로 설치할 수 있도록 안내함.
활성화 조건
사용자가 /dmap:publish 호출 시 또는 develop-plugin 스킬의 Phase 4 완료 후 연결 시.
"배포", "publish", "GitHub에 올려줘", "플러그인 등록" 키워드 감지 시.
작업 환경 변수 로드
AGENTS.md에서 아래 환경변수 로드함. 없으면 '/dmap:team-panner'를 먼저 수행하도록 안내하고 종료.
- AI_RUNTIME: 런타임 종류. Claude Code 또는 Claude CoWork
- DMAP_PLUGIN_DIR: DMAP 플러그인의 루트 절대 경로
- PLUGIN_DIR: 생성할 플러그인의 루트 절대 경로
- PLUGIN_NAME: 생성할 플러그인 이름
참조
| 문서 | 경로 | 용도 |
|---|---|---|
| GitHub 계정 가이드 | {DMAP_PLUGIN_DIR}/resources/guides/github/github-account-setup.md |
계정 생성 안내 |
| GitHub 토큰 가이드 | {DMAP_PLUGIN_DIR}/resources/guides/github/github-token-guide.md |
PAT 생성 안내 |
| GitHub Organization 가이드 | {DMAP_PLUGIN_DIR}/resources/guides/github/github-organization-guide.md |
Organization 생성 안내 |
| create_repo 도구 | {DMAP_PLUGIN_DIR}/resources/tools/customs/git/create_repo.py |
GitHub 저장소 생성 및 Push |
스킬 부스팅
| 단계 | 부스팅 스킬 | 용도 |
|---|---|---|
| Step 1 (인증 정보 수집) | /oh-my-claudecode:security-review |
토큰 저장 및 .gitignore 처리 보안 검증 |
| Step 2.5 (원격 URL 검증) | /oh-my-claudecode:security-review |
원격 URL 토큰 노출 자동 감지 및 수정 |
| Step 2~3 (Push + 완료) | /oh-my-claudecode:ultraqa |
배포 결과 검증 (저장소 접근, README 확인) |
워크플로우
Step 1: GitHub 인증 정보 수집
사용자에게 GitHub 인증 정보를 수집함.
AskUserQuestion 도구로 다음 정보를 순차적으로 문의:
-
GitHub 계정 보유 여부
- 보유: 다음 단계로 진행
- 미보유: 계정 생성 가이드 링크 제공 후 대기
{DMAP_PLUGIN_DIR}/resources/guides/github/github-account-setup.md참조 안내
-
GitHub Username 입력 요청
-
Private Repository 사용 여부 입력 요청
-
Personal Access Token (PAT) 입력 요청
- 미보유 시: 토큰 생성 가이드 링크 제공
{DMAP_PLUGIN_DIR}/resources/guides/github/github-token-guide.md참조 안내 - PAT 필요 권한:
repo(전체)
- 미보유 시: 토큰 생성 가이드 링크 제공
-
Organization 사용 여부
- 개인 계정 사용: username을 owner로 설정
- Organization 사용: org 이름 입력 요청
- Organization 미보유 시: 생성 가이드 링크 제공
{DMAP_PLUGIN_DIR}/resources/guides/github/github-organization-guide.md참조 안내
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 254 lines · 15 tokens per session scan A 7ef5c6da325f
publish is a skill published in the GitHub repository unicorn-plugins/dmap (21 stars, last pushed 3mo ago), licensed MIT. It adds 15 tokens to every session and 2,344 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
agent-host-chat-contributions
Build and review cross-cutting agent-host chat behavior through lifecycle contributions. Use when adding turn lifecycle side effects, prompt or context injection, restored-history transformation, protocol-action observation, or when reviewing changes that add code to AgentSideEffects or AgentService.
auto-perf-optimize
Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.