Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add uvwt/agentdock-skills --skill linkwardengit clone --depth 1 https://github.com/uvwt/agentdock-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/uvwt/agentdock-skills/linkwarden)<a href="https://agentmods.dev/skills/uvwt/agentdock-skills/linkwarden"><img src="https://agentmods.dev/badge/skills/uvwt/agentdock-skills/linkwarden.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01648 |
| Opus 5 | $0.00000 | $0.00824 |
| Sonnet 5 | $0.00000 | $0.00330 |
| Haiku 4.5 | $0.00000 | $0.00165 |
Grade A, and why
linkwarden scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 128 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Linkwarden Skill
通过 Linkwarden 官方 HTTP API 查询和管理书签、集合、标签与高亮。Skill 使用 Bearer Token，只依赖 Python 标准库，不包含 Linkwarden 源码或服务端组件。
适用场景
使用本 Skill 处理：
- 检查 Linkwarden 实例版本、连通性和鉴权配置；
- 搜索书签，按集合、标签、置顶状态筛选；
- 查看书签详情、归档状态和高亮；
- 创建或修改书签；
- 查看、创建或修改集合；
- 查询标签；
- 在明确确认后删除书签、集合或标签，以及重新生成归档。
不要使用本 Skill 处理用户注册、密码重置、管理员用户管理、文件上传、Token 创建/吊销、批量删除或任意 API 透传。这些能力不属于当前安全边界。
环境变量
| 变量 | 类型 | 必填 | 说明 |
|---|---|---|---|
LINKWARDEN_URL |
config | 是 | Linkwarden 实例根地址，例如 https://links.example.com |
LINKWARDEN_TOKEN |
secret | 是* | API Bearer Token；除公开状态检查外均必填 |
LINKWARDEN_INSECURE_TLS |
config | 否 | 仅自签名证书调试时设为 1；会跳过 TLS 证书校验 |
环境变量缺失时，脚本返回结构化错误，不会尝试读取浏览器 Cookie、配置文件或宿主私有目录。
安全约束
- 服务地址只允许
http或https，禁止在 URL 中嵌入用户名、密码、查询参数或片段。 - Token 只从当前进程环境读取，不通过参数传递，也不会出现在输出和错误信息中。
- 查询统一使用
/api/v1/search；不使用已废弃的GET /api/v1/links。 - 修改书签或集合前先读取当前对象，再构造 Linkwarden 要求的完整请求体，避免未提供字段被意外清空。
delete-link、delete-collection、delete-tag和rearchive-link必须收到confirm: true。- 删除集合还必须提供与当前集合名称完全一致的
confirm_name。 - 删除标签还必须提供与当前标签名称完全一致的
confirm_name，以及与当前关联书签数量完全一致的confirm_link_count。 rearchive-link会删除现有归档文件并触发重新归档，属于有数据影响的操作。- 不开放批量操作和任意路径请求，避免扩大误操作范围。
执行方式
在 Skill 包根目录运行：
printf '%s' '{"skill_action":"status"}' | python3 run.py
输入必须是 JSON 对象，动作字段为 skill_action。输出始终为 JSON；HTTP 响应保持在 response 字段中。
动作
| 动作 | 类型 | 主要输入 | 说明 |
|---|---|---|---|
status |
只读 | 无 | 检查环境配置；已配置 URL 时调用公开 /api/v1/config |
search |
只读 | query?, sort?, cursor?, collection_id?, tag_id?, pinned_only? |
搜索或分页读取书签 |
get-link |
只读 | id |
获取单条书签完整信息 |
get-highlights |
只读 | id |
获取书签高亮 |
create-link |
写入 | url, name?, description?, collection_id? 或 collection_name?, tags? |
创建 URL 书签 |
update-link |
写入 | id 以及需要修改的字段 |
读取现状后合并更新；支持名称、URL、描述、样式、集合、标签和置顶用户 ID |
rearchive-link |
破坏性写入 | id, confirm: true |
清除当前归档并触发重新归档 |
delete-link |
删除 | id, confirm: true |
删除单条书签 |
list-collections |
只读 | 无 | 获取当前用户可访问的集合 |
get-collection |
只读 | id |
获取集合详情 |
create-collection |
写入 | name, description?, color?, icon?, icon_weight?, parent_id? |
创建集合或子集合 |
update-collection |
写入 | id 以及需要修改的字段 |
读取现状并保留成员关系后更新 |
delete-collection |
删除 | id, confirm: true, confirm_name |
名称匹配后删除集合 |
list-tags |
只读 | search?, sort?, cursor? |
查询标签，默认按名称升序 |
delete-tag |
删除 | id, confirm: true, confirm_name, confirm_link_count |
名称与当前关联数量均匹配后删除单个标签 |
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 128 lines · 0 tokens per session scan A 6d7d5b25a07d
linkwarden is a skill published in the GitHub repository uvwt/agentdock-skills (3 stars, last pushed 7d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 1,648 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
stay-within-limits
Use when long-running or parallel agent work must respect 5-hour and weekly usage limits by checking usage between waves, pausing near the cap, and resuming only when the window is clear.
obsidian-bases
Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries. Use when working with .base files, creating database-like views of notes, or when the user mentions Bases, table views, card views, filters, or formulas in Obsidian.
crisis-holding
Draft crisis holding statements, journalist Q&A posture, and what-not-to-say guidance from confirmed incident facts, with a hard legal-counsel gate. Builds each statement through proven crisis-comms frameworks (holding-statement anatomy, SCCT, CAP order, the legitimate non-answer, bridge/flag/block).
find-journalists
Build, refine, dedupe, and enrich small fit-checked journalist lists for newsjack campaigns. Uses the newsjack CLI (preferred) or the medialyst MCP for news search and journalist enrichment, and falls back to a best-effort local mode with no verified contacts; the agent owns how returned data is organized.
story-origin-check
Recover the first public timestamp and canonical major coverage for a newsjacking signal, then decide whether newer coverage is the same story, a different story, or a materially new development.
prompt-proximity-architecture
Turn an approved measurement charter, ICPs, and buyer jobs into a budget-aware prompt coverage blueprint across proximity bands, aided status, information acts, journey states, roles, locales, evidence grades, partitions, and measurement lanes. Use before prompt wording to define required, optional, and prohibited…