Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add WaniWani-AI/sdk --skill migrate-waniwani-sdk-0.23-to-0.24git clone --depth 1 https://github.com/WaniWani-AI/sdkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/waniwani-ai/sdk/migrate-waniwani-sdk-0.23-to-0.24)<a href="https://agentmods.dev/skills/waniwani-ai/sdk/migrate-waniwani-sdk-0.23-to-0.24"><img src="https://agentmods.dev/badge/skills/waniwani-ai/sdk/migrate-waniwani-sdk-0.23-to-0.24/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/waniwani-ai/sdk/migrate-waniwani-sdk-0.23-to-0.24"><img src="https://agentmods.dev/badge/skills/waniwani-ai/sdk/migrate-waniwani-sdk-0.23-to-0.24.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00339 | $0.05001 |
| Opus 5.5 | $0.00136 | $0.02000 |
| Sonnet 5.5 | $0.00068 | $0.01000 |
| Haiku 4.5 | $0.00034 | $0.00500 |
Grade A, and why
migrate-waniwani-sdk-0.23-to-0.24 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 336 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Migrate @waniwani/sdk 0.23 → 0.24
A self-contained migration for the single hop from 0.23.x to 0.24.x. It covers only that jump; for other version boundaries use the matching migrate-waniwani-sdk-<from>-to-<to> skill, or the general procedure in the SDK's changelog.
Precondition: the project is on @waniwani/[email protected]. If it is on an older version, migrate up to 0.23 first; if it is already on 0.24+, run the procedure anyway, since most of this hop is invisible to tsc and a project can compile on 0.24 while its flows lose answers.
Projects with no createFlow call have nothing to migrate. Bump the dependency, run the completion check, and stop.
What 0.24 changes
In 0.23 a flow tool listed its whole Zod state schema under stateUpdates in tools/list, and any call could write any state field. A model told to "always include locale on start" set it, and so could text injected into the conversation, including fields the flow computes for itself, such as a vehicle id that decides what gets priced.
In 0.24 the listing names no field. Each interrupt or widget response names the fields it asks for, with their fieldSchema. The engine records the fields a run has asked (asked on the session record) and merges stateUpdates only for those. A question on a z.object group accepts every key inside it.
Two behaviors ship under 0.24.x, and the rewrites below work on both:
- 0.24.0 to 0.24.2 drop every value sent for a field the run has not asked yet. When the flow later asks that question, the model answers it from earlier messages with one silent
continue, and the user is not asked again. - The first 0.24.x release after 0.24.2 that includes held answers (WAN-1464, no version number decided yet) keeps those values on the session record (
held). When an interrupt question asks for one, the engine fills it in the same call and runs the question's validator. A widget's field is never filled from the hold, and neither is a field no question asks.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 336 lines · 339 tokens per session scan A ffe41018234b
migrate-waniwani-sdk-0.23-to-0.24 is a skill published in the GitHub repository WaniWani-AI/sdk (18 stars, last pushed yesterday), licensed MIT. It adds 339 tokens to every session and 5,001 once invoked, about $0.0014 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-15.
Other skills, from other repositories
codex-with-chatgpt
A connection that lets ChatGPT help plan and review coding work while Codex edits files, runs commands, tests code, and handles execution.
codexless-browser-repair
Diagnose and temporarily repair Codexless Browser compatibility after a Codex, Chrome Skill, or Browser runtime update when Codexless Browser stopped working. Use for current-version Codexless Browser compatibility drift, not ordinary website bugs, general Browser operation, Codexless install/update work, or long-term…
add-widget
Add a new widget (React UI + MCP tool) to this template. Use when asked to "add a widget", "add a new tool with UI", "create a new widget", "scaffold a widget", or "build a new MCP App feature".
create-mcp-tool
Add a plain (text-only) or UI-enhanced MCP tool to this template's server. Use when asked to "add a tool", "add an MCP tool", "create a new tool", "add a server-side tool without a widget", "add a tool with a UI", "add a tool with a widget", or "create a tool and a widget".
install-shellby-mcp
Install and verify Shellby MCP on a Mac using terminal access only. Use when a user asks an agent to install, set up, configure, or finish a new Shellby MCP installation from this repository.
audit-logs
Understand and analyze Shellby's agent-commands.yaml audit log format without loading the full log into context.