Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add wardawgmalvicious/agent-config --skill author-skillgit clone --depth 1 https://github.com/wardawgmalvicious/agent-configWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wardawgmalvicious/agent-config/author-skill)<a href="https://agentmods.dev/skills/wardawgmalvicious/agent-config/author-skill"><img src="https://agentmods.dev/badge/skills/wardawgmalvicious/agent-config/author-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wardawgmalvicious/agent-config/author-skill"><img src="https://agentmods.dev/badge/skills/wardawgmalvicious/agent-config/author-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00212 | $0.06705 |
| Opus 5.5 | $0.00085 | $0.02682 |
| Sonnet 5.5 | $0.00042 | $0.01341 |
| Haiku 4.5 | $0.00021 | $0.00671 |
Grade A, and why
author-skill scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Enumerates other installed skillslowAgent snooping
Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.
scope for exactly this reason; `ls -d .claude/skills/*/` lists what Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 511 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Author a skill
Take a topic and end at a linted SKILL.md draft plus a runnable
fresh-session test plan. The input is a subject, not a specification —
deciding the name, the boundaries, and what the skill deliberately will
not cover is the work, not a precondition for it.
This skill is house-style. It encodes how this repo builds skills; the generic mechanics of the Agent Skills format are somebody else's job (see step 1).
Paths below are relative to the repo root. This skill is project scope and
fires only in sessions here, but a skill it authors in skills/ deploys
through ~/.claude/skills — a real directory holding one junction per
skill in that tree.
An edit is immediate; a new skill needs the linker once. The
asymmetry follows from those per-skill junctions. Editing an
already-junctioned skill is live the moment it hits disk, for every
session on this machine, committed or not. But a directory that did not
exist at the last scripts/link-claude.ps1 run has no junction, so
a newly authored skill is invisible everywhere — absent from the
listing, and /<name> answers Unknown command. Measured 2026-09-02:
land was missing from a listing of 8 junctions immediately after its
SKILL.md was written, and appeared only once the linker ran. On this
machine the form is ./scripts/link-claude.ps1 -SkillGroups workflow,social,meta,
never bare — see root CLAUDE.md.
A platform skill is the exception that proves the rule: its group is
pruned from user scope here on purpose, so a new one enters no session's
payload until a -ClaudeDir run links it into one repo's .claude/.
A project-scope skill needs the linker not at all, which is the
third case and the easiest to get wrong in the other direction. Nothing
junctions .claude/skills/ — Claude Code reads it in place — so a new
skill there is live on save for sessions in this repo, with no deploy
step to forget. Do not run the linker "to pick it up"; it selects out of
skills/ and will not see it. The trade is that it is live only here,
which is the whole reason it is there.
Once linked, a half-drafted skill is a live half-drafted skill; finish the frontmatter before walking away.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +2 lines 51b6fe55e5b1
- 8d ago Changed · +1 lines cce016b73771
- 10d ago Changed · -3 lines 592256570895
- 12d ago Changed bc7c521af9fd
- 15d ago Changed cc5702534efd
- 20d ago Changed · +1 lines · -7 tokens per session 7a13dd78ce5d
- 23d ago Changed · +38 lines f0014e9219ae
- 1mo ago Changed · +2 lines e05af191e754
- 1mo ago Changed fa0ffb4bcc9c
- 1mo ago First seen · 470 lines · 219 tokens per session scan A f3cdf68fd2e6
author-skill is a skill published in the GitHub repository wardawgmalvicious/agent-config (1 stars, last pushed 7d ago), licensed MIT. It adds 212 tokens to every session and 6,705 once invoked, about $0.0008 per session on Opus 5.5. A static security scan graded it A with 1 finding (enumerates other installed skills). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
fabric-cli
Expert guidance for the Fabric CLI (fab) and the Fabric and Power BI REST APIs: workspaces, items, lakehouses, notebooks, pipelines, semantic models, reports, capacities, OneLake, deployment and admin. Also estimates the capacity units (CU) an operation will consume and its impact on the capacity before running it.…
connect-pbid
TOM and ADOMD.NET guidance via PowerShell for connecting to Power BI Desktop's local Analysis Services instance. Covers model enumeration, DAX queries, metadata modification, annotations, calendar definitions, field parameters, query tracing, DAX library package management (daxlib.org), and the Desktop Bridge for…
pbir-cli
This skill should be used whenever the user mentions "pbir", "pbir-cli", "Power BI reports", or "PBI reports", works with .pbir, .pbip, or .pbix files, or wants to refresh, screenshot, or visually verify a report that is open in Power BI Desktop. Covers creating, exploring, formatting, validating, and publishing Power…
tmdl
Direct TMDL file authoring and BIM-to-TMDL conversion for semantic models in PBIP projects. Automatically invoke when the user asks to "edit TMDL", "add a measure in TMDL", "TMDL syntax", "fix formatString", "fix summarizeBy", "TMDL indentation", "convert BIM to TMDL", "add a column description", "create a calculated…
pbi-report-design
The Power BI report design canon covering design identity, visual hierarchy and the 3-30-300 rule, layout/spacing/alignment, color discipline, chart selection, KPI and card design, tables and matrices, accessibility, and the closing design gate. The shared reference home for report design judgment, routed to by the…
te-cli
Expert guidance for the cross-platform Tabular Editor CLI (the te binary, currently in preview) that manages Power BI / Analysis Services semantic models from the terminal on macOS, Linux, and Windows. Use when the user mentions the te CLI or "Tabular Editor CLI" (not the "2"), or runs a te to scaffold, inspect, edit…