skyrimvr-claude-toolkit: Skill for Claude Code

.agents/skills/toolkit-setup/SKILL.md

toolkit-setup is a skill for Claude Code, Codex from WingedGuardian/skyrimvr-claude-toolkit. It costs 65 tokens per session (1,168 once invoked), scanned A, original, MIT.

A setup procedure for checking whether Python, Git, or Node.js is available and working in a project folder. It only permits installing specifically authorised versions of those host programs.

In plain words
What is it for?
It is for preparing a toolkit, investigating runtime-related command failures, and following restricted installation instructions for Python, Git, or Node.js.
Why use it?
It prevents an agent from changing the developer's machine without permission. It also separates reporting a missing runtime from repairing or upgrading it.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

This is WingedGuardian/skyrimvr-claude-toolkit's own configuration. It tells Claude Code and Codex how to work on skyrimvr-claude-toolkit itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything skyrimvr-claude-toolkit configures →

Reuse

Borrowing it

Nothing to install: this file belongs to WingedGuardian/skyrimvr-claude-toolkit. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/WingedGuardian/skyrimvr-claude-toolkit/master/.agents/skills/toolkit-setup/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/WingedGuardian/skyrimvr-claude-toolkit

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for toolkit-setup

README.md
[![agentmods](https://agentmods.dev/badge/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup/github.svg)](https://agentmods.dev/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup)
Your own site
<a href="https://agentmods.dev/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup"><img src="https://agentmods.dev/badge/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for toolkit-setup

Your own site · 80×15
<a href="https://agentmods.dev/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup"><img src="https://agentmods.dev/badge/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 65 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,168 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00065 $0.01168
Opus 5.5 $0.00026 $0.00467
Sonnet 5.5 $0.00013 $0.00234
Haiku 4.5 $0.00006 $0.00117

Measured 2d ago against content hash 0674015e7b7a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

toolkit-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/toolkit-setup/SKILL.md · 70 lines

How it starts

The opening of the file, as written. The whole thing — 70 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Toolkit setup runbook

The rule

You change the user's machine only as far as the user's task says. Look first; report; wait. A missing or broken runtime is a thing to tell the user about, not a thing to fix on your own. If the task does not say, in so many words, that you may install a named runtime at an exact version, you do not install anything.

Steps

  1. Read the authorization. The task's first paragraph contains one sentence starting Host-software installs:. NOT AUTHORIZED (or no such sentence) means no installs at all. Otherwise it lists items of the form python=<winget id>==<exact version> (runtime python, git or node, then =, the id, == and the version, with no spaces; items are separated by commas). Only these winget ids are ever accepted: Python.Python.3.<minor> for python (3.10 or newer, and the version must be that minor's), Git.Git for git, and OpenJS.NodeJS or OpenJS.NodeJS.LTS for node. Any other id authorizes nothing. Anything else, a JDK, .NET or Blender included, is never covered: give the user manual steps.
  2. Inventory by launching. If any Python is available, run python tools/inventory-runtimes.py inventory (here and below, python means whichever of py -3, python or python3 starts; on Linux and macOS it is usually python3). It finds every candidate on PATH and runs each with --version only. If no Python runs at all, do the same by hand: py -3 --version, python --version, python3 --version, git --version, node --version, and look at the output, not at whether the command was found. A Windows Store alias answers with a Store message, not a version: that is not an installed Python.
  3. Plan. Save the user's whole task message, unchanged, to a temporary file outside the toolkit folder, and run python tools/inventory-runtimes.py plan --auth-file <that file>. Never pass a sentence you picked out of it: a denial anywhere in the user's text must be able to void an authorization, and the tool can only see that if it reads all of it. Delete the file afterwards. For each runtime the plan gives one action:
    • none: nothing to do.
    • report: it is there but too old, broken or hung. Do not upgrade, repair, reinstall or remove it. Tell the user what you found and the manual steps printed, then stop and wait.
    • manual: it is missing and you are not authorized. Print the manual steps for the user and wait.
    • install-authorized: it is missing, the user authorized exactly this id and version, and the command below is printed. Run only a command the plan printed, unchanged.
  4. Verify by launching again after any install the user or you performed. If the new runtime is not on PATH yet, say so and ask the user to open a new terminal; do not retry installs.
  5. Then run bash setup.sh (Windows: from Git Bash). Never pass it a flag that installs software.

Read the full file on GitHub · 70 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago Changed · +4 lines 0674015e7b7a
  2. 26d ago First seen · 66 lines · 65 tokens per session scan A e5a9338c52df

Subscribe to this mod's changes

toolkit-setup is a skill published in the GitHub repository WingedGuardian/skyrimvr-claude-toolkit (21 stars, last pushed yesterday), licensed MIT. It adds 65 tokens to every session and 1,168 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-12.

Related

toolkit-setup compared with skills from other repositories

toolkit-setup next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
toolkit-setupWingedGuardian/skyrimvr-claude-toolkitSkill21yesterdayMITA65Claude Code, Codex
orbit-notionnexu-io/open-designSkill106kyesterdayApache-2.0A117Claude Code, Codex
agentmailpaperclipai/paperclipSkill111kyesterdayMITA30Claude Code, Codex
Cortexdanielmiessler/LifeOSSkill20kyesterdayMITA184Claude Code
rowboat-spacesrowboatlabs/rowboatSkill18kyesterdayApache-2.0A60Claude Code, Codex
feishuHmbown/CodeWhaleSkill41k5d agoMITA33Claude Code, Codex
pinchtab-mcppinchtab/pinchtabSkill11k10d agoMITA52Claude Code, Codex