Borrowing it
Nothing to install: this file belongs to WingedGuardian/skyrimvr-claude-toolkit. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/WingedGuardian/skyrimvr-claude-toolkit/master/.agents/skills/toolkit-setup/SKILL.mdgit clone --depth 1 https://github.com/WingedGuardian/skyrimvr-claude-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup)<a href="https://agentmods.dev/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup"><img src="https://agentmods.dev/badge/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup"><img src="https://agentmods.dev/badge/skills/wingedguardian/skyrimvr-claude-toolkit/toolkit-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.01168 |
| Opus 5.5 | $0.00026 | $0.00467 |
| Sonnet 5.5 | $0.00013 | $0.00234 |
| Haiku 4.5 | $0.00006 | $0.00117 |
Grade A, and why
toolkit-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 70 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Toolkit setup runbook
The rule
You change the user's machine only as far as the user's task says. Look first; report; wait. A missing or broken runtime is a thing to tell the user about, not a thing to fix on your own. If the task does not say, in so many words, that you may install a named runtime at an exact version, you do not install anything.
Steps
- Read the authorization. The task's first paragraph contains one sentence starting
Host-software installs:.NOT AUTHORIZED(or no such sentence) means no installs at all. Otherwise it lists items of the formpython=<winget id>==<exact version>(runtimepython,gitornode, then=, the id,==and the version, with no spaces; items are separated by commas). Only these winget ids are ever accepted:Python.Python.3.<minor>forpython(3.10 or newer, and the version must be that minor's),Git.Gitforgit, andOpenJS.NodeJSorOpenJS.NodeJS.LTSfornode. Any other id authorizes nothing. Anything else, a JDK, .NET or Blender included, is never covered: give the user manual steps. - Inventory by launching. If any Python is available, run
python tools/inventory-runtimes.py inventory(here and below,pythonmeans whichever ofpy -3,pythonorpython3starts; on Linux and macOS it is usuallypython3). It finds every candidate onPATHand runs each with--versiononly. If no Python runs at all, do the same by hand:py -3 --version,python --version,python3 --version,git --version,node --version, and look at the output, not at whether the command was found. A Windows Store alias answers with a Store message, not a version: that is not an installed Python. - Plan. Save the user's whole task message, unchanged, to a temporary file outside the toolkit folder,
and run
python tools/inventory-runtimes.py plan --auth-file <that file>. Never pass a sentence you picked out of it: a denial anywhere in the user's text must be able to void an authorization, and the tool can only see that if it reads all of it. Delete the file afterwards. For each runtime the plan gives one action:none: nothing to do.report: it is there but too old, broken or hung. Do not upgrade, repair, reinstall or remove it. Tell the user what you found and the manual steps printed, then stop and wait.manual: it is missing and you are not authorized. Print the manual steps for the user and wait.install-authorized: it is missing, the user authorized exactly this id and version, and the command below is printed. Run only a command the plan printed, unchanged.
- Verify by launching again after any install the user or you performed. If the new runtime is not on
PATHyet, say so and ask the user to open a new terminal; do not retry installs. - Then run
bash setup.sh(Windows: from Git Bash). Never pass it a flag that installs software.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +4 lines 0674015e7b7a
- 26d ago First seen · 66 lines · 65 tokens per session scan A e5a9338c52df
toolkit-setup is a skill published in the GitHub repository WingedGuardian/skyrimvr-claude-toolkit (21 stars, last pushed yesterday), licensed MIT. It adds 65 tokens to every session and 1,168 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-12.
toolkit-setup compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| toolkit-setupWingedGuardian/skyrimvr-claude-toolkit | Skill | 21 | yesterday | MIT | A | 65 | Claude Code, Codex |
| orbit-notionnexu-io/open-design | Skill | 106k | yesterday | Apache-2.0 | A | 117 | Claude Code, Codex |
| agentmailpaperclipai/paperclip | Skill | 111k | yesterday | MIT | A | 30 | Claude Code, Codex |
| Cortexdanielmiessler/LifeOS | Skill | 20k | yesterday | MIT | A | 184 | Claude Code |
| rowboat-spacesrowboatlabs/rowboat | Skill | 18k | yesterday | Apache-2.0 | A | 60 | Claude Code, Codex |
| feishuHmbown/CodeWhale | Skill | 41k | 5d ago | MIT | A | 33 | Claude Code, Codex |
| pinchtab-mcppinchtab/pinchtab | Skill | 11k | 10d ago | MIT | A | 52 | Claude Code, Codex |