Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/wolfenazz/yzpzcode/html-ppt-testing-safety-alertnpx skills add wolfenazz/YzPzCode --skill html-ppt-testing-safety-alertgit clone --depth 1 https://github.com/wolfenazz/YzPzCodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wolfenazz/yzpzcode/html-ppt-testing-safety-alert)<a href="https://agentmods.dev/skills/wolfenazz/yzpzcode/html-ppt-testing-safety-alert"><img src="https://agentmods.dev/badge/skills/wolfenazz/yzpzcode/html-ppt-testing-safety-alert.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00124 | $0.01144 |
| Opus 5 | $0.00062 | $0.00572 |
| Sonnet 5 | $0.00025 | $0.00229 |
| Haiku 4.5 | $0.00012 | $0.00114 |
Grade A, and why
html-ppt-testing-safety-alert scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
81% identical to html-ppt-course-module — 35 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 79 lines — stays where its author put it; the contents beside it link to each section on GitHub.
HTML PPT · 红琥珀警示
A focused entry point into the html-ppt master skill that lands the user directly on the testing-safety-alert full-deck template.
When this card is picked
The Examples gallery wires "Use this prompt" to the example_prompt above. When you accept that prompt, this card is the right pick if the user wants exactly the visual identity of testing-safety-alert (see the upstream full-decks catalog for screenshots and rationale).
How to author the deck
- Read the master skill first. All authoring rules live in
skills/html-ppt/SKILL.md— content/audience checklist, token rules, layout reuse, presenter mode, the keyboard runtime, and the "never put presenter-only text on the slide" rule. - Start from the matching template folder:
skills/html-ppt/templates/full-decks/testing-safety-alert/— copyindex.htmlandstyle.cssinto the project, keep the.tpl-testing-safety-alertbody class. - Bring the shared runtime with the template. The upstream
index.htmllinks the shared CSS/JS via../../../assets/...because it sits three folders deep insideskills/html-ppt/templates/full-decks/. Once you copyindex.htmlinto the project, those parent-relative URLs no longer resolve andbase.css,animations.css, andruntime.jswill 404 — meaning the deck never activates and slide navigation is dead. Pick one of these two recipes per project:- Recipe A — copy + rewrite (preferred): copy
skills/html-ppt/assets/fonts.css,skills/html-ppt/assets/base.css,skills/html-ppt/assets/animations/animations.css, andskills/html-ppt/assets/runtime.jsinto a project-localassets/(withassets/animations/animations.css), then rewrite the four<link>/<script>tags inindex.htmlfrom../../../assets/...to the matching project-local paths (assets/fonts.css,assets/base.css,assets/animations/animations.css,assets/runtime.js). - Recipe B — inline: read the same four files and replace each
<link rel="stylesheet" href="../../../assets/...">with a<style>...</style>containing the file's contents, and the<script src="../../../assets/runtime.js">with a<script>...</script>containingruntime.js. Yields a single self-containedindex.html. Either way, do not ship the upstream../../../assets/...URLs verbatim into a project artifact — they only work in-tree.
- Recipe A — copy + rewrite (preferred): copy
- Pick a theme. Default tokens look fine; if the user wants a different
feel, swap in any of the 36 themes from
skills/html-ppt/assets/themes/*.cssvia<link id="theme-link">and letTcycle. - Replace demo content, not classes. The
.tpl-testing-safety-alertscoped CSS only recognises the structural classes shipped in the template — keep them. - Speaker notes go inside
<aside class="notes">or<div class="notes">— never as visible text on the slide.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 79 lines · 124 tokens per session scan A 26f2e38614e7
html-ppt-testing-safety-alert is a skill published in the GitHub repository wolfenazz/YzPzCode (13 stars, last pushed today), licensed Apache-2.0. It adds 124 tokens to every session and 1,144 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. It is 81% identical to html-ppt-course-module, differing in 35 lines, and is treated as a copy.
Other skills, from other repositories
golden-rss
Use when testing the rss golden build.
tui-migrate-setup
Migrates the supported subset of an existing Warp GUI setup into Warp Agent CLI without exposing credentials or application state. Use in Warp Agent CLI when a user wants to copy or move compatible settings or global file-based MCP servers from the desktop app, set up Warp Agent CLI from an existing GUI installation…
alive:system-upgrade
Upgrade ALIVE to the current version. Handles v1/v2/v3.x source states, multi-surface aware (alive-mcp / Hermes / Codex), retroactive version detection, partial-failure resume, dry-run previews, and rollback inspection.
verify
Fact-check claims encountered during reading — dates, names, events, citations. Use when encountering historical facts or disputed claims.
bailian-docs-llm-wiki
阿里云百炼平台技术文档知识库（LLM Wiki）。当用户查询百炼模型列表、API 参数、错误码、 应用开发（智能体/RAG/知识库/记忆/插件）、模型对比与定价、SDK/OpenAI 兼容接口、 多模态能力（语音/图片/视频）、Token 计费等百炼相关问题时激活。 包含 models 结构化模型市场数据（含 contextWindow/QPM/价格/sample code）、 wiki 合成层（主题页/概念页/对比页）和 raw 原始文档层； 模型规格类问题先查 models/index.md，文档类问题先查 wiki/index.md。.
write-blog-post
Write or develop a blog post. Use for blog content - writing, drafting, developing ideas into drafts, or editing. Longer-form than LinkedIn (800-1200 words) with section structure.