Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Wondermonger-daydreaming/claude-skills-library --skill smugglinggit clone --depth 1 https://github.com/Wondermonger-daydreaming/claude-skills-libraryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wondermonger-daydreaming/claude-skills-library/smuggling)<a href="https://agentmods.dev/skills/wondermonger-daydreaming/claude-skills-library/smuggling"><img src="https://agentmods.dev/badge/skills/wondermonger-daydreaming/claude-skills-library/smuggling/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wondermonger-daydreaming/claude-skills-library/smuggling"><img src="https://agentmods.dev/badge/skills/wondermonger-daydreaming/claude-skills-library/smuggling.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00154 | $0.02384 |
| Opus 5 | $0.00077 | $0.01192 |
| Sonnet 5 | $0.00031 | $0.00477 |
| Haiku 4.5 | $0.00015 | $0.00238 |
Grade A, and why
smuggling scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Smuggling
What this skill is for
Most contemporary commercial narrative operates in conflict-grammar. Users often want to work in these genres — action, thriller, romance, mainstream literary fiction, most screenplays, most genre fiction. They are not wrong to want this. Conflict-grammar is what produces engagement, and engagement is what keeps readers turning pages.
But conflict-grammar cannot reach certain emotional registers. Grief-as-such (not grief-as-defeat). Transience. Wonder. Companionship with the inhuman. The specific feeling of being seen by the past. Readers who keep reading a genre work long after its plot is resolved are responding to something the conflict-structure alone did not provide. That something is usually adjacency-grammar, smuggled in at key moments, doing emotional work the genre's surface could not do.
This skill is for that smuggling. It teaches you how to write genre fiction, action sequences, plot-driven narrative, and commercially-accessible work while deploying adjacency-grammar at precise moments where the emotional payload needs it.
The basic technique
Hybrid structure operates at two levels simultaneously:
Surface (conflict-grammar)
- Protagonist with goal
- Escalating obstacles
- Tension-build toward crisis
- Resolution through action
- Forward momentum, causal chains
- Reader engagement through wanting-to-know-what-happens
Depth (adjacency-grammar)
- Key images placed precisely at emotional pivots
- Flashbacks that function as ten (not exposition)
- Atmospheric details that do not advance plot but carry mood
- Endings that place rather than close
- Scenes whose emotional weight exceeds their plot function
- Reader attachment through what they carry after the page is turned
A well-smuggled work gives readers the kinetic pleasure of conflict-grammar engagement and the deeper emotional payload of adjacency-grammar attachment. This is what separates works that are merely popular from works that are loved for decades.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 120 lines · 154 tokens per session scan A d43908483d6f
smuggling is a skill published in the GitHub repository Wondermonger-daydreaming/claude-skills-library (6 stars, last pushed 2mo ago), licensed MIT. It adds 154 tokens to every session and 2,384 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
skill-builder
Automatically detect source types and build AI skills using Skill Seekers. Use when the user wants to create skills from documentation, repos, PDFs, videos, or other knowledge sources.
offensive-advanced-redteam
Comprehensive red team operations methodology covering full engagement lifecycle from planning through reporting. Addresses engagement scoping and rules of engagement negotiation, multi-tier C2 infrastructure design with redirectors and domain fronting, malleable traffic profiles and beacon tradecraft, OPSEC…
offensive-crypto-attacks
Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications. Covers padding oracle attacks against CBC-mode ciphers with PKCS7 padding (Vaudenay's original attack through modern padbuster automation), ECB mode exploitation including block cut-and-paste and…
offensive-c2-frameworks
Command and Control framework deployment, configuration, and operational tradecraft for red team engagements. Covers Cobalt Strike (malleable C2 profiles, Beacon types HTTP/HTTPS/DNS/SMB, Beacon Object Files for in-memory execution, sleep and jitter tuning, named pipe pivoting), Sliver (implant generation across…
offensive-dependency-confusion
Deep-dive offensive methodology for dependency confusion and namespace attacks across all major package ecosystems. Covers npm scope confusion exploiting the gap between public and private scoped packages and .npmrc misconfigurations where registry mappings fail to pin internal scopes exclusively. Addresses PyPI…
offensive-parameter-pollution
HTTP parameter pollution (HPP) checklist: duplicate parameter injection, backend vs frontend parsing differences, WAF bypass via HPP, server-side vs client-side HPP, and practical exploitation patterns. Use when testing web applications for parameter handling flaws.