Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/xbuilderlab/cheat-on-content/cheat-migratenpx skills add XBuilderLAB/cheat-on-content --skill cheat-migrategit clone --depth 1 https://github.com/XBuilderLAB/cheat-on-contentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xbuilderlab/cheat-on-content/cheat-migrate)<a href="https://agentmods.dev/skills/xbuilderlab/cheat-on-content/cheat-migrate"><img src="https://agentmods.dev/badge/skills/xbuilderlab/cheat-on-content/cheat-migrate.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00093 | $0.02907 |
| Opus 5 | $0.00046 | $0.01453 |
| Sonnet 5 | $0.00019 | $0.00581 |
| Haiku 4.5 | $0.00009 | $0.00291 |
Grade A, and why
cheat-migrate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- cheat-migrate — 100% identical, 2 lines differ
How it starts
The opening of the file, as written. The whole thing — 235 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/cheat-migrate — Schema 版本迁移
把用户 .cheat-state.json 从旧 schema_version 升级到 cheat-on-content 当前期望的 LATEST_SCHEMA。
Overview
[用户:迁移 / 或 SessionStart 提示后用户跑]
↓
[Phase 0: 读 .cheat-state.json + migrations/registry.md → 确定迁移链]
↓
[Phase 1: dry-run(默认)展示迁移计划,等用户确认]
↓
[Phase 2: 备份 .cheat-state.json → .cheat-state.json.backup-<timestamp>]
↓
[Phase 3: 按顺序对每个 step 应用对应迁移文件的 HOW 段]
↓
[Phase 4: 验证升级后 state 文件能被解析 + schema_version 已更新]
↓
[Phase 5: 报告 + 提示如有备份需要清理]
Constants
- REGISTRY_PATH =
${SKILL_DIR}/../../migrations/registry.md— 版本链单一来源 - MIGRATIONS_DIR =
${SKILL_DIR}/../../migrations/— 迁移文件目录 - DRY_RUN_BY_DEFAULT = true — 首次跑展示计划,不直接改文件
- BACKUP_BEFORE_WRITE = true — 写之前必备份;备份文件保留至下次成功 init / 用户手动清理
- STOP_ON_STEP_FAILURE = true — 任何 step 失败 → 停在中间版本,不前进,不回滚
💡 调用时覆盖:
/cheat-migrate — dry-run: false直接执行 //cheat-migrate — to: 1.2仅升到指定版本
Inputs
| 必填 | 来源 |
|---|---|
.cheat-state.json |
用户项目根 |
migrations/registry.md |
LATEST_SCHEMA + 版本链表 |
migrations/<from>-to-<to>.md |
每步具体迁移指令 |
Workflow
Phase 0: 确定迁移链
- 读
.cheat-state.json→ 解析current_version = state.schema_version - 读
migrations/registry.md→ 解析LATEST_SCHEMA字段(行:LATEST_SCHEMA = "X.Y") - 解析
args.to覆盖(如有);否则 target = LATEST_SCHEMA - 解析
args.from覆盖(罕见场景:用户的 state 文件 schema 字段坏了,强制指定起点) - 状态判断:
current_version == target→ 输出"✅ state 已是 {target},无需迁移" → 退出current_version > target(比如用户跑了 dev 版又切回 release)→ 报错"无法降级,请手动调整或重新 init"current_version < target→ 继续,从注册表查出迁移链
- 从注册表"版本链"表算出
chain = [(from, to, file), ...],按顺序串起 current → target
如果某一步在注册表里缺失(比如 current_version 不在表里)→ 报错并展示"目前已知版本:[1.0, 1.1, ...]",让用户检查。
Phase 1: dry-run
输出迁移计划:
📋 迁移计划
当前版本: 1.0
目标版本: 1.2
将按顺序跑 2 步:
[1/2] 1.0 → 1.1(MINOR)
新增字段:typical_duration_seconds, target_publish_cadence_days, ...(共 12 字段)
删除字段:mode, prediction_complexity, bucket_scheme
详见: migrations/1.0-to-1.1.md
[2/2] 1.1 → 1.2(MINOR)
新增字段:[...]
详见: migrations/1.1-to-1.2.md
⚠️ 备份位置: .cheat-state.json.backup-<timestamp>
继续吗?回 yes 执行 / no 退出 / dry-run-detail 看每步具体改什么。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 235 lines · 93 tokens per session scan A da1c296cfe9d
cheat-migrate is a skill published in the GitHub repository XBuilderLAB/cheat-on-content (6,749 stars, last pushed 3d ago), licensed MIT. It adds 93 tokens to every session and 2,907 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
auto-perf-optimize
Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.
chat-perf
Run chat perf benchmarks and memory leak checks against the local dev build or any published VS Code version. Use when investigating chat rendering regressions, validating perf-sensitive changes to chat UI, or checking for memory leaks in the chat response pipeline.
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…