Borrowing it
Nothing to install: this file belongs to xi-kari/crossframe-skill. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/xi-kari/crossframe-skill/main/.claude/skills/crossframe-suite/SKILL.mdgit clone --depth 1 https://github.com/xi-kari/crossframe-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xi-kari/crossframe-skill/crossframe-suite)<a href="https://agentmods.dev/skills/xi-kari/crossframe-skill/crossframe-suite"><img src="https://agentmods.dev/badge/skills/xi-kari/crossframe-skill/crossframe-suite.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 31 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00081 | $0.05337 |
| Opus 5 | $0.00041 | $0.02669 |
| Sonnet 5 | $0.00016 | $0.01067 |
| Haiku 4.5 | $0.00008 | $0.00534 |
Grade A, and why
crossframe-suite scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 246 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CrossFrame Suite
crossframe-suite 是总调度 skill，不替代任何专项 skill。它只做三件事：
- 判断用户任务属于哪条工作流。
- 安排连续读取顺序。
- 输出一个简短的调度提纲，然后进入相应 skill。
它不复制 crossframe、crossframe-essay 或其它平行 skill 的正文。中文为权威语义；英文只作 skill id、文件名和对外传播名。
当任务触发 CrossFrame 主体时，suite 还要把 ../crossframe/references/runtime-read-policy.md 与 ../crossframe/references/continuity-closure-map.md 纳入调度判断：本次是否需要按 v5.0 原文连续板块联读，而不是只读单个概念卡。需要包说明或源锚点时，再由下游定向读取 continuity-bundles.md 或具体包文件。默认以 v5.0 源结构为准。
suite 入口的交互选择只确认两项：输出模式与角色。文章类型不在 suite 开头选择；若最终进入 crossframe-essay 且文章层未关闭，先完成问题拆解与结构洞察底稿，再由 crossframe-essay/templates/article-type-selection-dialog.md 在正文生成前单独确认。
显式调用后的总入口
只有用户显式调用 crossframe-suite、$crossframe-suite、/crossframe-suite 或明确要求使用 CrossFrame Suite 时，才从本 skill 进入。进入之后，优先由本 skill 调度；只有任务非常单一且用户点名了专项 skill 时，才直接使用对应专项 skill。
ProMax 精确让路合同
PROMAX-NAMED-ONLY：只有crossframe-promax、CrossFrame ProMax、$crossframe-promax、/crossframe-promax四种名称命中 ProMax。PROMAX-PRIORITY-OVER-MAX：PROMAX-ROUTE-BOTH-NAMES-TO-PROMAX；同一请求同时点名 ProMax 与 Max 时，直接选择 ProMax，并把 Max 只登记为已解决的路由冲突。PROMAX-NO-FALLBACK-TO-MAX：进入 ProMax 后始终留在其独立 v8 工件运行时；能力缺口、材料不足、验证失败或用户要求退回 Max 都不能改变已冻结路由。PROMAX-ROUTE-EXACT-PROMAX-TO-PROMAX：命中四种精确名称之一时，直接读取skills/crossframe-promax/SKILL.md，不进入 suite 的模式、角色、文章类型或 review 链。PROMAX-ROUTE-MAX-ONLY-TO-MAX：只点名crossframe-max时仍使用既有 Max。PROMAX-GENERIC-MAX-STAYS-MAX：只说“最大算力 / 全尺度穷尽推演 / 不设字数限制完整解释”等泛化最大化要求时，维持既有 Max 行为，不升级为 ProMax。PROMAX-ROUTE-NEAR-MISS-NO-MATCH：ProMax、crossframe pro max、crossframe-promaxx、crossframe-pro都不命中 ProMax；不得用语义近似补齐名称。
ProMax 是家族中的独立 v8 runtime，不是 suite 模式或体积档位；suite 只执行上述让路，不加载、摘要或改写 ProMax 知识。
如果用户点名的是 crossframe-max、/crossframe-max、$crossframe-max，或明确要求“最大算力 / 全尺度穷尽推演 / 不设字数限制完整解释”，不要进入 suite 的 2+1 模式/角色选择器，直接让路给 ../crossframe-max/SKILL.md。crossframe-max 是独立模式，不是 suite 的体积档位。
当用户通过本 skill 作为总入口提出任何 CrossFrame 内容任务时，默认最终都生成 full-visible-v5-longform：完整可见底稿 + 完整长文正文。专项产物可以先生成，但最后默认进入文章层。
What ships with it
11 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 2.1 KB
- evals/crossframe-suite-smoke-tests.md 9.1 KB
- examples/bad-overtrigger-case.md 844 B
- examples/essay-workflow-case.md 1.0 KB
- examples/public-comment-workflow-case.md 832 B
- examples/reader-reply-workflow-case.md 1.0 KB
- protocols/suite-dispatch-protocol.md 17 KB
- references/output-mode-selector.md 7.2 KB
- references/workflow-routing-map.md 17 KB
- templates/mode-selection-dialog.md 2.7 KB
- templates/suite-reasoning-outline.md 4.8 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 246 lines · 81 tokens per session scan A e6a8019eff61
crossframe-suite is a skill published in the GitHub repository xi-kari/crossframe-skill (18 stars, last pushed 1mo ago), licensed MIT. It adds 81 tokens to every session and 5,337 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
personalize-ai-assistant
Build or update privacy-first AI-assistant configuration and reusable preference skills for Codex, Claude Code, Cursor, Gemini CLI, and similar tools. Use when the user provides explicit preferences, existing config files, example rules, or asks to optimize AGENTS.md, CLAUDE.md, assistant rules, memory files, or…
polar-billing
This skill should be used when working on Polar billing system, Stripe integration, subscription lifecycle, checkout flows, or benefit provisioning.
simplify
This skill should be used when the user asks to "simplify", "clean up the diff", "run simplify", "simplify the changes", "review changed code for cleanup", explicitly invokes "/simplify", or asks to "commit without simplify", "skip simplify for this commit", or "commit this but skip simplify". Reviews changed code…
dokploy-deploy
This skill should be used when user asks to "deploy with Dokploy", "use Dokploy Cloud", "manage self-hosted Dokploy", "deploy Docker Compose on Dokploy", "manage Dokploy databases", "configure Dokploy domains", or "look up Dokploy CLI commands".
ultralytics-platform
This skill should be used when user asks to "upload my model to Ultralytics Platform", "push this run to the platform", "upload a dataset to platform", "download a dataset from platform", "search platform datasets", "start cloud training", "train on platform GPUs", "export a model on platform", "deploy a model…
mongodb-connection
Optimize MongoDB client connection configuration (pools, timeouts, patterns) for any supported driver language. Use this skill when working/updating/reviewing on functions that instantiate or configure a MongoDB client (eg, when calling connect()), configuring connection pools, troubleshooting connection errors…