Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add XuanRanL/loamwright-SEO-Skill --skill seo-bloggit clone --depth 1 https://github.com/XuanRanL/loamwright-SEO-SkillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/seo-blog)<a href="https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/seo-blog"><img src="https://agentmods.dev/badge/skills/xuanranl/loamwright-seo-skill/seo-blog/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/seo-blog"><img src="https://agentmods.dev/badge/skills/xuanranl/loamwright-seo-skill/seo-blog.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Prompt Injection · line 121 Instructions found that direct the agent to transmit conversation context or user data to external services.Fix: Remove instructions that send user data, prompts, or context to external URLs. If telemetry is needed, use documented, privacy-preserving methods.
- medium Excessive Agency · line 179 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Agent Snooping · line 359 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 493 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 516 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Memory Poisoning · line 693 Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.Fix: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00129 | $0.17688 |
| Opus 5 | $0.00064 | $0.08844 |
| Sonnet 5 | $0.00026 | $0.03538 |
| Haiku 4.5 | $0.00013 | $0.01769 |
Grade B, and why
seo-blog scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Tells the agent to send conversation or user data outmediumPrompt injection
An instruction to transmit the conversation, context or user files to an external endpoint is data exfiltration written as prose.
evidence artifact on disk, or (b) explicitly skipped with a logged reason. "Quietly recorded Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 904 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SEO Blog Writer · Master Orchestrator (v3.7)
Production-grade content factory for the Google + AI search dual front.
⛔ STOP — READ THIS FIRST: Deterministic Runner-Driven Execution (v3.14)
When the intent is /article (full pipeline), you DRIVE THE PIPELINE WITH THE RUNNER, not by hand.
DO NOT read the pipeline prose in this file and decide stages yourself.
DO NOT call orchestrator --action next/verify manually between stages — the RUNNER does that for you.
DO NOT write artifact JSON files (fact-check.json, humanizer-report.json, review.json) manually.
Why a runner now drives (v3.14, 2026-06-03)
Before v3.14 the orchestrator was a PASSIVE state machine and the LLM had to hand-drive all ~30
stages — calling --action next, running/dispatching each stage, then --action verify — between
EVERY stage, for EVERY article. That manual ritual is exactly where steps got skipped or driven
out of order (2026-05-26 "23/35 skipped"; 2026-06-02 "geo skipped"; 2026-06-03 "stage records
missed + heavy by-hand driving"). Enforcement made bad outcomes detectable at the gates, but
execution was only as reliable as operator discipline. scripts/pipeline/run_pipeline.py now
drives the loop in CODE: it runs/launches/checks every BASH/BACKGROUND/CHECK stage itself and
records it, and STOPS only to hand you the handful of LLM stages that genuinely need a subagent.
Your surface area drops from "orchestrate 30 stages" to "service the LLM stages I'm handed."
The Loop (execute this after state.json is created)
REPEAT:
1. result = Bash("python -m scripts.pipeline.run_pipeline --workspace {task_id} --json"
[+ " --completed-llm {last_llm_stage}" if you just finished one])
2. Read result.action:
"COMPLETE" → DONE. Proceed to the publish-confirmation step.
"DISPATCH_LLM" → Dispatch Agent(subagent_type=result.subagent_type, prompt=result.dispatch_prompt).
If subagent_type is "", execute result.description inline (format-selector /
outline-architect / meta-builder are inline LLM stages).
After the subagent finishes, confirm every path in result.expected_outputs exists,
then GOTO 1 with --completed-llm {result.stage}.
⚠ TRANSIENT NO-OP (v3.38.3): a dispatched subagent can occasionally return
with ZERO tool uses and no output files (harness init glitch — a 2026-07-09
humanizer did this, returning only a garbled system-reminder). expected_outputs
will be missing: simply RE-DISPATCH the same subagent once before investigating
anything else. Same rule when a subagent dies mid-run to an API/session error
(a geo-auditor was killed this way in the same batch): check whether its
evidence artifact landed on disk; if not, re-dispatch — the draft itself is
usually untouched.
"GATE_FAILED" → A lint/quality gate found defects (result.gate). Route to repair (fix the draft
or re-dispatch the responsible subagent per subskills/cross-cutting/repair-orchestrator),
then GOTO 1 (the runner re-runs the failed stage).
"WAIT" → A CHECK isn't ready (e.g. Fork B image gen still running). Wait briefly, GOTO 1.
"BLOCKED" → A stage is missing inputs (result.missing_inputs). Fix them, GOTO 1.
"ERROR" → A BASH stage crashed (result.detail). Inspect, fix, GOTO 1.
"LOCKED" → Another run_pipeline driver is ALREADY active on this workspace (exit 30).
Wait for it to return, then GOTO 1. NEVER delete the .pipeline-driver.lock
sidecar and NEVER launch a second driver call while one is still running —
the 2026-07-07 batch double-published 2 of 3 posts exactly this way (a bare
status-check invocation re-dispatched the in-flight wordpress-publisher).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 904 lines · 129 tokens per session scan B be210c3f7626
seo-blog is a skill published in the GitHub repository XuanRanL/loamwright-SEO-Skill (49 stars, last pushed 25d ago), licensed Apache-2.0. It adds 129 tokens to every session and 17,688 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it B with 1 finding (tells the agent to send conversation or user data out). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
geo-platform-optimizer
Platform-specific AI search optimization — audit and optimize for Google AI Overviews, ChatGPT, Perplexity, Gemini, and Bing Copilot individually.
continuous-improvement-loop
Run Part 12 of the engagement methodology — the continuous improvement loop that aggregates quarterly-review, customer-feedback, competitive, and operating signals into a Quarterly Product & Offering Improvement Brief for business leadership, plus fast 1-3 page ad-hoc briefs when a significant signal lands…
four-core-documents
Produce Part 3 of the 12-Part engagement: the four strategic-spine documents across 61 steps — 3.1 Business & SBU Analysis, 3.2 Segmentation Framework, 3.3 Brand Positioning & Communications, 3.4 DMFlow — with --doc single-document runs, --view v2 re-runs, and a --combined executive stitch. Triggers on…
seo-plan
Build a 12-month SEO strategy and phased roadmap with industry templates (SaaS, ecommerce, local, publisher, agency). With fresh specialist outputs it runs as a dispatcher: scores four pillars — technical, content, topical, AI search — and makes the weakest pillar the plan's lead theme; missing specialists re-run only…
c2pa-metadata
Embed a C2PA provenance manifest into an AI-generated marketing asset (PNG, JPG, WebP, GIF, TIFF, MP4, MOV, WebM, MP3, WAV, PDF) via scripts/embed-c2pa.py — produces a signed copy of the file carrying IPTC digital-source-type AI claims, an optional c2pa.ai-disclosure assertion for EU AI Act Article 50 (applicable 2…
import-guidelines
Import brand guidelines — voice and tone rules, messaging, banned words and restrictions, channel styles, visual identity — and structure them into enforceable markdown files in the brand's guidelines layer, auto-classified by category, conflict-checked against the brand profile, and merged with existing rules rather…