Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add XuanRanL/loamwright-SEO-Skill --skill website-project-initgit clone --depth 1 https://github.com/XuanRanL/loamwright-SEO-SkillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/website-project-init)<a href="https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/website-project-init"><img src="https://agentmods.dev/badge/skills/xuanranl/loamwright-seo-skill/website-project-init/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xuanranl/loamwright-seo-skill/website-project-init"><img src="https://agentmods.dev/badge/skills/xuanranl/loamwright-seo-skill/website-project-init.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00120 | $0.14256 |
| Opus 5 | $0.00060 | $0.07128 |
| Sonnet 5 | $0.00024 | $0.02851 |
| Haiku 4.5 | $0.00012 | $0.01426 |
Grade A, and why
website-project-init scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 888 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Website Project Init
The first command for every new client website. Sets up credentials, scans the
site, and produces a complete projects/{slug}/ archive that all subsequent
/article / /audit / /refresh commands inherit from.
Mandatory ordering
STEP 0 (CRITICAL) — Setup Wizard FIRST
Before ANY web crawling or analysis happens, run the setup wizard to ensure we have all credentials and brand context. The wizard is non-negotiable because:
- /init Stage 1 needs Tavily key
- /init Stage 7 (GEO baseline) needs Anthropic for AI probe
- Image gen later needs OpenAI key
- Publish later needs WordPress App Password
- Image Art Direction needs brand colors
Running scan first and discovering credentials missing later wastes the crawl + frustrates the user. So:
from scripts._core.setup_wizard import SetupWizard
wiz = SetupWizard(site_slug, site_url)
status = wiz.detect_existing()
Then for each provider.found == False and provider.tier in (REQUIRED, RECOMMENDED, PUBLISH),
ask the user via natural conversation:
- Tier 1 (Anthropic, contact_email): HARD REQUIRED — halt /init if user refuses
- Tier 2 (Tavily, OpenAI, Gemini): STRONGLY RECOMMENDED — warn but allow skip; explain what features unlock
- Tier 3 (WordPress): REQUIRED ONLY IF user plans to publish via /publish; ask upfront so they don't get stuck later
- Tier 4 (Brand config): RECOMMENDED — can be filled later via /context edit but image-gen + voice need this
- Tier 5 (IndexNow, YouTube): OPTIONAL — explain features they unlock
For each credential the user provides:
- Save via
wiz.save_credential(provider, value)(orwiz.save_wordpress(...)etc.) - Live-test with
wiz._test_provider(provider)(or full validate) - If test fails, show the error and ask again
Recommended interactive flow (use AskUserQuestion tool)
1. Detect what's already present (env vars + ~/.xuanran-seo/credentials/)
2. Present summary: "Found X credentials, need Y more. Want to configure now?"
3. For each missing tier-1/2/3 item:
Ask via AskUserQuestion (or natural NL if user prefers chat)
Save + validate
4. Show final "ready for" matrix:
✓ init ✓ article ✓ image_gen ✗ publish_wp ✓ ai_visibility
5. If WP not configured + user wants to publish later, surface that early
6. ASK THE BLOG-SIDEBAR QUESTION NOW (see below) — capture intent up front
7. Then proceed to STEP 1.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 888 lines · 120 tokens per session scan A b8a3abff706a
website-project-init is a skill published in the GitHub repository XuanRanL/loamwright-SEO-Skill (47 stars, last pushed 23d ago), licensed Apache-2.0. It adds 120 tokens to every session and 14,256 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
import-sop
Import agency Standard Operating Procedures — approval workflows, campaign launch checklists, escalation procedures, QA steps — and structure them into numbered, role-assigned steps with human-approval gates marked. SOPs save at the agency level so they apply across every client brand, not per-brand. Triggers on…
client-onboarding
Generate a complete onboarding package for a new marketing client — kickoff meeting agenda, 20-30 question discovery questionnaire, stakeholder map with RACI matrix, platform-by-platform access checklist, 30-60-90 day milestone plan, communication cadence, escalation protocol, welcome email template, internal team…
gh-issues
Use when creating, triaging, or commenting on GitHub issues for the Kilo VS Code extension or JetBrains plugin via gh. Covers issue templates, project board assignment, title conventions, and required gh scopes.
continuous-improvement-loop
Run Part 12 of the engagement methodology — the continuous improvement loop that aggregates quarterly-review, customer-feedback, competitive, and operating signals into a Quarterly Product & Offering Improvement Brief for business leadership, plus fast 1-3 page ad-hoc briefs when a significant signal lands…
c2pa-metadata
Embed a C2PA provenance manifest into an AI-generated marketing asset (PNG, JPG, WebP, GIF, TIFF, MP4, MOV, WebM, MP3, WAV, PDF) via scripts/embed-c2pa.py — produces a signed copy of the file carrying IPTC digital-source-type AI claims, an optional c2pa.ai-disclosure assertion for EU AI Act Article 50 (applicable 2…
competitor-pages
Build competitor comparison and alternatives pages — X-vs-Y head-to-heads, alternatives-to-X lists, category roundups, and feature-matrix pages — delivering a 1,500+ word page template, comparison table, JSON-LD schema via schema-generator.py, keyword and title-tag targeting, an internal-linking plan, and…