Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xxxoooxoxo/wiff --skill workflowgit clone --depth 1 https://github.com/xxxoooxoxo/wiffWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xxxoooxoxo/wiff/workflow)<a href="https://agentmods.dev/skills/xxxoooxoxo/wiff/workflow"><img src="https://agentmods.dev/badge/skills/xxxoooxoxo/wiff/workflow.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00070 | $0.00700 |
| Opus 5 | $0.00035 | $0.00350 |
| Sonnet 5 | $0.00014 | $0.00140 |
| Haiku 4.5 | $0.00007 | $0.00070 |
Grade A, and why
workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 41 lines — stays where its author put it; the contents beside it link to each section on GitHub.
wiff
Use workflow code when the plan itself benefits from deterministic branching, parallelism, or resumability. Keep simple one-agent tasks in the current task.
Build and launch
- Write a self-contained JavaScript workflow. Start with literal
export const meta = { name, description, creator, phases }. Setcreatorto your own model name so the run is attributed to whoever authored it. - Put all context each child needs in its prompt. Child agents inherit project instructions, not the parent conversation.
- Use stable
keyvalues for every reusableagent()call. - Wiff automatically applies user preferences from
~/.wiff/config.jsonand project preferences from<cwd>/.wiff/config.json; do not duplicate those instructions in child prompts. - Prefix a Codex agent prompt with
/goalwhen that stage must continue across turns until its objective is complete. Give the whole goal stage an appropriatetimeoutMs. - Launch with
workflow_start. Always pass the caller's absolute working directory ascwd. Record the returned run id; execution is owned by a persistent local daemon and survives this MCP bridge or parent harness exiting. - Call
workflow_waituntil the run reachescompleted,failed, orcancelledwhile the parent remains available. If the parent must end, report the run id so another client can reconnect. InspectrunPathandjournalPathwhen diagnosing failure. - Resume failed or interrupted work with
workflow_start({ resumeFromRunId }). Completed calls with unchanged keys and inputs are replayed from the journal. - Use
workflow_modelsbefore choosing a non-default backend or model when availability is uncertain.
Read references/api.md before authoring a non-trivial workflow.
Safety
- Run independent analysis with
sandbox: "read-only"in parallel. - Serialize agents writing to one checkout, or give concurrent writers
isolation: "worktree". - Claude, Cursor, and Kimi
workspace-writeagents requireisolation: "worktree". - Do not treat a failed agent as success.
parallel()andpipeline()fail the run unless the script explicitly usesparallelSettled()and handles every rejection. - Prefer
gpt-5.6-sol. Use low effort for mechanical inventory, medium for ordinary implementation, and high or xhigh only for the few review or synthesis turns that need it. - Set a task-specific
timeoutMswhen 10 minutes is not appropriate. The timeout covers the executing backend turn; time waiting for a concurrency slot is measured separately. - Keep every launched workflow accounted for. Normally wait for a terminal result or cancel it; if the parent must exit, preserve and report the run id for a later watcher.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 41 lines · 70 tokens per session scan A 0604b5a7afe2
workflow is a skill published in the GitHub repository xxxoooxoxo/wiff (5 stars, last pushed 18d ago), licensed MIT. It adds 70 tokens to every session and 700 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
orchestrate
Use only when the user explicitly types /orchestrate:orchestrate to decompose a large task, spawn a tree of parallel worker/subplanner/verifier subagents, and collect structured handoffs. Do not invoke autonomously.
takt
A workflow engine that runs a task through a sequence of steps defined in a YAML file, using separate coding agents for the work.
company-product-context
Compiles comprehensive company product context from PDF documents, web research, and industry knowledge.
codebase-context-extractor
This skill provides a comprehensive context extraction system for large codebases. It intelligently analyzes code structure, dependencies, and relationships to extract relevant context for understanding, debugging, or modifying code.
skill-creator
Generates Anthropic Skills with complete workflow including GitHub PR creation and local download verification.
Research Synthesis Workflow
A step-by-step guide to synthesizing research from multiple sources into a coherent summary.