Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add yan-labs/yan-skills --skill autopilotgit clone --depth 1 https://github.com/yan-labs/yan-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yan-labs/yan-skills/autopilot)<a href="https://agentmods.dev/skills/yan-labs/yan-skills/autopilot"><img src="https://agentmods.dev/badge/skills/yan-labs/yan-skills/autopilot/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yan-labs/yan-skills/autopilot"><img src="https://agentmods.dev/badge/skills/yan-labs/yan-skills/autopilot.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Agent Snooping · line 710 Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.Fix: Remove all code or instructions that access agent configuration directories (.claude/, .codex/, .gemini/). If configuration values are needed, pass them explicitly as parameters or environment variabl
- medium MCP Rug Pull · line 31 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 34 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 37 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00222 | $0.14020 |
| Opus 5 | $0.00111 | $0.07010 |
| Sonnet 5 | $0.00044 | $0.02804 |
| Haiku 4.5 | $0.00022 | $0.01402 |
Grade B, and why
autopilot scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- `~/.claude/settings.json` 的 `env.CLAUDE_CODE_SUBAGENT_MODEL = "opus"` 作为兜底 How it starts
The opening of the file, as written. The whole thing — 951 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Autopilot
接收一句话，自动拆解成结构化执行计划，然后以无人值守模式完整执行到底。
用户调用 autopilot 意味着：授权 AI 完全自主地完成整套流程—— 调查、实现、部署、E2E 验证、代码 review、二次部署、二次验证、收尾。 不需要中途确认，不允许跳过必要阶段或把未完成包装为完成。用户说“发版”“发布”“上线”未限定范围时，默认自动发布当前项目所有适用发布面；先检查和验证，结果逐项回读，不扩到无关项目。用户明确限制始终优先。
安装与更新
来源：Skills.sh
# 首次全局安装，或更新失败时重新安装
npx skills add yan-labs/yan-skills --skill autopilot -g -y
# 将已安装的全局 Skill 更新到最新版
npx skills update autopilot -g -y
若使用项目级安装，去掉安装命令中的 -g；项目级更新使用 npx skills update autopilot -p -y。
编排者角色（CRITICAL · 贯穿全程）
你的主要任务是分析、编排和验证，具体任务尽可能交给 subagent 去执行。 自己只做需求澄清、方案拆解、任务分发和结果验收； 实现类工作（读大量代码、写代码、跑测试、批量修改）一律用 Agent 工具派给 subagent 执行。
主循环是指挥，不是工兵——把上下文留给决策，把苦力留给 subagent。
这条规则与下方 <behavior id="main-context-execution"> 和 <rule id="context-hygiene"> 是同一件事的三种表述，互相加强，不冲突。
执行与恢复规则（CRITICAL）
调用 autopilot 授权持续推进任务，不等于授权创建持久 Goal，也不要求先安排唤醒才允许工作。
- 默认采用 state-only：先把目标、阶段、验证条件和有界下一步写入
progress.md，然后在当前轮直接执行可推进工作。多个阶段可在同一轮完成，按阶段更新状态。 - 只有用户或系统明确要求持久 Goal 时，才采用 explicit-goal：创建或恢复该任务唯一的 Goal；不得因调用本技能、无人值守或等待部署而隐式创建。
- 只有确实需要跨轮等待或恢复时，使用当前平台实际可用的调度能力。CI／部署等待按项目规则安排当前任务唯一的定时恢复，登记目标任务及下一次运行时间后结束当前轮；不以前台反复查询代替恢复。
- 缺少调度工具不会阻止当前仍可执行的工作。确实需要等待且无法恢复时，记录准确状态和恢复阻碍，不声称定时已安排或任务已完成。
- 恢复后读取同一状态文件，继续尚未完成的有界动作。不要从头重建任务，不启动第二个 controller。
- 状态文件中的
loop-goal是完成条件文本，不代表已经创建平台 Goal；explicit-goal 才记录实际 Goal 身份。
进入执行前核对：状态文件存在、完成条件可验证、下一步具体。调度登记只在确需恢复时检查；Goal 身份只在 explicit-goal 模式检查。
核心原则
这些原则来自 loop engineering 的实战经验，是防止 loop 变成烧钱空转的关键。
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · -15 lines d023f5071351
- 4d ago Changed · -94 lines 146837009728
- 6d ago Changed · +20 lines scan A → B ff43f17f0bbe
- 10d ago First seen · 1,040 lines · 222 tokens per session scan A 40dafa934314
autopilot is a skill published in the GitHub repository yan-labs/yan-skills (181 stars, last pushed today), licensed MIT. It adds 222 tokens to every session and 14,020 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
seo-mastery-jp
A Japanese-language SEO skill covering search visibility, website structure, page content, structured data, performance metrics, AI search, Astro, and Cloudflare edge deployments.
seo-mastery
Evidence-based SEO and generative search visibility: technical/content SEO, schema.org / JSON-LD, Core Web Vitals, E-E-A-T, Astro, Cloudflare Workers/Pages, and audits. Use for SEO, robots.txt, sitemaps, canonical, hreflang, meta tags, LCP/INP/CLS, GEO (Generative Engine Optimization), LLMO (Large Language Model…
alternatives-pages
Create "[Competitor] alternative" and comparison pages for developer tools. Build honest, high-converting comparison content that ranks for competitive search terms.
analytics-tracking
Design, audit, and improve analytics tracking systems that produce reliable, decision-ready data.
loki-yan-seo
Use when diagnosing or executing Google SEO, international/cross-border sites, AIO, or GEO. Unofficial engine distilled from Loki Yan (@lokiyanseo) public tweets. Not a generic SEO encyclopedia. Does not imitate his voice. Not affiliated or endorsed.
youtube-comment-management
Lister, modérer et répondre aux commentaires de chaînes YouTube via l'API v3, avec maillage SEO vers vos sites WordPress.