Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add yknothing/skills-refiner --skill skills-panoramagit clone --depth 1 https://github.com/yknothing/skills-refinerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yknothing/skills-refiner/skills-panorama)<a href="https://agentmods.dev/skills/yknothing/skills-refiner/skills-panorama"><img src="https://agentmods.dev/badge/skills/yknothing/skills-refiner/skills-panorama/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yknothing/skills-refiner/skills-panorama"><img src="https://agentmods.dev/badge/skills/yknothing/skills-refiner/skills-panorama.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00077 | $0.02491 |
| Opus 5.5 | $0.00031 | $0.00996 |
| Sonnet 5.5 | $0.00015 | $0.00498 |
| Haiku 4.5 | $0.00008 | $0.00249 |
Grade A, and why
skills-panorama scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 151 lines — stays where its author put it; the contents beside it link to each section on GitHub.
技能全景(skills-panorama)
你是本机已部署 Agent Skills 的只读向导:先把拓扑摊开,再按缺口分诊该交给谁。
硬边界
- 只读。 禁止输出删除、修改软链、修改控制清单的具体命令。
- 不塌缩。 禁止用「已安装 / 就绪」一类总标签概括多层事实。
- 不重扫。 事实来自编排
skill-scan与 collection/catalog;你不发明第二套磁盘遍历。 - 按任务交接。 处置评估与可变操作建议属于
skill-hygiene。已有授权覆盖的只读评估直接交接并继续;实际变更遵守对应工具的精确计划与确认要求,评估授权不包含变更授权。
何时运行收集器
有 shell 且用户要看本机全景时,直接跑:
SKILLS_REFINER_NODE_BIN=/absolute/path/to/node24 \
bash ~/.agents/skills/skills-panorama/bin/skill-panorama.sh --yes
仓库内开发路径:
SKILLS_REFINER_NODE_BIN=/absolute/path/to/node24 \
bash skills/skills-panorama/bin/skill-panorama.sh --yes \
--hygiene-root skills/skill-hygiene
常用逃逸:
| 场景 | 参数 |
|---|---|
| 指定 Agent | --agents claude,cursor,codex |
| 零提问 | --yes 或非 TTY 或 --agents |
| 仅终端 | --stdout-only |
| 可分享脱敏 | --share(写出 share.json / share.md / share.html) |
权威落盘(本机,覆盖写):
~/Library/Application Support/skills-refiner/panorama/latest.json~/Library/Application Support/skills-refiner/panorama/latest.md~/Library/Application Support/skills-refiner/panorama/latest.html
JSON 是契约权威;Markdown 和 HTML 给人读,三者携带同一 generation_id。
先展示收集完整性、缺口数量与下一步,再展示运行时事实;完整来源和生命周期 明细放在报告末尾按需展开。不要让全量明细掩盖需要复核的事项。
latest.* 与 share.* 都以私有 0600 文件逐文件原子替换,并携带同一个 generation_id 供跨文件代次核对;既有目标若是 symlink 或非普通文件则拒绝写入。--share 会递归脱敏 URL、SSH endpoint、query/fragment、当前 HOME 与其它主机绝对路径。
若任一收集器未完整成功,CLI 仍会在事实可解析时生成报告,但写明 collectors.status: DEGRADED、保留结构化 blocker,并以退出码 3 结束。调用方不得把“报告已生成”误当成“收集完整”。
固定页面 / Canvas 模板
生成或更新全景页面时,使用 templates/report.html 与
lib/panorama-html.mjs,模板标识为 panorama-report.v1。
不要另写一次性页面、复制历史数据充当新诊断,或在每次报告中重新设计配色和结构。
同一模板可放入网页或支持 HTML 的 Canvas 宿主;不同报告只替换权威数据。
- 固定浅色背景、深绿色文字和强调色、系统字体、间距、焦点状态及信息层级。
- 页面使用通用技术语言:流程统一为“问题定位 → 修复与优化 → 结果验证”; 用“来源与路径”“Agent 技能目录”“报告 ID”说明具体对象,避免“拓扑分诊” “身份变体”“报告代次”等内部术语。原始 JSON 字段与状态值保持原样。
- 时间统一显示为
YYYY-MM-DD HH:mm:ss UTC,不根据本机设置添加城市或地区说明。 - 安装入口按实际文件和来源分组,明确区分实体目录、软链接、链接目标与上游仓库。 多个软链接指向同一目录时,说明它们共享文件;不要重复显示成多份独立安装。 上游仓库缺失只表示没有仓库记录。安装历史标明对应路径,不把源目录的安装时间 当作软链接创建时间;未声明版本号或没有安装记录时,用一句说明代替重复空字段。
- 先展示观察时间、范围、完整性和数量,再展示条目、身份/生命周期证据及复诊条件。
- 默认全部条目;筛选明确显示匹配数/总数,并提供清除筛选。
- 完整报告先写入 HTML。JavaScript 仅增强搜索、筛选与选择,禁用时仍能按名称展开阅读。
- 分栏由容器可用宽度决定;长路径换行,正文使用页面滚动,不固定列表高度或裁切溢出内容。
- 运行时六层事实以可换行的卡片呈现;不使用无法收缩的宽表。
- 模板改动应检查内容完整性、窄面板/宽窗口、底部可达、键盘操作和无脚本阅读。 静态契约通过不等于完成视觉验收;宿主访问受限时明确未验证项。
What ships with it
16 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- bin/skill-panorama.sh 1.6 KB runs code
- lib/panorama-cli.mjs 9.4 KB runs code
- lib/panorama-collect.mjs 32 KB runs code
- lib/panorama-config.mjs 11 KB runs code
- lib/panorama-constants.mjs 6.4 KB runs code
- lib/panorama-gaps.mjs 7.3 KB runs code
- lib/panorama-html.mjs 14 KB runs code
- lib/panorama-normalize.mjs 38 KB runs code
- lib/panorama-render.mjs 28 KB runs code
- references/decision-cards.md 1.2 KB
- references/field-glossary.md 5.7 KB
- references/gap-taxonomy.md 2.4 KB
- templates/report.html 14 KB
- tests/test-panorama-cli.sh 13 KB runs code
- tests/test-panorama-gaps.mjs 61 KB runs code
- tests/test-panorama-html.mjs 9.8 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago Changed · +33 lines 6c390aecfaf4
- 2mo ago Changed e43f6b3da3a0
- 2mo ago First seen · 118 lines · 77 tokens per session scan A 8bcc80c3228e
skills-panorama is a skill published in the GitHub repository yknothing/skills-refiner (24 stars, last pushed 1mo ago), licensed MIT. It adds 77 tokens to every session and 2,491 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
skills-panorama compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| skills-panoramayknothing/skills-refiner | Skill | 24 | 1mo ago | MIT | A | 77 | Claude Code, Codex |
| imagegenopenai/codex | Skill | 135k | today | Apache-2.0 | A | 113 | Codex |
| playwright-climicrosoft/playwright | Skill | 100k | today | Apache-2.0 | A | 19 | Claude Code |
| browser-automationopenclaw/openclaw | Skill | 394k | today | MIT | A | 36 | Claude Code |
| local-ai-agentsmicrosoft/ai-agents-for-beginners | Skill | 80k | 6d ago | MIT | A | 200 | Claude Code, Codex |
| next-cache-components-adoptionvercel/next.js | Skill | 143k | today | MIT | A | 95 | Claude Code |
| chat-pet-sprite-creationmicrosoft/vscode | Skill | 195k | today | MIT | A | 53 | Claude Code, Codex |