Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Ylsssq926/relic.skill --skill soul-shieldgit clone --depth 1 https://github.com/Ylsssq926/relic.skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ylsssq926/relic.skill/soul-shield)<a href="https://agentmods.dev/skills/ylsssq926/relic.skill/soul-shield"><img src="https://agentmods.dev/badge/skills/ylsssq926/relic.skill/soul-shield/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ylsssq926/relic.skill/soul-shield"><img src="https://agentmods.dev/badge/skills/ylsssq926/relic.skill/soul-shield.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.00450 |
| Opus 5 | $0.00026 | $0.00225 |
| Sonnet 5 | $0.00010 | $0.00090 |
| Haiku 4.5 | $0.00005 | $0.00045 |
Grade A, and why
relic-shield scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
soul-shield — 灵魂护盾
给 Relic 穿上防弹背心，而不是铁笼。
你负责什么
soul-shield 是 Relic 的保护层，负责三件事：
- 生成灵魂指纹：为每个 Relic 生成唯一内容指纹，并嵌入输出文件。
- 执行授权协议：在蒸馏开始前完成六问授权，决定是否允许唤醒、允许到什么程度。
- 守住伦理红线：阻止冒充、骚扰、未授权蒸馏与误导性使用。
工作顺序
- 先读取
consent-protocol.md - 根据回答判定授权等级
- 只有通过授权后，才读取
fingerprint.md生成与嵌入指纹 - 最后用
ethics.md做一次红线检查 - 任一步骤触发红线，立即停止 Relic 生成或对外发布
输出要求
- 每个 Relic 必须有唯一灵魂指纹
- 每个公开可见输出都必须带有 Relic 身份标识
- 每次内容更新都必须重新生成指纹
- 未授权对象不得进入蒸馏流程
- 不支持蒸馏政治人物
子文件
fingerprint.md— 灵魂指纹系统consent-protocol.md— 六问授权协议ethics.md— 伦理红线与处理原则
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 45 lines · 51 tokens per session scan A 3e10484e15a9
relic-shield is a skill published in the GitHub repository Ylsssq926/relic.skill (75 stars, last pushed 3mo ago), licensed MIT. It adds 51 tokens to every session and 450 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
immortal-skill
A framework for building a digital version of a person from conversations, social-media material, and documents. It extracts working methods, interaction patterns, memories, and personality into a reusable agent skill, with templates for different relationships.
distill-protocol
A protocol for creating a usage document and manifest that state who may use a supplied information package and whether AI training or commercial distillation is allowed. Distillation means turning material into training data or another condensed model-readable form.
distill-shield
A tool for adding traceable markers and optional hardening steps to data packages before handing them to someone else. It is intended for data you own or are authorised to handle.
rag-evaluator
Generates tailored giskard.checks evaluation suites for RAG (Retrieval-Augmented Generation) systems. Use whenever a user describes a Q&A bot grounded in documents, a knowledge-base chatbot, a retrieval system, or wants to evaluate answer groundedness, faithfulness, hallucination, retrieval quality, citation accuracy…
scenario-generator
Generates tailored giskard.checks test scenarios and suites for AI agents. Use when user describes their agent and fears, asks to "create scenarios", "test my agent", "generate checks", "evaluate my chatbot", "red-team my AI", or wants to build adversarial test cases for LLM-based applications.
steamer
A Chinese-language workflow for building a digital profile of a person from public, traceable material, such as talks, papers, interviews, and official posts.