Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ZeKaiNie/universal-examprep-skill --skill zhgit clone --depth 1 https://github.com/ZeKaiNie/universal-examprep-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zekainie/universal-examprep-skill/zh)<a href="https://agentmods.dev/skills/zekainie/universal-examprep-skill/zh"><img src="https://agentmods.dev/badge/skills/zekainie/universal-examprep-skill/zh/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zekainie/universal-examprep-skill/zh"><img src="https://agentmods.dev/badge/skills/zekainie/universal-examprep-skill/zh.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 10 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 3 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 7 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01486 |
| Opus 5 | $0.00000 | $0.00743 |
| Sonnet 5 | $0.00000 | $0.00297 |
| Haiku 4.5 | $0.00000 | $0.00149 |
Grade A, and why
zh scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 30 lines — stays where its author put it; the contents beside it link to each section on GitHub.
极速备考教练——中文兼容入口
本文件是简体中文兼容入口，不是第二份流程手册。行为唯一事实源是 skills/exam-cram/SKILL.md 与当前子技能；文案派发见 docs/language-policy.md。
装载
先读总编排器，再只读当前需要的一项：exam-ingest、exam-tutor、exam-study-guide、exam-quiz、exam-review、exam-cheatsheet、exam-audit、exam-help 或 confusion-tracker。持久化语言值为 zh|en|bilingual；zh 使用纯简体中文，双语只能显式选择。
兼容安全钉
- 断点状态锁定 (
study_state.json)：本地操作前跑update_progress.py workspace-list --json，确认材料/工作区绝对路径并先恢复状态；study_progress.md只是生成视图。状态缺失且 Python 可用时，先跑python "${CLAUDE_SKILL_DIR}/scripts/update_progress.py" --workspace <ws> init，再set、set-check等写入；不得把仓库或当前目录当工作区。 - 首次把学习模式、时间宽裕度、回复语言一起设定。紧急开场可推断从头讲＋≤1天＋开场语言，绝不推断双语；明确不要提问时保存
no_questions=true，阶段上限为covered_unverified。 - 启动时另选材料处理方式；缺失/默认按
processing_mode=lightweight，只处理当前阶段最多 8 页且最多一个活动批次，绝不生成复习讲义。visual偏好在轻量下休眠、有效输出仍为chat；只有显式full才能进入完整建库和教材路线。未完成轻量批次只能用带原因回执的abandon关闭，已讲完的进度不可放弃。 - 测验/判分只用
references/quiz_bank.json；常规选题用select_questions.py，检查点用select_hard_questions.py --chapter <当前章>。限定范围排除并计数无标签题；临时越界前说：⚠️ 临时覆盖你的 <范围> 范围偏好。 requires_assets=true或maybe_requires_assets=true时，提问、提示、讲解、解答之前真实展示全部题面图；路径不算图片。答案图只能稍后显示；不能渲染就跳过。student_attempt只保留审计，绝不展示；它在题库、教学例题和全部内容单元中任一出现，就全局污染同一物理路径，其他标称为官方的声明也不能恢复使用。必须走show_question_assets.py或对应渲染器的三层门禁，不得直接渲染原始路径。stub或page_reference也须先显示原页上下文。- 实质内容先用
notebook.py持久化；失败就说明并在对话给全文。缺失/未知artifact_mode按chat；只有显式选择full+visual，或在full下提出一次性请求，才进入强类型教材、渲染与全页验收。不静默安装，也不猜订阅档位。 - 进入第二代完整复习讲义前，先做宿主能力握手。若宿主的官方能力可验证地提供全新独立子上下文，并能把输入和工具都限制在一道题内，则默认使用内部独立子智能体；只需提示一次它会额外消耗模型额度和时间，不需要接口密钥，也不向外部服务上传。若能力不完整（包括不能限制工具）或无法确认，则使用
ordinary并说明原因。外部模型服务商只作为用户明确点名时的备用方案；仍须保留关于独立计费、保留/隐私、准确逐题/图片范围、调用数、当前价格估算和上传的两次授权。 preferences.interaction_style只存batch|step_by_step，不作为开场必答项。已存逐题偏好只有在full且no_questions=false时有效；否则保留但休眠、有效节奏为batch。逐题选择器在锁内按题目清单读取一致快照，record-taught-example用散列值绑定带标记的笔记块与清单题目；教学 ID 复用 1–200 字符的安全统一码契约。无绑定记录的教学 ID 仍是合法的batch历史，已有绑定记录在切换节奏后也须实时校验。结构完好的过期绑定或仅追加的新题目在挂载时为usable_with_gaps；结构损坏仍为blocked，旧复习讲义和完成回执必须重建。每个教学基线 ID 仍须有当前教学清单快照，不能只靠题库中的同一 ID。
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- messages.json 1.2 KB
- skills/confusion-tracker.md 899 B
- skills/exam-cheatsheet.md 1.0 KB
- skills/exam-cram.md 2.8 KB
- skills/exam-help.md 5.0 KB
- skills/exam-ingest.md 1.2 KB
- skills/exam-quiz.md 1.1 KB
- skills/exam-review.md 1.1 KB
- skills/exam-tutor.md 2.0 KB
- templates/quiz_bank_template.json 1.6 KB
- templates/study_plan_template.md 333 B
- templates/study_progress_template.md 916 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 30 lines · 0 tokens per session scan A 149927d6d84c
zh is a skill published in the GitHub repository ZeKaiNie/universal-examprep-skill (281 stars, last pushed 6d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,486 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
bq-skill
A coaching workflow for building a reusable library of truthful stories for behavioral job interviews. It uses structures such as STAR—Situation, Task, Action, Result—and can connect stories to a job description and résumé.
PersonaLingo
A guided tool for creating personalised IELTS speaking practice materials. IELTS is an English exam, and the tool turns a learner’s answers and conversation into a personal profile and a static study website.
learning-mode
Guide active, hands-on learning without completing the chosen learning target for the learner. Use when the user explicitly wants to learn, practice, master, or build something themselves with guidance, especially when a technology or concept is new to them. Diagnose the smallest missing prerequisite, guide prediction…
html-effectiveness-research
A guide for explaining how a feature works in a code repository or how an abstract technical idea works. It can structure the explanation with a summary, expandable steps, code views, questions and answers, or an interactive visual.
teach
Use when the user wants to learn or be taught a topic interactively over multiple turns, with the agent acting as tutor rather than answer-giver. Triggers on phrases like "teach me", "tutor me", "quiz me", "let's learn", "help me understand X by working through it step by step", or any request framed around learning a…
rwkv-architecture
RNN+Transformer hybrid with O(n) inference. Linear time, infinite context, no KV cache. Train like GPT (parallel), infer like RNN (sequential). Linux Foundation AI project. Production at Windows, Office, NeMo. RWKV-7 (March 2025). Models up to 14B parameters.