Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhuanggenhua/BoardGame --skill data-entry-workflowgit clone --depth 1 https://github.com/zhuanggenhua/BoardGameWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhuanggenhua/boardgame/data-entry-workflow)<a href="https://agentmods.dev/skills/zhuanggenhua/boardgame/data-entry-workflow"><img src="https://agentmods.dev/badge/skills/zhuanggenhua/boardgame/data-entry-workflow.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 19 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 24 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 74 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 77 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.01860 |
| Opus 5 | $0.00023 | $0.00930 |
| Sonnet 5 | $0.00009 | $0.00372 |
| Haiku 4.5 | $0.00005 | $0.00186 |
Grade A, and why
data-entry-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.
数据录入工作流
规范来源与职责边界
- 本 skill 是
workflow：只承载 BoardGame 数据录入的执行顺序、路由和项目内交付要求。 - 通用录入原则、来源优先级、核对契约和零猜测门禁以
.spec/knowledge/standards/data-entry.md为canonical-source。 - 图片/素材路径、manifest、正式资源链和服务器主源以
.spec/knowledge/standards/asset-pipeline.md为canonical-source。 - 本 skill 只保留执行骨架；如果与主源冲突，先改主源，再同步本 workflow。
何时使用
- 用户要求“录入数据”“根据图片补卡牌/技能/Token”“核对图片和代码”“整理真相源”“补 atlas 索引”“根据规则书/PDF/Wiki 更新文案或静态数据”时使用。
- 这不是实现 skill；它先收紧数据录入纪律，再把任务路由到对应游戏的 workflow。
- 当任务明确是“配置表 / 配置审查 / 字段核对 / 配置重录 / 配置修正提案”时，先使用项目
.spec/skills/config-review-workflow/SKILL.md；本 skill 只补图片、规则源、裁图和录入合同，不复制配置表工作流正文。
先读
- 通用门禁：
.spec/knowledge/standards/data-entry.md - 图片文字读取、OCR、卡图/场地或区域图规则录入或读图卡死：
.spec/skills/safe-image-reading/SKILL.md - 图片资源路径、manifest、服务器素材主源：
.spec/knowledge/standards/asset-pipeline.md - 机制实现承接：
.spec/knowledge/standards/engine-systems.md - 不确定入口：
.spec/knowledge/README.md
执行骨架
-
锁定任务现场
- 确认
gameId、本轮 scope、当前 worktree / 分支、用户指定真相源。 - scope 是整包、整牌库、全场景、全区域、全组件时，先建立官方对象全集；当前运行池、发现池、素材 manifest、测试覆盖对象只能作为覆盖对照。
- 确认
-
先建录入合同
- 按
data-entry.md完成真相源表、对象全集、规则数量 × 素材数量对账、字段版式合同、裁图 / OCR / atlas / 索引合同。 - 新游戏和新增派系都把数据录入作为第一优先级：凡是实际读取过的图片、图集、截图或裁图，先登记图面数据、对象 / 槽位、最终处置和处置依据，再判断是否进入运行时；卡牌描述、i18n、运行时定义和机制实现只能消费锁定合同。
- 每个对象退出录入层时必须是
locked / partial / blocked / disputed之一；partial只表示已登记但字段或证据仍不完整，未locked对象不得进入实现、UI、E2E、截图或完成口径。 blocked / disputed / unknown-slot / not-in-runtime只拦阶段升级和完成宣称，不等于停工；仍有本地证据可补时继续补合同。
- 按
-
图片读取走需求交接
- 主线程先写清业务对象、图片路径、要补足的字段 / 判断点、结果用途。
- 读图 / OCR 只返回当前需求所需字段；录入结论必须落到合同表、evidence 或真相表。
- 可读字段立即入表；不可读字段只标
blocked / disputed / partial，不得猜。
-
资源链按主源执行
- 运行时图片、atlas、Token、状态图标、音频、manifest、服务器素材主源全部回
asset-pipeline.md。 - 录入切图、OCR 图、人工核对图只能放
temp/**或 evidence，不能进public/assets/**或远程素材主源。 - 只要本轮新增 / 替换运行时媒体资源，默认执行压缩、上传和远端回查；未完成时必须说明缺口和影响。
- 运行时图片、atlas、Token、状态图标、音频、manifest、服务器素材主源全部回
-
先文档后实现
- 影响规则、机制、描述、展示或资源映射的录入，必须先更新文档 / 合同，再改运行时代码。
- 代码、测试、旧 evidence 只能辅助定位；主真相源未锁定前，不得下“不是录入错误”的最终结论。
S0-S4 拆解骨架
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 90 lines · 47 tokens per session scan A d75b9be94fc7
data-entry-workflow is a skill published in the GitHub repository zhuanggenhua/BoardGame (22 stars, last pushed today), licensed MIT. It adds 47 tokens to every session and 1,860 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
gameobject-component-destroy
Destroy one or more Components from a target GameObject. Missing (null) components are skipped — they cannot be destroyed. Use 'gameobject-find' and 'gameobject-component-get' to identify the components first.
unity-version-split
Split a C# file into Unity 6.5+ and pre-Unity 6.5 variants. Use when a file needs different implementations for different Unity versions due to API changes (e.g., EntityId vs int, GetEntityId vs GetInstanceID).
unity-addressables
Manage Addressables groups, entries, profiles and content builds (com.unity.addressables, reflection-based).
playtest-report
Generates a structured playtest report template or analyzes existing playtest notes into a structured format. Use this to standardize playtest feedback collection and analysis.
motion
How an agent turns a character mesh into a usable animated FBX — and how to judge whether the result is shippable.
unity-manual-component
Manually add, configure, reorder, and copy components on GameObjects using Unity Editor UI. For one-off Inspector workflows that do not need REST automation.