Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhuanggenhua/BoardGame --skill data-entry-workflowgit clone --depth 1 https://github.com/zhuanggenhua/BoardGameWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhuanggenhua/boardgame/data-entry-workflow)<a href="https://agentmods.dev/skills/zhuanggenhua/boardgame/data-entry-workflow"><img src="https://agentmods.dev/badge/skills/zhuanggenhua/boardgame/data-entry-workflow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhuanggenhua/boardgame/data-entry-workflow"><img src="https://agentmods.dev/badge/skills/zhuanggenhua/boardgame/data-entry-workflow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 19 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 24 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 74 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 77 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.02056 |
| Opus 5.5 | $0.00019 | $0.00822 |
| Sonnet 5.5 | $0.00009 | $0.00411 |
| Haiku 4.5 | $0.00005 | $0.00206 |
Grade A, and why
data-entry-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 27d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 92 lines — stays where its author put it; the contents beside it link to each section on GitHub.
数据录入工作流
规范来源与职责边界
- 本 skill 是
workflow：只承载 BoardGame 数据录入的执行顺序、路由和项目内交付要求。 - 通用录入原则、来源优先级、核对契约和零猜测门禁以
.spec/knowledge/standards/data-entry.md为canonical-source。 - 图片/素材路径、manifest、正式资源链和服务器主源以
.spec/knowledge/standards/asset-pipeline.md为canonical-source。 - 本 skill 只保留执行骨架；如果与主源冲突，先改主源，再同步本 workflow。
何时使用
- 用户要求“录入数据”“根据图片补卡牌/技能/Token”“核对图片和代码”“整理真相源”“补 atlas 索引”“根据规则书/PDF/Wiki 更新文案或静态数据”时使用。
- 这不是实现 skill；它先收紧数据录入纪律，再把任务路由到对应游戏的 workflow。
- 当任务明确是“配置表 / 配置审查 / 字段核对 / 配置重录 / 配置修正提案”时，先使用项目
.spec/skills/config-review-workflow/SKILL.md；本 skill 只补图片、规则源、裁图和录入合同，不复制配置表工作流正文。
先读
- 通用门禁：
.spec/knowledge/standards/data-entry.md - 图片文字读取、OCR、卡图/场地或区域图规则录入或读图卡死：
.spec/skills/safe-image-reading/SKILL.md - 图片资源路径、manifest、服务器素材主源：
.spec/knowledge/standards/asset-pipeline.md - 机制实现承接：
.spec/knowledge/standards/engine-systems.md - 不确定入口：
.spec/knowledge/README.md
执行骨架
-
锁定任务现场
- 确认
gameId、本轮 scope、当前 worktree / 分支、用户指定真相源。 - scope 是整包、整牌库、全场景、全区域、全组件时，先建立官方对象全集；当前运行池、发现池、素材 manifest、测试覆盖对象只能作为覆盖对照。
- 确认
-
先建录入合同
- 按
data-entry.md完成真相源表、对象全集、规则数量 × 素材数量对账、字段版式合同、裁图 / OCR / atlas / 索引合同。 - 新游戏和新增派系都把数据录入作为第一优先级：凡是实际读取过的图片、图集、截图或裁图，先登记图面数据、对象 / 槽位、最终处置和处置依据，再判断是否进入运行时；卡牌描述、i18n、运行时定义和机制实现只能消费锁定合同。
- 退出 S0 前按
data-entry.md的完整语义录入门禁逐项复核：全部具有特殊含义的文本、数字、图案、颜色、框线、区域关系和规则原子都必须有来源定位、原文或图面描述、结构化字段和处置结果。deferred / not-currently-consumed是合法去向，不是省略理由。 - 每个对象退出录入层时必须是
locked / partial / blocked / disputed之一；partial只表示已登记但字段或证据仍不完整，未locked对象不得进入实现、UI、E2E、截图或完成口径。 blocked / disputed / unknown-slot / not-in-runtime只拦阶段升级和完成宣称，不等于停工；仍有本地证据可补时继续补合同。
- 按
-
图片读取走需求交接
- 主线程先写清业务对象、图片路径、当前重点字段 / 判断点和结果用途，但不得把“当前重点”当成读取范围上限。
- 读图 / OCR 必须先返回完整的特殊含义元素清单，再突出当前需求直接相关的字段；不得只摘当前代码准备使用、当前测试覆盖或当前提问点涉及的内容。
- 录入结论必须落到合同表、evidence 或真相表；暂未消费的内容标
reference / deferred / not-currently-consumed，不能从结果中删除。 - 可读字段立即入表；不可读字段只标
blocked / disputed / partial，不得猜。
-
资源链按主源执行
- 运行时图片、atlas、Token、状态图标、音频、manifest、服务器素材主源全部回
asset-pipeline.md。 - 录入切图、OCR 图、人工核对图只能放
temp/**或 evidence，不能进public/assets/**或远程素材主源。 - 只要本轮新增 / 替换运行时媒体资源，默认执行压缩、上传和远端回查；未完成时必须说明缺口和影响。
- 运行时图片、atlas、Token、状态图标、音频、manifest、服务器素材主源全部回
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 27d ago Changed 25e821539dc8
- 1mo ago Changed · +2 lines b9e194ea204c
- 1mo ago First seen · 90 lines · 47 tokens per session scan A d75b9be94fc7
data-entry-workflow is a skill published in the GitHub repository zhuanggenhua/BoardGame (24 stars, last pushed yesterday), licensed MIT. It adds 47 tokens to every session and 2,056 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
playtest-report
Structured playtest report template, or turn existing playtest notes into structured feedback.
godot-signals-groups
Build event-driven, decoupled Godot 4.7 gameplay with signals and node groups: declare and emit custom signals, connect with Callables (incl. bind/one-shot), and broadcast to many nodes via groups and callgroup. Use when wiring node communication in a Godot project, replacing tight references with signals…
motion
Reconstruct a skeleton from calibrated mesh projections and sequential VLM joint annotations, then fit joints and skin weights. Generate motion from joint-position trajectories, rhythm and contact constraints through IK; refine bone orientation against the action, then export, retarget and validate on the target mesh.
unity-addressables
Manage Addressables groups, entries, profiles and content builds (com.unity.addressables, reflection-based).
threejs-exposure-color-grading
Build a measured exposure and grading path in Three.js. Use for a 64x36 encoded luminance meter, asynchronous readback, weighted log-average exposure, asymmetric adaptation, single tone-map ownership, and a generated 32-cube post-tone-map LUT.
unity-manual-component
Manually add, configure, reorder, and copy components on GameObjects using Unity Editor UI. For one-off Inspector workflows that do not need REST automation.