Add Hosted Key
simstudioai/sim
Add hosted API key support to a tool so Sim provides the key (metered and billed to the workspace) when a user has not brought their own.
In D&D, Heat Metal makes a metal object painfully hot — the creature holding it must either endure the pain or drop it.
Install Heat Metal
$ npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install Hmbown/Wizards-of-the-Ghosts heat-metal --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/Hmbown/Wizards-of-the-Ghosts.git skills-src && mkdir -p .claude/skills && cp -r skills-src/generated/openclaw/heat-metal .claude/skills/heat-metal && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "heat-metal" agent skill from https://github.com/Hmbown/Wizards-of-the-Ghosts/tree/main/generated/openclaw/heat-metal into .claude/skills/heat-metal/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "heat-metal", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/Hmbown/Wizards-of-the-Ghosts/tree/main/generated/openclaw/heat-metalType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install Hmbown/Wizards-of-the-Ghosts heat-metal --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Hmbown/Wizards-of-the-Ghosts.git skills-src && mkdir -p .agents/skills && cp -r skills-src/generated/openclaw/heat-metal .agents/skills/heat-metal && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "heat-metal" agent skill from https://github.com/Hmbown/Wizards-of-the-Ghosts/tree/main/generated/openclaw/heat-metal into .agents/skills/heat-metal/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "heat-metal", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install Hmbown/Wizards-of-the-Ghosts heat-metal --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Hmbown/Wizards-of-the-Ghosts.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/generated/openclaw/heat-metal .cursor/skills/heat-metal && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "heat-metal" agent skill from https://github.com/Hmbown/Wizards-of-the-Ghosts/tree/main/generated/openclaw/heat-metal into .cursor/skills/heat-metal/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "heat-metal", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/Hmbown/Wizards-of-the-Ghosts.git --path generated/openclaw/heat-metal--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install Hmbown/Wizards-of-the-Ghosts heat-metal --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Hmbown/Wizards-of-the-Ghosts.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/generated/openclaw/heat-metal .gemini/skills/heat-metal && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "heat-metal" agent skill from https://github.com/Hmbown/Wizards-of-the-Ghosts/tree/main/generated/openclaw/heat-metal into .gemini/skills/heat-metal/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "heat-metal", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install Hmbown/Wizards-of-the-Ghosts heat-metalInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/Hmbown/Wizards-of-the-Ghosts.git skills-src && mkdir -p .github/skills && cp -r skills-src/generated/openclaw/heat-metal .github/skills/heat-metal && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "heat-metal" agent skill from https://github.com/Hmbown/Wizards-of-the-Ghosts/tree/main/generated/openclaw/heat-metal into .github/skills/heat-metal/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "heat-metal", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install Hmbown/Wizards-of-the-Ghosts heat-metal --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Hmbown/Wizards-of-the-Ghosts.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/generated/openclaw/heat-metal .opencode/skills/heat-metal && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "heat-metal" agent skill from https://github.com/Hmbown/Wizards-of-the-Ghosts/tree/main/generated/openclaw/heat-metal into .opencode/skills/heat-metal/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "heat-metal", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
heat-metal- GitHub stars
- 110
- Token cost
- ~633 tokens
- SKILL.md length
- 268 words
- Files
- 1
- Skills in repo
- 11
- Repo updated
- First seen
- Licence
- CC0-1.0
At a glance
In D&D, Heat Metal makes a metal object painfully hot — the creature holding it must either endure the pain or drop it.
- Works in 5 steps: Identify the tool, path, or behavior you… → Design the friction curve: what… → Implement the progressive friction:… → …
- Tasks that involve Rate limiting
- SKILL.md covers Overview, When To Use, Workflow and Deliverables, plus 2 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Heat Metal is an agent skill from Hmbown/Wizards-of-the-Ghosts. In D&D, Heat Metal makes a metal object painfully hot — the creature holding it must either endure the pain or drop it. The real-world version is deliberate friction injection: making a deprecated API progressively slower, adding escalating CAPTCHAs to suspicious traffic, increasing the cost of a bad behavior path until the actor self-selects out. Heat Metal does not break the tool. It makes continuing to use it more painful than switching to the alternative. This is the spell behind deprecation-by-discomfort…
Its SKILL.md is about 630 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Backend & APIs, covering Rate limiting. The repository describes itself as: Unofficial Hermes Agent skill pack built from fantasy spell and skill names. The licence is CC0-1.0.
When your agent uses it
- Tasks that involve Rate limiting
Example prompts
- “/heat-metal”
Workflow steps
5 steps, taken from the first numbered list in SKILL.md.
- Identify the tool, path, or behavior you want to discourage.
- Design the friction curve: what discomfort increases over time and at what rate.
- Implement the progressive friction: latency injection, CAPTCHA escalation, cost increases, warning banners.
- Monitor adoption of the preferred alternative to confirm the friction is driving the intended migration.
- Set a sunset date: Heat Metal should eventually end in either full migration or hard deprecation.
What it can do on your machine
Read from SKILL.md and the folder at commit 1f2e6a0. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Heat Metal loads about 633 tokens when it runs. Until then it costs about 145 tokens; SKILL.md has 268 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from Hmbown/Wizards-of-the-Ghosts at commit 1f2e6a0, republished under its CC0-1.0 licence (© Hmbown). 268 words, ~633 tokens.
Download SKILL.mdSave it as
.claude/skills/heat-metal/SKILL.md (or your agent's skills folder).- name
- heat-metal
- description
- In D&D, Heat Metal makes a metal object painfully hot — the creature holding it must either endure the pain or drop it. The real-world version is deliberate friction injection: making a deprecated API progressively slower, adding escalating CAPTCHAs to suspicious traffic, increasing the cost of a bad behavior path until the actor self-selects out. Heat Metal does not break the tool. It makes continuing to use it more painful than switching to the alternative. This is the spell behind deprecation-by-discomfort, progressive rate limiting, and sunset friction curves.
- user-invocable
- true
Heat Metal
Make a tool or process increasingly uncomfortable to use until it is abandoned.
Overview
Heat Metal is interpreted here as a hybrid spell with a prototype execution model.
Canonical source: Heat Metal (spell)
Provider target: OpenClaw
When To Use
- You want to drive migration away from a deprecated tool, API, or workflow without hard-cutting access.
- Suspicious or abusive behavior should be progressively penalized without outright blocking.
- A gradual escalation of friction is more appropriate than an immediate ban or shutdown.
Workflow
- Identify the tool, path, or behavior you want to discourage.
- Design the friction curve: what discomfort increases over time and at what rate.
- Implement the progressive friction: latency injection, CAPTCHA escalation, cost increases, warning banners.
- Monitor adoption of the preferred alternative to confirm the friction is driving the intended migration.
- Set a sunset date: Heat Metal should eventually end in either full migration or hard deprecation.
Deliverables
- A friction curve specification: what changes, how fast, and what the escalation stages are.
- Migration metrics: how many users/systems have moved to the preferred alternative.
- A sunset timeline with hard cutoff criteria.
Guardrails
- Friction injection must be disclosed. Secretly making tools worse without explanation is a dark pattern.
- Heat Metal targets behavior, not people. Progressive friction applied to specific users as punishment crosses into harassment.
- Always provide a visible alternative. Making something painful to use without offering a better path is cruelty, not engineering.
Default Invocation
Use $heat-metal to design a progressive friction strategy that makes a deprecated tool, abusive pattern, or unwanted behavior increasingly uncomfortable until users migrate to the better alternative.
© Hmbown, CC0-1.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in generated/openclaw/heat-metal of Hmbown/Wizards-of-the-Ghosts.
Open the folder on GitHubat commit 1f2e6a0
Compare with similar skills
Heat Metal next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Heat Metal this skillHmbown/Wizards-of-the-Ghosts | 110 | — | ~633 | Automated safety check: Pass | CC0-1.0 | |
| Add Hosted Keysimstudioai/sim | 30k | — | ~3.6k | Automated safety check: Pass | Apache-2.0 | |
| Upstash Ratelimit TSupstash/ratelimit-js | 2k | — | ~313 | Automated safety check: Pass | MIT | |
| Repo2skillzhangyanxs/repo2skill | 246 | — | ~3.6k | Automated safety check: Pass | None | |
| Better Auth Security Best PracticesEpicenterHQ/epicenter | 4.8k | — | ~896 | Automated safety check: Pass | Custom licence | |
| Dload Fetch Toolphp-internal/dload | 105 | — | ~1.1k | Automated safety check: Pass | BSD-3-Clause |
Similar skills
- Official
Upstash Ratelimit TS
upstash/ratelimit-js
Lightweight guidance for using the Redis Rate Limit TypeScript SDK, including setup steps, basic usage, and pointers to advanced algorithm, features, pricing, and traffic‑protection docs.
Repo2skill
zhangyanxs/repo2skill
Convert GitHub/GitLab/Gitee repositories into comprehensive OpenCode Skills using embedded LLM calls with multiple mirrors and rate limit handling
Better Auth Security Best Practices
EpicenterHQ/epicenter
Better Auth security hardening: rate limits, secrets, CSRF, trusted origins, cookies, sessions, OAuth tokens, and audit logging.
Dload Fetch Tool
php-internal/dload
Get a CLI tool — native binary or PHAR — from a GitHub release into a project folder with dload (vendor/bin/dload).
API Gateway
itsmostafa/aws-agent-skills
AWS API Gateway for REST and HTTP API management. An agent skill from itsmostafa/aws-agent-skills.
More from Hmbown/Wizards-of-the-Ghosts
All 11 skills in this repoAnimate Objects
Hmbown/Wizards-of-the-Ghosts
This spell transforms inert → reactive. An agent skill from Hmbown/Wizards-of-the-Ghosts.
Dancing Lights
Hmbown/Wizards-of-the-Ghosts
Use this spell for lightweight indicators: status pips, progress markers, heartbeat widgets, and ambient observability that help humans orient quickly.
Detect Magic
Hmbown/Wizards-of-the-Ghosts
A skill your agent uses when you need a fast, structured scan for where the real magic is hiding in a repo, workflow, or system.
Dispel Magic
Hmbown/Wizards-of-the-Ghosts
Use this spell when you need to cleanly shut down, disable, or remove active AI tooling — the reverse of Detect Magic.
Foresight
Hmbown/Wizards-of-the-Ghosts
Foresight produces bounded forecasts with explicit uncertainty to guide decisions.
Glyph Of Warding
Hmbown/Wizards-of-the-Ghosts
A skill your agent uses when you need a watchful boundary around files, systems, metrics, queues, or workflows.
Related
Categories
Questions about Heat Metal
What does Heat Metal do?
In D&D, Heat Metal makes a metal object painfully hot — the creature holding it must either endure the pain or drop it. Heat Metal is an agent skill from Hmbown/Wizards-of-the-Ghosts. In D&D, Heat Metal makes a metal object painfully hot — the creature holding it must either endure the pain or drop it.
When should I use Heat Metal?
Heat Metal fits situations like: tasks that involve Rate limiting.
How do I install Heat Metal in Claude Code?
Run `npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a claude-code`. Or copy the skill folder (generated/openclaw/heat-metal in Hmbown/Wizards-of-the-Ghosts) into .claude/skills/heat-metal in your project. Claude Code loads it when a task matches its description.
How do I install Heat Metal in Codex?
Run `npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a codex`. Or copy the skill folder (generated/openclaw/heat-metal in Hmbown/Wizards-of-the-Ghosts) into .agents/skills/heat-metal in your project. Codex loads it when a task matches its description.
Can I use Heat Metal in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Hmbown/Wizards-of-the-Ghosts --skill heat-metal -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/heat-metal, .gemini/skills/heat-metal, .github/skills/heat-metal and .opencode/skills/heat-metal in your project.
What does Heat Metal need to run?
SKILL.md names no scripts, command-line tools or credentials: Heat Metal is instructions for the agent only.
Does Heat Metal access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Heat Metal safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Heat Metal use?
Heat Metal is published under the CC0-1.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Heat Metal use?
About 633 tokens (SKILL.md is roughly 2.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Heat Metal?
Skills that share tags, products or a category with Heat Metal: Add Hosted Key (simstudioai/sim, 30k stars), Upstash Ratelimit TS (upstash/ratelimit-js, 2k stars), Repo2skill (zhangyanxs/repo2skill, 246 stars) and Better Auth Security Best Practices (EpicenterHQ/epicenter, 4.8k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Heat Metal?
Hmbown (a GitHub user) maintains it in Hmbown/Wizards-of-the-Ghosts, which has 110 GitHub stars. The repository holds 11 skills in this directory. The repository was last updated on April 5, 2026.
Source: Hmbown/Wizards-of-the-Ghosts on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.