PortalJS is a framework for building data portals that present searchable datasets through a home page, catalog, and dataset showcase. It is for teams that want to choose a data backend, scaffold a Next.js portal, load CSV or JSON data, connect services such as CKAN, and deploy the result. The catalogue entries are agent commands, skills, instructions, and a plugin that guide portal creation and data loading.
Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/datopian/portaljsnpx agentmods add commands/datopian/portaljs/portaljs-add-geoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/datopian/portaljs/portaljs-add-geo)<a href="https://agentmods.dev/commands/datopian/portaljs/portaljs-add-geo"><img src="https://agentmods.dev/badge/commands/datopian/portaljs/portaljs-add-geo/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/datopian/portaljs/portaljs-add-geo"><img src="https://agentmods.dev/badge/commands/datopian/portaljs/portaljs-add-geo.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00103 | $0.06256 |
| Opus 5 | $0.00051 | $0.03128 |
| Sonnet 5 | $0.00021 | $0.01251 |
| Haiku 4.5 | $0.00010 | $0.00626 |
Grade B, and why
portaljs-add-geo scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
Debian/Ubuntu: sudo apt-get install -y gdal-bin duckdb # tippecanoe: apt where available, Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fL "$SOURCE" -o "/tmp/$DATASET_SLUG.$EXT" How it starts
The opening of the file, as written. The whole thing — 426 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/portaljs-add-geo
Turn one geospatial upload into a dual-tier PortalJS dataset entirely on the user's machine — no server-side container compute, keeping the zero-backend bet end-to-end. From a single source file this produces two derivatives plus the preserved original:
- PMTiles — the render tier. A single vector-tile archive
<MapPreview>renders with MapLibre GL over HTTP range requests: any dataset size pans/zooms with no tile server. - GeoParquet — the query tier. A GeoParquet 1.1 file (covering
bboxcolumn, Hilbert-sorted)<GeoQuery>runs spatial SQL over in place via DuckDB-Wasm. - Original — the untouched upload in its native CRS, kept downloadable as the source artifact.
All three land on Cloudflare R2 (via Git LFS → Giftless), and the skill appends one
datasets.json entry whose resources[] are exactly the shape the showcase auto-renders
(PR #1647 / the @reference/world-boundaries demo): a pmtiles resource → <MapPreview>,
a geoparquet resource → <GeoQuery>, and the original as a download. No page edits — the
dynamic showcase route pages/[owner]/[slug].tsx renders each resource by its format.
This automates the manual tippecanoe / duckdb recipes documented in the template README
(the interim ingest path). Use it whenever the source is a vector geo format; for plain
tabular data use /portaljs-add-dataset, and for a Leaflet view over small GeoJSON use
/portaljs-add-map.
Runtime — native shell-out, detect-or-instruct
This runs native CLIs on the user's machine (locked direction, 2026-07-08 — overrides po-6sr §7's server-compute sketch). No container, no cloud job. tippecanoe has no mature WASM build, so the PMTiles tier fundamentally needs the native binary; skills already shell out to git-lfs and npm, so native geo deps fit the model. Three tools:
| Tool | Role | Why this tool |
|---|---|---|
GDAL (ogr2ogr, ogrinfo) |
Read every vector input; reproject → EPSG:4326; emit the normalized GeoJSON intermediate | Widest driver set (SHP, GPKG, KML/KMZ, FGB, CSV-geom) |
| tippecanoe | normalized GeoJSON → PMTiles (render tier) | The de-facto tiler; no WASM equivalent |
duckdb (+ spatial) |
normalized GeoJSON → GeoParquet 1.1 with covering bbox + Hilbert sort (query tier) |
The proven writer — PR #1647 verified <GeoQuery> against duckdb output; ogr2ogr's Parquet driver won't cleanly emit the covering-bbox column + Hilbert ordering the bbox-first query needs to prune |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 426 lines · 103 tokens per session scan B 2011da4957b8
portaljs-add-geo is a command published in the GitHub repository datopian/portaljs (2,350 stars, last pushed 3d ago), licensed MIT. It adds 103 tokens to every session and 6,256 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
audit-code
When /audit-code [target] is invoked, immediately execute the following steps to analyze code quality, security, and adherence to project standards.
speckit.archive.run
Archive merged feature specs into project memory with provenance, sweep discovery, and gated cleanup.
replication-package
Scaffold or audit a social-science replication package at a target directory, and audit the manuscript and its archived research objects against FAIR principles.
diff
Quantitative volume comparison between a CadQuery model and a reference STEP file.
migration
Generate Prisma database migration.
arg-diagram
ARG academic-paper diagram mode — standalone structural & conceptual diagram generation.