Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/yharby/duckdb-skill/detectgit clone --depth 1 https://github.com/yharby/duckdb-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/yharby/duckdb-skill/detect)<a href="https://agentmods.dev/commands/yharby/duckdb-skill/detect"><img src="https://agentmods.dev/badge/commands/yharby/duckdb-skill/detect.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00019 | $0.00562 |
| Opus 5 | $0.00010 | $0.00281 |
| Sonnet 5 | $0.00004 | $0.00112 |
| Haiku 4.5 | $0.00002 | $0.00056 |
Grade C, and why
detect scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
| uv/uvx | `curl -LsSf https://astral.sh/uv/install.sh \| sh` | Same curl command | `winget install -e --id astral-sh.uv` | Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| uv/uvx | `curl -LsSf https://astral.sh/uv/install.sh \| sh` | Same curl command | `winget install -e --id astral-sh.uv` | What it actually says
Environment Detection
Check the current environment for DuckDB-related tools. Run the following detection commands. Each is independent — run them in parallel and handle failures gracefully (use || echo "NOT_FOUND").
Detection commands (work on macOS, Linux, AND Windows Git Bash):
duckdb --version 2>/dev/null || echo "NOT_FOUND"— DuckDB CLI on PATHuv --version 2>/dev/null || echo "NOT_FOUND"— uv package manageruvx --version 2>/dev/null || echo "NOT_FOUND"— uvx runnerpython3 -c "import duckdb; print('Python duckdb:', duckdb.__version__)" 2>/dev/null || python -c "import duckdb; print('Python duckdb:', duckdb.__version__)" 2>/dev/null || echo "NOT_FOUND"— Python duckdb package
Report a summary table with status, version, and install command for each tool.
Platform-specific install commands (detect via the OS field in the environment info, or uname -s 2>/dev/null):
| Tool | macOS | Linux | Windows |
|---|---|---|---|
| DuckDB CLI | brew install duckdb |
Download from duckdb.org | winget install -e --id DuckDB.cli -v "1.5.0" or scoop install duckdb |
| uv/uvx | curl -LsSf https://astral.sh/uv/install.sh | sh |
Same curl command | winget install -e --id astral-sh.uv |
| Python duckdb | pip install duckdb |
pip install duckdb |
pip install duckdb |
Recommendations based on results:
- If DuckDB CLI is missing: Suggest installation for the detected platform
- If uv/uvx is missing: Recommend installing uv (provides both
uvanduvx) - If Python duckdb is missing but uv is available:
uvx --with duckdb python -c "import duckdb; print(duckdb.__version__)" - If Python duckdb version differs from CLI version: Warn about potential compatibility issues
- If DuckDB version < 1.5.0: Warn that this skill targets v1.5+ and some features may not work
- If DuckDB is found locally (e.g.,
./duckdb) but not on PATH: Note it and suggest adding to PATH
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 34 lines · 19 tokens per session scan C 1de8bb61d36e
detect is a command published in the GitHub repository yharby/duckdb-skill (7 stars, last pushed 5mo ago), licensed MIT. It adds 19 tokens to every session and 562 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
notebook-query
Query the notebook knowledge base (SQLite) built by /agy:notebook — precise, grounded, cited. Ask in natural language ("sum the amounts by category", "which docs mention 'Acme Corp'", "build a project timeline") or pass raw SQL. Read-only. Use this when you need exact aggregates/lookups across a document corpus…
database-setup
Use when a project needs to store data and has no database yet. Setting up Supabase, creating tables, writing queries, and connecting them to the frontend. Written for designers.
ingest
Manually add knowledge to the Weaviate store.
integrate
/forge:integrate is the integration assistant for connecting your project to external services. It covers version control (GitHub, GitLab), monitoring (Sentry, Datadog), communication (Slack, Discord), databases (PostgreSQL, Redis, MongoDB), and cloud platforms (AWS, GCP, Vercel, Netlify). For each service, it checks…
db-reviewer
Reviews Postgres/Supabase schema, migrations, queries, and RLS for safety and performance. Use when DB code changes, before applying a migration, or inside /...
symfony-migrations
Create and manage Doctrine migrations for database schema changes.