Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/acedergren/oci-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/acedergren/oci-agent-skills/oci-skills)<a href="https://agentmods.dev/plugins/acedergren/oci-agent-skills/oci-skills"><img src="https://agentmods.dev/badge/plugins/acedergren/oci-agent-skills/oci-skills/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/acedergren/oci-agent-skills/oci-skills"><img src="https://agentmods.dev/badge/plugins/acedergren/oci-agent-skills/oci-skills.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
oci-skills scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "oci-skills",
"description": "Complete OCI automation skills covering compute, networking, databases, monitoring, secrets, GenAI, IAM, IaC, FinOps, and best practices",
"source": "./",
"strict": false,
"skills": [
"./skills/compute-management",
"./skills/networking-management",
"./skills/database-management",
"./skills/oracle-dba",
"./skills/monitoring-operations",
"./skills/secrets-management",
"./skills/genai-services",
"./skills/iam-identity-management",
"./skills/infrastructure-as-code",
"./skills/finops-cost-optimization",
"./skills/best-practices",
"./skills/landing-zones",
"./skills/oci-events"
]
}What it installs
The manifest is a name and a version. 13 skills travel with it, and installing the plugin installs all of them — 687 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill best-practices A 57 tokens
- Skill finops-cost-optimization A 57 tokens
- Skill genai-services A 58 tokens
- Skill landing-zones A 62 tokens
- Skill oracle-dba A 62 tokens
- Skill database-management A 48 tokens
- Skill iam-identity-management A 45 tokens
- Skill infrastructure-as-code A 52 tokens
- Skill networking-management A 59 tokens
- Skill oci-events A 54 tokens
- Skill secrets-management A 50 tokens
- Skill monitoring-operations A 40 tokens
- Skill compute-management C 43 tokens
What ships with it
1 file beside marketplace.json#oci-skills in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 21 lines scan A e169126d93aa
oci-skills is a plugin published in the GitHub repository acedergren/oci-agent-skills (20 stars, last pushed 4mo ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other plugins, from other repositories
dotnet-test
Skills for running, generating, analyzing, and improving .NET tests: test execution, filtering, platform detection, coverage, testability, and MSTest workflows.
bdd-dotnet
BDD-style unit testing patterns for domain handlers with in-memory database, TestDataBuilder pattern, fluent builders, and fake implementations - no mocking frameworks. Shown with NUnit examples; patterns apply to any testing framework.
ginkgo
Write, run, and debug Ginkgo/Gomega test suites in Go. Skills for the tree-construction mental model, spec authoring and cleanup, tables and generated specs, the full decorator reference, filtering, parallelism, ordered/flaky specs, timeouts and async, the CLI and CI configuration, reporting, and JSON-first failure…
affaan-m--everything-claude-code--swift-protocol-di-testing
Protocol-based dependency injection for testable Swift code — mock file system, network, and external APIs using focused protocols and Swift Testing.
pytest-best-practices
pytest async-first testing best practices — test layer structure, fixture design, async testing with pytest-asyncio, test data with factoryboy + faker, HTTP mocking with respx, time mocking with freezegun, property-based testing with hypothesis, DB transaction-rollback isolation, flush() pattern for chained fixtures.
nextjs
Official Next.js skills: adopt and optimize Cache Components, adopt Partial Prefetching, and verify runtime behavior against a running dev server.