Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/air-gapped/skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/air-gapped/skills/sglang)<a href="https://agentmods.dev/plugins/air-gapped/skills/sglang"><img src="https://agentmods.dev/badge/plugins/air-gapped/skills/sglang/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/air-gapped/skills/sglang"><img src="https://agentmods.dev/badge/plugins/air-gapped/skills/sglang.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
sglang scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 24d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "sglang",
"source": "./",
"description": "SGLang operator reference suite — HiCache (three-tier hierarchical prefix cache: GPU HBM → host DRAM → distributed L3 via Mooncake/3FS/NIXL/AIBrix/EIC/SiMM/file/LMCache) and the SGLang Model Gateway (`sgl-model-gateway`, formerly `sgl-router`) — Rust router fronting vLLM/SGLang inference workers on Kubernetes with cache-aware/prefix-hash/consistent-hash routing, K8s label-selector service discovery, PD-disaggregation, and `--enable-mesh` CRDT sync between gateway replicas. Pairs with the `vllm` suite for vLLM-side reference and `inference-cache` for engine-agnostic KV-cache transport.",
"version": "0.20260922.35",
"author": {
"name": "Jörgen"
},
"license": "MIT",
"skills": [
"./.claude/skills/sglang-hicache",
"./.claude/skills/sglang-model-gateway"
],
"strict": false,
"category": "inference",
"tags": [
"sglang",
"llm",
"inference",
"kubernetes",
"router",
"model-gateway",
"kv-cache",
"hicache",
"cache-aware",
"prefix-caching"
]
}What it installs
The manifest is a name and a version. 2 skills travel with it, and installing the plugin installs all of them — 383 tokens a session between them. Each is measured on its own page, and each can be installed alone.
What ships with it
1 file beside marketplace.json#sglang in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 24d ago Changed 843b4d857110
- 1mo ago Changed bc4ac78e84ff
- 1mo ago Changed afaebcc67e1a
- 1mo ago First seen · 28 lines scan A f3674f5650d7
sglang is a plugin published in the GitHub repository air-gapped/skills (5 stars, last pushed 2d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other plugins, from other repositories
data-validation-suite
Schema validation, data quality monitoring, streaming validation pipelines, and input validation for backend APIs.
python-dev
Python development workflow with architecture design, coding guidelines, testing patterns, and specialized review agents.
branch-recap
Tells you what your branch actually changed — what was done, why, and what deserves a second look, instead of the diff — then files the fixes into the commits they belong to.
site-forge
Build a distinctive, production-grade website (and optional Remotion promo video) for any business, product, or person, then deploy it free. Two modes: auto (fast, autonomous) and full (best quality).
jina-image-search
Find and scrape web images via Jina AI (search + reader). Bring your own free JINAAPIKEY; Reader also works keyless.
data-engineering-skills
Data architecture, streaming pipelines, transformations, SQL optimization, and performance engineering.