Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add plugins/devexpress/agent-skills/marketplace/plugin marketplace add DevExpress/agent-skillsgit clone --depth 1 https://github.com/DevExpress/agent-skillsGrade A, and why
DevExpress-agent-skills scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 46 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "DevExpress-agent-skills",
"description": "AI agent skills for DevExpress products — DevExtreme (JavaScript/Angular/React/Vue/jQuery), Blazor Components, WPF Controls, DevExpress Reports, Office & PDF File API, and XAF. Each skill encodes correct APIs, import paths, and ready-to-run code examples to help GitHub Copilot, Claude Code, and other AI assistants generate accurate DevExpress code.",
"owner": {
"name": "DevExpress",
"email": "[email protected]"
},
"plugins": [
{
"name": "dx-blazor",
"source": "./plugins/dx-blazor",
"description": "DevExpress Blazor skills: AI Chat, charts, gauges, Grid, Treelist, Pivot Table, Scheduler, Combo Box, Ribbon, and Toolbar."
},
{
"name": "dx-devextreme",
"source": "./plugins/dx-devextreme",
"description": "DevExtreme JavaScript UI skills: DataGrid, Scheduler, Form, Chat, Button, SelectBox, DateBox, CheckBox, NumberBox, TextBox, TextArea, DataSource, and Theming for Angular, React, Vue, and jQuery."
},
{
"name": "dx-office-file-api",
"source": "./plugins/dx-office-file-api",
"description": "DevExpress Office File API skills: Spreadsheet, Word Processing, legacy PDF, new PDF (CTP), Presentation, Barcode, Unit Conversion, Excel Export, Zip, and AI-Powered Extensions for headless .NET document automation."
},
{
"name": "dx-reporting",
"source": "./plugins/dx-reporting",
"description": "DevExpress XtraReports skills for .NET, ASP.NET Core, Blazor, and Visual Studio designer code patterns: runtime report creation, web viewer/designer integration, safe *.Designer.cs edits, report storage, customization, and export (PDF, XLSX, DOCX, and more)."
},
{
"name": "dx-winforms",
"source": "./plugins/dx-winforms",
"description": "DevExpress WinForms skills: Data Grid, Tree List, Pivot Grid, Property Grid, Charts, Scheduler, AI Chat, Data Editors, LoadiWhat this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 46 lines scan A 53fa69d1b96f
DevExpress-agent-skills is a plugin published in the GitHub repository DevExpress/agent-skills (48 stars, last pushed 14d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
sagemaker-ai
Build, train, and deploy AI models with deep AWS AI/ML expertise brought directly into your coding assistants, covering the surface area of Amazon SageMaker AI.
telnyx
Plugin marketplace listing 11 plugins: telnyx-whatsapp, telnyx-voice, telnyx-messaging, telnyx-email, telnyx-tts.
telnyx-ai
Telnyx AI — LLM inference, chat completions, embeddings, AI assistants, conversation insights.
oculpm
Plugin marketplace listing 1 plugin: oculpm.
cc-market
Plugin marketplace listing 4 plugins: demo-one, demo-two, demo-three, external-one.
cc-commands
CC command and agent compat fixture.