Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
/plugin marketplace add nealcaren/social-data-analysisnpx agentmods add plugins/nealcaren/social-data-analysis/methods-writergit clone --depth 1 https://github.com/nealcaren/social-data-analysisGrade A, and why
methods-writer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "methods-writer",
"version": "1.0.0",
"description": "Draft Methods sections for interview-based sociology articles. Three pathways (Efficient/Standard/Detailed) based on analysis of 80 Social Problems/Social Forces articles.",
"skills": "./skills/"
}
What it installs
The manifest is a name and a version. 1 skill travel with it, and installing the plugin installs all of them — 37 tokens a session between them. Each is measured on its own page, and each can be installed alone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 7 lines scan A 07e4f59de357
methods-writer is a plugin published in the GitHub repository nealcaren/social-data-analysis (84 stars, last pushed 4d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other plugins, from other repositories
siza
Sabela notebook pairing skill — a typed compiled client (list, read, run, edit cells; pre-flight parse + security scan; provenance) over the Sabela AI bridge, plus an MCP stdio server (siza mcp) for any MCP client.
protein-design-skills marketplace
Claude Code skills for computational protein design - backbone generation, sequence design, structure prediction, and experimental validation.
hypha
Hypha is the AI agent of the Mycelium ecosystem: a connecting filament between engineers and the SysML v2 specification. Provides skills and subagents for KerML/SysML v2 metamodel lookup, standard model library lookup, normative spec citation, and SysML v2 textual-notation validation.
ar
ar — autoresearch: a skill-only autonomous experiment loop. Propose → measure → keep winners → repeat, against any numeric objective, with noise-floor gating so nothing is banked on noise. Five skills: /ar:start opens a run (dedicated branch + baseline noise floor), /ar:resume advances it, /ar:status prints read-only…
earthquake-mcp-server
Search USGS and EMSC seismic data — real-time feeds, event queries, and earthquake counts via MCP. STDIO or Streamable HTTP.
academic-research
Academic research toolkit for AI PhD researchers — literature survey, paper reviewing, citation management, and more.