Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/twells89/sigma-skillsnpx agentmods add rules/twells89/sigma-skills/sigma-reportsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/twells89/sigma-skills/sigma-reports)<a href="https://agentmods.dev/rules/twells89/sigma-skills/sigma-reports"><img src="https://agentmods.dev/badge/rules/twells89/sigma-skills/sigma-reports/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/twells89/sigma-skills/sigma-reports"><img src="https://agentmods.dev/badge/rules/twells89/sigma-skills/sigma-reports.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00114 | $0.04148 |
| Opus 5.5 | $0.00046 | $0.01659 |
| Sonnet 5.5 | $0.00023 | $0.00830 |
| Haiku 4.5 | $0.00011 | $0.00415 |
Grade A, and why
sigma-reports scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sfL \ How it starts
The opening of the file, as written. The whole thing — 348 lines — stays where its author put it; the contents beside it link to each section on GitHub.
sigma-reports
Build, validate, retrieve, and safely update Sigma report code representations through /v2/reports/spec. Use for fixed-layout or pixel-perfect reports, executive board packets, wide operational tables, invoices, statements, regulatory documents, PDF delivery, and bursting one copy per store/account/recipient. Covers reusable report scaffolds, report pages, absolute pixel layout, header/footer panels, common elements, verification, full-document replacement, and workbook conversion to reports. Do not use for responsive dashboards; use sigma-workbooks instead. Requires SIGMA_API_TOKEN from the sigma-api skill.
Installed runtime
When installed with scripts/install-into-project.sh, the complete runnable
skill is copied to <project>/.sigma-skills/sigma-reports/ (project install) or
~/.sigma-skills/sigma-reports/ (global install). Resolve every relative
scripts/, reference/, refs/, and docs/ path below from that runtime
directory; cd there before running a command. The installer also copies
sigma-api beside skills that need authentication.
Sigma Reports (Code Representation via REST API)
Use this skill for Sigma reports, the fixed-page authoring surface exposed
by /v2/reports/spec. Reports are a private-beta resource. They share common
element shapes with workbooks but have a different resource lifecycle and a
different layout language.
Choose the correct resource
Use a report for invoices, statements, regulatory packets, printable forms,
branded documents, and other outputs whose physical page size matters. Use
sigma-workbooks for responsive dashboards, exploratory analysis, application
workflows, containers, tabs, modals, drawers, or workbook navigation.
Never create a report by sending kind: report to a workbook endpoint. The
resource families are separate:
- Reports:
/v2/reports/spec,/v2/reports/{reportId}/spec - Workbooks:
/v2/workbooks/spec,/v2/workbooks/{workbookId}/spec - Conversion:
/v2/workbooks/{workbookId}/convertToReport
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · +20 lines · +9 tokens per session 34ddce7c8ec5
- 23d ago Changed · +1 lines 49c557fb1071
- 1mo ago Changed · +54 lines · +13 tokens per session a3e498a17943
- 1mo ago Changed · +11 lines 5d2d1cca4a1b
- 1mo ago Changed · +1 lines 6ea625d07e3c
- 1mo ago Changed · +27 lines a64eb5d23dd7
- 1mo ago First seen · 234 lines · 92 tokens per session scan A aea58ccef030
sigma-reports is a cursor rule published in the GitHub repository twells89/sigma-skills (16 stars, last pushed 9d ago), licensed Apache-2.0. It adds 114 tokens to every session and 4,148 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
sumatrapdf-official-toc
Official PDF TOC — a numbering gap means an item was dropped; salvage or reject, never skip the hole.
pro-deck-builder
Create polished HTML slide decks and PDF-ready documents for consulting deliverables. Uses the RRBC design system with warm light mode, dark mode cover pages, Lora/Inter/Roboto Mono typography, and data visualization palette. Trigger on 'deck', 'slides', 'presentation', 'pitch deck', 'keynote', 'report', or 'PDF'.
document-skills
A rule for handling academic papers, Nature-style editing, patents, software documentation, grant materials, presentations, and technical records. It says to choose an installed skill from the /.agents/skills folder and read its instructions first.
ponytail
Ponytail, lazy senior dev mode. Always pick the simplest solution that works.
angular-20
This rule provides comprehensive best practices and coding standards for Angular development, focusing on modern TypeScript, standalone components, signals, and performance optimizations.
dev-standard
Apache Superset development standards and guidelines for Cursor IDE.