Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/11philip22/api-mapper-skill/api-mappernpx skills add 11philip22/api-mapper-skill --skill api-mappergit clone --depth 1 https://github.com/11philip22/api-mapper-skillWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00177 | $0.01088 |
| Opus 5 | $0.00088 | $0.00544 |
| Sonnet 5 | $0.00035 | $0.00218 |
| Haiku 4.5 | $0.00018 | $0.00109 |
Grade A, and why
api-mapper scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Reverse-engineer undocumented APIs using Chrome CDP and curl. Controls a real Chrome browser via The source is not reproduced here
No licence file
A repository with no LICENSE is all rights reserved by default, so the body is not copied here. The metadata, the measurements and the link are.
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 127 lines · 177 tokens per session scan A 85acae94d044
api-mapper is a skill published in the GitHub repository 11philip22/api-mapper-skill (7 stars, last pushed 9d ago), with no licence file. It adds 177 tokens to every session and 1,088 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
browser-gui-inspect
Controller-agnostic browser automation and inspection — navigate, read, click, fill, and capture network traffic on any web GUI using a persistent, manually-authenticated Chrome profile. Use to (1) pull a GUI-only report a vendor's REST API doesn't expose, (2) discover the undocumented API behind a dashboard feature…
api-skill-builder
根据用户需求，通过逆向网页API生成可复用的API取数Skill。适用于：图表数据（Canvas/ECharts/G2等前端渲染的图表）、需要登录态的平台数据、任何通过浏览器能看到但DOM中无法直接提取的数据。核心方法：鉴权探测决定架构 → 找到API endpoint → 逆向请求参数 → 验证数据 → 生成标准化Skill。.
ManoBrowser
Your hands in the user's real browser. Operate the user's own Chrome with their logged-in sessions — extract data behind login walls, reverse-engineer website APIs into reusable skills, and automate any browser workflow. Use when you need login-required data extraction, API reverse engineering, browser automation, or…
chrome-workflow-build
支持双模式生成浏览器自动化Skill：模式1-使用chrome-server MCP工具执行浏览器操作并从成功执行中生成可复用Skill；模式2-将DATASAVER录制工作流.json文件转换为可复用Skill。适用场景：1.自动化重复的浏览器任务（社交媒体发帖、网页抓取、表单填写）2.从浏览器自动化中创建可复用的工作流 3.为特定网站平台操作构建自定义Skill 4.将DATASAVER录制的浏览器操作转换为Claude Skill。.
platform-data-explorer
通用平台探索 Skill。使用 DataSaver Chrome MCP 工具对目标平台（URL/页面/模块）进行系统性探索，发现该平台可以做哪些用户操作类和数据提取类 Skill，输出 Skill 提案清单供用户确认，确认后按类型分流创建：API取数类调用 api-skill-builder，浏览器操作类调用 chrome-workflow-build。.
web-data-extractor
此skill通过执行内联的 DOM 提取脚本，从网页中提取结构化数据。通过以下流程：.