Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/3awny/qshipnpx agentmods add skills/3awny/qship/qspinuplocalWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/3awny/qship/qspinuplocal)<a href="https://agentmods.dev/skills/3awny/qship/qspinuplocal"><img src="https://agentmods.dev/badge/skills/3awny/qship/qspinuplocal/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/3awny/qship/qspinuplocal"><img src="https://agentmods.dev/badge/skills/3awny/qship/qspinuplocal.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00043 | $0.03514 |
| Opus 5 | $0.00022 | $0.01757 |
| Sonnet 5 | $0.00009 | $0.00703 |
| Haiku 4.5 | $0.00004 | $0.00351 |
Grade A, and why
qspinuplocal scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
# Shared contract so /qe2etest, /qmanualt, curl smoke checks all hit the same port. How it starts
The opening of the file, as written. The whole thing — 232 lines — stays where its author put it; the contents beside it link to each section on GitHub.
qspinuplocal — Spin Up the Local Stack
Starts your primary repo's service against a local Postgres database so /qe2etest and /qmanualt have a real (not mocked) target to drive.
Scope — read this first. Local-stack spin-up is the single most stack-specific thing in qship: every codebase starts differently (uvicorn, gunicorn,
manage.py runserver,npm run dev,docker compose up, a Procfile, a Makefile target). This skill therefore does the portable parts well — DB existence check, port-collision handling, theload_dotenv(override=True)footgun, worktree.envsafety, a sharedports.envcontract for downstream skills — and starts one service (your primary repo, resolved from$SKILLS_ROOT/qship/repos.json). If you run multiple services locally (a worker, a sibling API, a separate frontend), start those the same way or adapt the Step 5 start command. Treat the bash below as a reference recipe, not a turnkey generic orchestrator.
Input: $ARGUMENTS
--db-name <db>— local Postgres DB to start against (default:{{LOCAL_DEV_DB_NAME}}). Must already exist — clone via/qlocalclonedbfirst if your project supports it.--tenant-uuid <uuid>— optionalDEV_TENANT_IDto inject (multi-tenant apps); if omitted, looked up from<db>.app.account_registrywhen that table exists.--worktree <path>— the checkout to run against. Defaults to an auto-detected worktree under{{STATE_ROOT}}/worktrees/<TICKET>/, else refuses the maintree unless--allow-maintree.--start-cmd "<cmd>"— override the service start command (default tries the project's configured runner).--port <n>— preferred port (default8000, with a collision-fallback ladder).--worker— also start a background worker process if your stack has one (best-effort).
Resolve the target repo
REPO_NAME="$(jq -r '(.[] | select(.is_primary==true) | .name) // .[0].name' "$SKILLS_ROOT/qship/repos.json")"
REPO_SCHEMA="$(jq -r '(.[] | select(.is_primary==true) | .schema) // .[0].schema // "public"' "$SKILLS_ROOT/qship/repos.json")"
REPO_PORT="$(jq -r '(.[] | select(.is_primary==true) | .port) // .[0].port // 8000' "$SKILLS_ROOT/qship/repos.json")"
echo "Primary repo: $REPO_NAME (schema=$REPO_SCHEMA, default port=$REPO_PORT)"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 232 lines · 43 tokens per session scan A 100dcb6cb2ce
qspinuplocal is a skill published in the GitHub repository 3awny/qship (2 stars, last pushed 2mo ago), licensed MIT. It adds 43 tokens to every session and 3,514 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
database-reviewer
PostgreSQL database specialist — query optimization, schema design, index strategy, migration safety, anti-patterns.
postgresql-optimization
PostgreSQL optimization — query tuning, indexing strategies, EXPLAIN analysis, configuration, maintenance, and monitoring. Use when slow queries, missing indexes, vacuum lag, or performance bottlenecks are suspected.
db-patterns
SocialApp database patterns — pgx usage, migrations, repository layer, transactions, common queries.
database-standards
PostgreSQL database standards for migrations, seeds, and schema management.
database-scaffolding
Scaffolds PostgreSQL database component with migrations, seeds, and management scripts.
postgresql
PostgreSQL database agent: deploy locally (Docker/K8s), manage schemas, run queries, analyze performance, configure permissions, and seed data.