Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add agentpipe/pipebuilder --skill portablegit clone --depth 1 https://github.com/agentpipe/pipebuilderWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/agentpipe/pipebuilder/portable)<a href="https://agentmods.dev/skills/agentpipe/pipebuilder/portable"><img src="https://agentmods.dev/badge/skills/agentpipe/pipebuilder/portable/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/agentpipe/pipebuilder/portable"><img src="https://agentmods.dev/badge/skills/agentpipe/pipebuilder/portable.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00011 | $0.00037 |
| Opus 5.5 | $0.00004 | $0.00015 |
| Sonnet 5.5 | $0.00002 | $0.00007 |
| Haiku 4.5 | $0.00001 | $0.00004 |
Grade A, and why
portable scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
GOLDEN_PORTABLE_SKILL_BODY
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- .hidden-metadata 23 B
- .pipe-agents/claude-code/.claude/rules/golden.md 25 B
- .pipe-agents/codebuddy/.codebuddy/agents/golden-review.md 91 B
- .pipe-agents/codex/.codex/rules/golden.rules 61 B
- .pipe-agents/codex/AGENTS.md 28 B
- .pipe-agents/cursor/.cursor/commands/golden-check.md 28 B
- references/reference.md 26 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 10 lines · 11 tokens per session scan A 2534fb88b880
portable is a skill published in the GitHub repository agentpipe/pipebuilder (3 stars, last pushed 2mo ago), licensed MIT. It adds 11 tokens to every session and 37 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
hotwire-native-bridge
Create and validate Strada / Hotwire Native bridge components across web (Stimulus), iOS (Swift), and Android (Kotlin). Use when adding native UI driven by the web — a native menu, share button, toolbar, native form submit — to a Hotwire Native app, or when a bridge component "works on web but not in the app", a…
hotwire-native-path-config
Author and validate Hotwire Native path configuration (the JSON that drives native push/replace/modal/tab navigation on iOS + Android), and the Rails-side turbonativeapp? + request-variant setup. Use when a native screen opens with the wrong presentation (pushed instead of modal, doesn't switch tabs), when adding a…
rails-token-auth
Build secure DB-backed token session auth in Rails — one mechanism for web, Action Cable, and Hotwire Native, with Current attributes and secure-by-default controller concerns. Use when adding login/sessions to a Rails app, when web and native clients need to share authentication, when you need revocable server-side…
turbo-frames-patterns
Scope navigation to a region with Turbo Frames correctly, and catch the wiring mistakes that fail silently. Use when adding a turboframetag (a turbo-frame element), driving a frame from an outside link/form, lazy-loading a panel (src + loading: :lazy), inline-editing a row, or debugging a frame that does nothing / a…
turbo-morphing
Apply Turbo 8 page refreshes with morphing and broadcast refreshes correctly, and avoid the morphing footguns. Use when adding smooth page refreshes (turborefresheswith / turbo-refresh-method morph), broadcasting live updates with broadcastsrefreshes, deciding between morph-refresh vs targeted Turbo Streams vs frames…
rails-8-upgrade
Upgrade a Rails 7 app to Rails 8 safely, and catch the subtle test-suite flake it introduces. Use when bumping Rails 7.x to 8.x (or auditing readiness), when planning a Ruby/Rails version bump, or when Rails 8 tests fail intermittently with "undefined method 'loginpath'/'rootpath'" / pass on serial but flake on…