Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ai-ecoverse/slicc --skill sprinklesgit clone --depth 1 https://github.com/ai-ecoverse/sliccWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ai-ecoverse/slicc/sprinkles)<a href="https://agentmods.dev/skills/ai-ecoverse/slicc/sprinkles"><img src="https://agentmods.dev/badge/skills/ai-ecoverse/slicc/sprinkles/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ai-ecoverse/slicc/sprinkles"><img src="https://agentmods.dev/badge/skills/ai-ecoverse/slicc/sprinkles.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 285 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00112 | $0.06908 |
| Opus 5 | $0.00056 | $0.03454 |
| Sonnet 5 | $0.00022 | $0.01382 |
| Haiku 4.5 | $0.00011 | $0.00691 |
Grade A, and why
sprinkles scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
result=$(agent "$TMPDIR" "curl,jq" "Look up '$Q' in <api>, return the price.") How it starts
The opening of the file, as written. The whole thing — 412 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sprinkles
.shtml files in /shared/sprinkles/ become interactive UI panels. Use them for dashboards, forms, and visualizations that persist alongside the chat.
Two rendering modes
- Fragment mode (default): plain HTML fragments injected into the sidebar. Do NOT use
<!DOCTYPE html>,<html>,<head>,<body>, or custom CSS — use the built-in.sprinkle-*classes. Scripts get asliccbridge object automatically. - Full-document mode: complete HTML documents (starting with
<!DOCTYPE html>or<html>) render inside sandboxed iframes. Use this for complex layouts with custom CSS, sidebars, split panes, modals, or canvas/SVG visualizations. The bridge script is auto-injected —window.sliccandwindow.bridgeare available. The parent page's S2 theme tokens are injected automatically.
Pick full-document mode when you need custom CSS beyond .sprinkle-* classes, complex layouts (sidebar + main, split panes, tabs), or interactive canvas/SVG.
Light & dark mode
Theming is automatic. The parent injects its S2 tokens into every sprinkle and toggles a .theme-light class on the sprinkle root — the iframe's <html> in full-document mode, or the outermost container injected into the sidebar in fragment mode — whenever the user flips the parent theme. All var(--s2-*) tokens swap in lockstep. Never hard-code colors for one theme.
- Use S2 tokens (
var(--s2-content-default),var(--s2-bg-layer-2), etc.) for everything — seestyle-guide.mdfor the full reference. - For one-off colors not covered by an S2 token, use CSS
light-dark(<light>, <dark>)and setcolor-scheme: light darkon an ancestor (the root in full-document mode, the outermost container in fragment mode).light-dark()returns the dark value only whencolor-schemeis set. This intentionally follows the user's OScolor-schemepreference for one-off custom colors; S2 tokens still track the parent app's class-based theme toggle in lockstep. - Do NOT use
@media (prefers-color-scheme: ...)to swap colors that should mirror the parent app's theme. The parent's theme toggle is a class on the sprinkle root, not the OS preference, so media queries desync from the actual app theme. Use S2 tokens (class-driven) orlight-dark()(OS-driven, for one-off custom colors only) instead.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +20 lines 60255549a6d3
- 3d ago First seen · 392 lines · 112 tokens per session scan A 45f153aa03e1
sprinkles is a skill published in the GitHub repository ai-ecoverse/slicc (30 stars, last pushed today), licensed Apache-2.0. It adds 112 tokens to every session and 6,908 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
frontend-design
Use when building a new web interface or reshaping an existing one. Guides distinctive visual direction, typography, layout, motion, and interface copy without falling back to templated AI design.
frontend-design
Use this skill for work a user will see rendered: websites, landing pages, dashboards, web applications, interface components, style overhauls, and requests to make an interface look better. It classifies the surface as expressive, conventional, or governed by an existing design system, then commits to palette…
pixel-perfect-web-replica
Recreate public frontend pages locally with high visual fidelity. Use when the user asks Codex or Claude Code to pixel-perfect clone, mirror, study, sandbox, reproduce, or locally run a public website/page; capture its static assets; preserve layout, scroll animations, media, typography, and interactions; compare…
ui-ux-polish
Iterative UI/UX polishing workflow for web applications. Achieve Stripe-level visual polish through multiple passes — each iteration adds incremental improvements that compound dramatically. Use when: polish UI, improve UX, make it look better, Stripe-level, world-class design, desktop and mobile optimization, visual…
tweaks
Wrap any HTML artifact with a side panel of live, parameterized controls — accent color, type scale, density, motion, theme — that rewrite CSS custom properties in real time and persist to localStorage. Lets the user explore variants of a design without re-prompting the agent. Use when the brief asks for "variants"…
velar-luxury-real-estate
Use this plugin when the user wants a high-end luxury real-estate / architecture landing page with cinematic scroll choreography: a typewriter preloader that lifts away, a scroll-driven house image that rises from below and scales up while pinning to a dark statement section, a sticky dark stats band with count-up…