Borrowing it
Nothing to install: this file belongs to AI-Riksarkivet/ra-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/AI-Riksarkivet/ra-mcp/main/.claude/skills/zensical-setup/SKILL.mdgit clone --depth 1 https://github.com/AI-Riksarkivet/ra-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ai-riksarkivet/ra-mcp/zensical-setup)<a href="https://agentmods.dev/skills/ai-riksarkivet/ra-mcp/zensical-setup"><img src="https://agentmods.dev/badge/skills/ai-riksarkivet/ra-mcp/zensical-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ai-riksarkivet/ra-mcp/zensical-setup"><img src="https://agentmods.dev/badge/skills/ai-riksarkivet/ra-mcp/zensical-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high YARA Match · line 3 YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).Fix: Remove offensive tool references and exploit code. Legitimate agent skills should not contain penetration testing tools, exploit frameworks, or reconnaissance utilities.
- high Prompt Injection · line 368 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00077 | $0.03870 |
| Opus 5 | $0.00039 | $0.01935 |
| Sonnet 5 | $0.00015 | $0.00774 |
| Haiku 4.5 | $0.00008 | $0.00387 |
Grade A, and why
zensical-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 662 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Zensical Site Setup & Configuration
Zensical is a modern static site generator for project documentation, built by
the creators of Material for MkDocs. It uses TOML configuration (zensical.toml)
and supports mkdocs.yml for migration. This skill covers installation,
configuration, theming, navigation, deployment, and customization.
Quick Start
# Install
python3 -m venv .venv && source .venv/bin/activate && pip install zensical
# Or with uv:
uv init && uv add --dev zensical
# Create project
zensical new .
# Preview
zensical serve
# Build
zensical build
Generated structure:
.
├─ .github/ # GitHub Actions workflow
├─ docs/
│ ├─ index.md
│ └─ markdown.md
└─ zensical.toml
Configuration File
Zensical uses zensical.toml (recommended) or mkdocs.yml (for migration).
All settings live under the [project] scope.
Essential Settings
[project]
site_name = "My Site" # Required
site_url = "https://example.com" # Strongly recommended
site_description = "Project docs" # For HTML meta
site_author = "Jane Doe" # For HTML meta
copyright = "© 2025 Jane Doe" # Footer copyright
docs_dir = "docs" # Source directory (default)
site_dir = "site" # Output directory (default)
use_directory_urls = true # Pretty URLs (default)
dev_addr = "localhost:7860" # Dev server address (default)
Theme Variant
Two variants: modern (default, fresh design) and classic (matches Material for MkDocs).
[project.theme]
variant = "classic" # Use "classic" for Material for MkDocs look
Navigation
Automatic Navigation
By default, Zensical generates navigation from the folder structure.
Explicit Navigation
[project]
nav = [
{ "Home" = "index.md" },
{ "About" = [
"about/index.md",
"about/vision.md",
"about/team.md"
]},
{ "GitHub Repo" = "https://github.com/org/repo" } # External links
]
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 662 lines · 77 tokens per session scan A 9b053470cefe
zensical-setup is a skill published in the GitHub repository AI-Riksarkivet/ra-mcp (23 stars, last pushed today), licensed Apache-2.0. It adds 77 tokens to every session and 3,870 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
frontmcp-development
Use when building any FrontMCP server component other than a tool (for tools, use create-tool). Covers @Resource static resources and parameterized URI templates; @Prompt reusable prompts (RAG, multi-turn); @Provider singleton dependency-injection providers (database pools, API clients); @Agent autonomous LLM agents…
frontend-design
Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, artifacts, posters, or applications (examples include websites, landing pages, dashboards, React components, HTML/CSS layouts, or when styling/beautifying any web UI).…
artifacts-builder
Suite of tools for creating elaborate, multi-component AI artifacts viewer HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
web-artifacts-builder
Suite of tools for creating elaborate, multi-component HTML applications using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - Bundles into a single HTML file for preview.
next-best-practices
Next.js best practices - file conventions, RSC boundaries, data patterns, async APIs, metadata, error handling, route handlers, image/font optimization, bundling.
a11y-debugging
Uses Chrome DevTools MCP for accessibility (a11y) debugging and auditing based on web.dev guidelines. Use when testing semantic HTML, ARIA labels, focus states, keyboard navigation, tap targets, and color contrast.