Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add air-gapped/skills --skill vllm-gemma-4-31bgit clone --depth 1 https://github.com/air-gapped/skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/air-gapped/skills/vllm-gemma-4-31b)<a href="https://agentmods.dev/skills/air-gapped/skills/vllm-gemma-4-31b"><img src="https://agentmods.dev/badge/skills/air-gapped/skills/vllm-gemma-4-31b/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/air-gapped/skills/vllm-gemma-4-31b"><img src="https://agentmods.dev/badge/skills/air-gapped/skills/vllm-gemma-4-31b.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.07476 |
| Opus 5 | $0.00030 | $0.03738 |
| Sonnet 5 | $0.00012 | $0.01495 |
| Haiku 4.5 | $0.00006 | $0.00748 |
Grade A, and why
vllm-gemma-4-31b scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 483 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Gemma 4 31B on vLLM — operating-point reference
One model, measured. This is a worked operating point, not the general
method. The reusable machinery lives in the vllm plugin: flag and env
semantics in vllm-configuration, the K8s/container manifest in
vllm-deployment, reproducing or re-measuring these numbers in
vllm-benchmarking, and the prompt-side template in
vllm-chat-templates. Deploying a different model? Use those, not this.
For platform engineers deploying google/gemma-4-31B-it (BF16, FP8) or its
community quants (e.g. cyankiwi/gemma-4-31B-it-AWQ-4bit,
RedHatAI/*-Gemma-4-31B-*) on vLLM 0.20–0.25.1. Pulls together measurements
from a Verda 2× H100 SXM5 80GB audit on 2026-04-30 — taken on vLLM 0.20.0
and not re-run since (see references/bench-numbers.md; the shape of the
curves has held, but treat the absolute figures as 0.20.0 observations) — and
the upstream constraints that shape the answer.
Version ceiling (re-verified 2026-08-11): hold at vLLM 0.25.1. Do not take 0.26.0, 0.27.0 or 0.27.1. All three gemma-4-relevant regressions are still OPEN, and every fix PR for them is still unmerged, so neither 0.27.0 (2026-08-10) nor the 0.27.1 patch (2026-08-11 — a single change, #50424, scoped to
Qwen3DSparkModel, nothing Gemma) clears any of them: #49955 (trailing<turn|>leaked into output — not spec-decode-specific after all, see the pitfall below; fix PR #50964 open, and #50263 was tested by the reporter and did not fix it), #50477 (gemma4 parser silently ignores named forcedtool_choice; a second reporter extends it totool_choice: "required", which returnsfinish_reason: "tool_calls"with prose incontentandtool_calls: null— fix PR #51524 open), #50159 (Model Runner V2 over-reports available KV → CUDA OOM under saturating load; crashes earlier with EAGLE — no fix PR at all). Two independent A/B runs on #50159 now localise it: the gap is CUDA-graph capture headroom, not KV capacity. MRv1 reserves ~0.65 GiB for capture where MRv2 reserves ~0.12 GiB, and the whole discrepancy disappears under--enforce-eager. Severity scales with model size and inversely with card size.The one thing 0.27.0 does add for this model is the ViT CUDA graph (#46837, merged 2026-07-25, listed in the v0.27.0 release notes): full
SupportsEncoderCudaGraphforGemma4ForConditionalGeneration, making the vision encoder 100% statically compiled by replacing the pooler's data-dependent slicing with a fixed-shape gather. Relevant only to multimodal traffic, and not worth taking the three regressions for — re-evaluate when #49955 and #50159 close.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 483 lines · 60 tokens per session scan A 3ac61e868b82
vllm-gemma-4-31b is a skill published in the GitHub repository air-gapped/skills (5 stars, last pushed 9d ago), licensed MIT. It adds 60 tokens to every session and 7,476 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
stripe-projects
Provision SaaS services + sync creds via Stripe Projects.
aws-patterns
Lambda best practices, S3 event patterns, SQS/SNS fanout, and DynamoDB access patterns for serverless AWS architectures.
azure-patterns
Azure Functions, Cosmos DB modeling, Service Bus patterns, Bicep templates.
multi-tenant-architecture
Designs tenant isolation, hostname routing, custom-domain lifecycle, and plan limits on Cloudflare or Vercel. Use when asked to "isolate tenant data", "support custom domains", "build a white-label platform", or assess PSL registration. For general module structure use codebase-architecture; for SEO content use seo.
event-driven-architecture
Kafka, RabbitMQ, SQS/SNS, event sourcing, CQRS, saga patterns, dead letter queues, and idempotency. Use when designing asynchronous systems, implementing message-driven workflows, or building event streaming pipelines.
foundations-distributed-systems
Distributed-systems primitives for CAP/PACELC, FLP, Paxos, Raft, clocks, CRDTs, leases, quorums, and broadcast protocols. Use when designing coordination.