Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add anistark/sutras --skill sutrasgit clone --depth 1 https://github.com/anistark/sutrasWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/anistark/sutras/sutras)<a href="https://agentmods.dev/skills/anistark/sutras/sutras"><img src="https://agentmods.dev/badge/skills/anistark/sutras/sutras.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00072 | $0.01400 |
| Opus 5 | $0.00036 | $0.00700 |
| Sonnet 5 | $0.00014 | $0.00280 |
| Haiku 4.5 | $0.00007 | $0.00140 |
Grade A, and why
sutras scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 180 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sutras — Skill Development Toolkit
Sutras is a CLI for the full lifecycle of Anthropic Agent Skills: scaffolding, validation, testing, evaluation, packaging, and distribution.
Command Reference
sutras build <name>
Build a distributable package for a skill.
--output/-o: Output directory for the package (default: ./dist)
--no-validate (flag): Skip validation before building
sutras completion <shell>
Generate shell completion script.
sutras docs <name>
Generate documentation for a skill.
--output/-o: Output file or directory (default: print to stdout)
--no-supporting (flag): Exclude supporting file contents (examples.md, etc.)
sutras eval <name>
Evaluate a skill using configured metrics.
--verbose/-v (flag): Enable verbose evaluation output
--no-history (flag): Don't save evaluation results to history
--show-history (flag): Show evaluation history for this skill
sutras info <name>
Show detailed information about a skill.
sutras install <source>
Install a skill from various sources.
--version/-v: Specific version (for registry installs)
--registry/-r: Registry to install from (for registry installs)
sutras list
List available skills.
--local (flag): Include project skills from .claude/skills/
--global (flag): Include global skills from ~/.claude/skills/
sutras new [name]
Create a new skill with proper structure.
--description/-d: Skill description (what it does and when to use it)
--author/-a: Skill author name
--template/-t: Template to use (run with --list-templates to see options)
--list-templates (flag): List available skill templates
--global (flag): Create in global skills directory (~/.claude/skills/)
sutras publish [skill_path]
Publish a skill to a registry.
--registry/-r: Registry to publish to (default: default registry)
--pr (flag): Use pull request workflow instead of direct push
--build-dir/-b: Custom build directory
sutras registry add <name> <url>
Add a new registry.
--namespace/-n: Default namespace for this registry
--auth-token/-t: Authentication token
--priority/-p: Registry priority (higher = checked first)
--default (flag): Set as default registry
sutras registry build-index <registry_path>
Generate index.yaml for a local registry.
--output/-o: Output path for index.yaml (default: <registry_path>/index.yaml)
sutras registry list
List configured registries.
sutras registry remove <name>
Remove a registry.
sutras registry update [name]
Update cached registry indexes.
--all (flag): Update all registries
sutras setup
Install the sutras skill into Claude Code's global skills directory.
--check (flag): Show what would be installed without making changes
--uninstall (flag): Remove the sutras skill from Claude Code
sutras test <name>
Run tests for a skill.
--verbose/-v (flag): Enable verbose test output
--fail-fast/-x (flag): Stop on first test failure
sutras uninstall <skill_name>
Uninstall a skill.
--version/-v: Specific version to uninstall (default: all versions)
sutras update
Check for updates and upgrade sutras to the latest version.
--version/-v: Update to a specific version (default: latest)
--check (flag): Only check if an update is available, don't install
--skip-pi (flag): Skip updating the pi extension
--skip-skill (flag): Skip refreshing the global skill (~/.claude/skills/sutras/)
sutras validate [target]
Validate a skill's structure and metadata.
--all (flag): Validate all skills discovered in the skills directory
--path: Skills directory to search (for --all), or a custom search path for a named skill
--strict (flag): Enable strict validation (warnings become errors)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 180 lines · 72 tokens per session scan A 0533b27d7ee4
sutras is a skill published in the GitHub repository anistark/sutras (5 stars, last pushed 4mo ago), licensed MIT. It adds 72 tokens to every session and 1,400 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
html-artifacts
Author the HTML for a plan artifact, dashboard iframe, or Slack attachment — structure, design plan, available runtime, theming, and craft. Read this before writing HTML for saveplan, outputiframe, or slackattachhtml.
bootstrap-repo-analysis
First-time analysis of a repository with no prior reviewer outcomes. Crawl historical merged-PR review feedback with the gh CLI (plus any preloaded samples), extract the team's review norms, and synthesize the initial per-repo review-style prompt. Use this for a cold-start repo; use continual-learning instead once the…
baby-sit
Monitor a GitHub pull request until CI is green, diagnose failures, and rerun only evidence-backed flaky GitHub Actions jobs.
continual-learning
Nightly refinement of an existing per-repo review-style prompt using this reviewer's own finding outcomes. Read confirmed (resolved-by-commit / thumbs-up) and dismissed (thumbs-down) findings, promote the bug patterns the team actually fixes, demote the false-positive patterns, reconcile against the current prompt…
aig-scanner
A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard. Uses built-in exec + Python script, no plugin required. Requires AIGBASEURL to be configured. Triggers on: scan AI service, AI vulnerability scan, scan AI infra…
Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and…