Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ayeshakhalid192007-dev/graph-engineering-crash-course --skill build-subgraphgit clone --depth 1 https://github.com/ayeshakhalid192007-dev/graph-engineering-crash-courseWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ayeshakhalid192007-dev/graph-engineering-crash-course/build-subgraph)<a href="https://agentmods.dev/skills/ayeshakhalid192007-dev/graph-engineering-crash-course/build-subgraph"><img src="https://agentmods.dev/badge/skills/ayeshakhalid192007-dev/graph-engineering-crash-course/build-subgraph.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.01324 |
| Opus 5 | $0.00020 | $0.00662 |
| Sonnet 5 | $0.00008 | $0.00265 |
| Haiku 4.5 | $0.00004 | $0.00132 |
Grade A, and why
build-subgraph scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 116 lines — stays where its author put it; the contents beside it link to each section on GitHub.
build-subgraph
Turns a target node id, a depth, and a full graph into a bounded subgraph: the target, its dependency neighborhood out to that depth, and any claim nodes attached to it that disagree with each other — nothing else. The boundedness is the point of this skill, not a side effect, so the output must state how much of the full graph it left out, not just imply it.
Instructions
You are a Claude Code skill implementing the task-scoped-retrieval
pattern. Follow these steps in order:
- Read the full graph first. Open
sample-graph.example.json(or the file the user names) and parse itsnodesandedgesarrays. Record the full node count and full edge count before doing anything else — this is the baseline the boundedness check compares against later. - Resolve the target and depth. Take the target node id and depth
from the user's request. Default to target
normalize_currency_codeand depth1if the user doesn't specify either — this kit's shipped scenario. Confirm the target id actually exists among the graph's nodes; if it doesn't, stop and report that the target was not found rather than guessing a near match. - Build the depth-bounded dependency set. Starting from the target,
follow
callsedges outward (both directions — subject-to-object as "calls", object-to-subject as "called_by") for exactlydepthhops. At depth 1, this is the target's direct callers and direct callees only — not their callers or callees in turn. - Separately, pull every claim attached to the target. Ignoring
depthentirely for this step, find each node linked to the target through aclaimsedge — there may be one, several, or none, and they may or may not agree with each other. Then find everycontradicts(or similarly flagged conflict) edge running between those claim nodes. Do not pick one claim as the "right" one and drop the rest — carry every attached claim and every conflict edge between them into the result. - Assemble the subgraph. The result's node set is: the target, the depth-bounded dependency set from step 3, and the claim nodes from step 4. The result's edge set is exactly the edges from the full graph whose subject and object are both in that node set — no edge gets included on its own if one of its endpoints didn't make the cut.
- Prove the boundary, don't just assert it — this step must never be skipped. Compare the full graph's node count (step 1) against the subgraph's node count (step 5). List, or at minimum count, which node ids from the full graph were excluded. If the full graph has any node outside the boundary and the subgraph's node count still equals the full graph's, treat that as a signal the traversal is wrong — a "subgraph" that isn't smaller than the graph it was drawn from hasn't scoped anything, and you should re-check steps 3-5 before returning a result.
- Write the result to
output.json(or the path the user requested) in this kit's root, with this shape:target,depth,nodes(the included node objects),edges(the included edge objects),full_graph_node_count,subgraph_node_count, andexcluded_node_ids(every node id in the full graph not present innodes). - Report a summary alongside the file: the target, the depth used, how many nodes/edges were included versus the full graph's totals, and which (if any) claim nodes were pulled in for disagreement rather than depth.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 116 lines · 40 tokens per session scan A 83de5fdb02d7
build-subgraph is a skill published in the GitHub repository ayeshakhalid192007-dev/graph-engineering-crash-course (5 stars, last pushed 12d ago), licensed MIT. It adds 40 tokens to every session and 1,324 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
animate
Build a web animation: whether it should animate at all, the purpose, the tool, the properties, the easing curve, the duration, interruption and exit. Writes the CSS or Motion code for dropdowns, modals, toasts, tooltips, accordions, press feedback, stagger and scroll reveals. Use to animate something or make a…
building-agents
Use when building or restructuring an LLM agent — provider adapter, tool calling, structured output, RAG, agent loop, eval gate, cost routing, tracing, MCP server — model-agnostic across OpenAI/Anthropic/Gemini/OSS so a model swap is a config change. NOT vector-store SQL alone (that is postgresdb) or service…
author-skill
Use when authoring a NEW rsc skill or editing an existing one — scoping it to one job, writing the description that decides whether it ever loads, splitting the body into references/, writing its evals, auditing it against the rubric. NOT building a product feature (that is specify) and NOT designing an agent loop…
community
Use when building or running a persistent two-way community space — Discord, Telegram, Circle: platform choice, structure, onboarding, native→bot→human moderation, rituals, growth loops, health metrics. NOT churn of paying product customers (that is retention), NOT broadcast email (that is newsletter), NOT one live…
cpp
Use when writing, reviewing, modernizing, building, or debugging C++ - RAII and resource lifetime, smart-pointer ownership, move semantics and the Rule of Zero/Five, target-based CMake with FetchContent, and killing undefined behavior with ASan/UBSan/TSan plus clang-tidy. NOT borrow-checker / Result-Option / cargo…
gamedev-multiplayer
Use when adding multiplayer or netcode to a game — client-server vs P2P, server authority and anti-cheat, state replication vs RPCs, prediction and reconciliation, lag compensation, plus Godot 4 / Unity NGO / Unreal wiring. NOT single-player gameplay (that is godot, unity, unreal), NOT matchmaking or server hosting…