Kimojio is a Linux asynchronous runtime for Rust that uses one core per thread and io_uring for disk input and output, with cooperative task scheduling. It suits I/O-bound programs that need predictable scheduling and gives developers explicit control over concurrency and load distribution.
Borrowing it
Nothing to install: this file belongs to Azure/kimojio-rs. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Azure/kimojio-rs/main/.github/skills/kimojio-json-decoder/SKILL.mdgit clone --depth 1 https://github.com/Azure/kimojio-rsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/azure/kimojio-rs/kimojio-json-decoder)<a href="https://agentmods.dev/skills/azure/kimojio-rs/kimojio-json-decoder"><img src="https://agentmods.dev/badge/skills/azure/kimojio-rs/kimojio-json-decoder/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/azure/kimojio-rs/kimojio-json-decoder"><img src="https://agentmods.dev/badge/skills/azure/kimojio-rs/kimojio-json-decoder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 38 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00070 | $0.02468 |
| Opus 5 | $0.00035 | $0.01234 |
| Sonnet 5 | $0.00014 | $0.00494 |
| Haiku 4.5 | $0.00007 | $0.00247 |
Grade A, and why
kimojio-json-decoder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 253 lines — stays where its author put it; the contents beside it link to each section on GitHub.
kimojio-json decoders
kimojio-json tokenizes JSON. It reports borrowed input to a visitor. A
decoder maps those events to a typed Rust value.
This skill is for direct, allocation-free decoders. It gives the agent the constraints and the reasons for them. It does not prescribe one state layout for every schema. A previous implementation is evidence, not a specification. If a task gives a type or an interface, treat that interface as a contract unless the task also asks to change it.
Start with the problem
Before writing code, identify:
- the input source and schema;
- the required public interface and input lifetime;
- whether the result is one value, a sequence, or a callback stream;
- the policy for unknown members and optional members;
- maximum sizes and nesting depth;
- error kinds, byte offsets, and completion behavior;
- the expected performance and trust boundary.
Then compare possible designs. For each design, ask:
- What work or failure mode does it avoid?
- Does that cost apply to this schema and interface?
- What is the smallest representation that satisfies the contract?
- What measurement or test would distinguish the choices?
State the reason for a choice in the module documentation or change summary. Do not copy a detailed technique from an earlier decoder without checking why it was used. A different schema may make another technique better.
Read the tokenizer
Read these files from the repository root before relying on an API detail:
kimojio-json/src/lib.rskimojio-json/src/tokenizer.rskimojio-json/src/escape_string.rskimojio-json/src/error.rs
Confirm names, lifetimes, return values, and error behavior in the source. Do not invent a pull-token API or assume that a callback has access to the tokenizer.
Prefer the tokenizer's visitor protocol when it fits
The tokenizer already owns the scan loop and calls a Visitor. Prefer this
protocol when the decoder can consume events as they arrive. This avoids an
extra token iterator and an extra dispatch layer.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 253 lines · 70 tokens per session scan A 4c6a44bd267b
kimojio-json-decoder is a skill published in the GitHub repository Azure/kimojio-rs (262 stars, last pushed 28d ago), licensed MIT. It adds 70 tokens to every session and 2,468 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
rust-patterns
Idiomatic Rust patterns, ownership, error handling, traits, concurrency, and best practices for building safe, performant applications.
dd-code-generation
Use pup CLI for immediate Datadog operations or generate code for integration into applications.
omh-rust
This is a Hermes-native rust workflow skill.
bevy-ecs
Structure a Bevy app around its Entity Component System: build the App with plugins, define Component/Resource types, write systems with Query/Res/Commands, filter and order systems, and use the Time resource for frame-rate-independent motion. Use when building or debugging a Bevy game in Rust — when the user mentions…
rust-project
Modern Rust project architecture guide for 2025. Use when creating Rust projects (CLI, web services, libraries). Covers workspace structure, error handling, async patterns, and idiomatic Rust best practices.
gcs-rust-download-object-api
Fix "DownloadObjectRequest not found" error in google-cloud-storage Rust crate. Use when: (1) Trying to download objects from GCS using the Rust SDK, (2) Looking for a download request type in http::objects::download module, (3) Compile error about missing type. The downloadobject method uses GetObjectRequest from the…