Borrowing it
Nothing to install: this file belongs to bojanrajkovic/mcp-paprika. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/bojanrajkovic/mcp-paprika/main/.claude/skills/capture-paprika-wire-format/SKILL.mdgit clone --depth 1 https://github.com/bojanrajkovic/mcp-paprikaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format)<a href="https://agentmods.dev/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format"><img src="https://agentmods.dev/badge/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format"><img src="https://agentmods.dev/badge/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00086 | $0.04302 |
| Opus 5 | $0.00043 | $0.02151 |
| Sonnet 5 | $0.00017 | $0.00860 |
| Haiku 4.5 | $0.00009 | $0.00430 |
Grade B, and why
capture-paprika-wire-format scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
|| echo "✗ CA cert not trusted — run: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/.mitmproxy/mitmproxy-ca-cert.pem" Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sf -H "Authorization: Bearer $(curl -sf -X POST \ How it starts
The opening of the file, as written. The whole thing — 378 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Capture Paprika Wire Format
Overview
End-to-end pipeline for capturing Paprika Cloud Sync API wire format via mitmproxy interception of the macOS desktop client. Produces sanitized HAR 1.2 files with named entries and strongly-typed TypeScript fixture modules for tests.
When to Use
- Reverse-engineering an undocumented Paprika API surface (e.g., bookmarks, pantry locations, custom meal types)
- Verifying wire format assumptions before implementing a new entity type
- Updating existing captures after Paprika app updates change the wire format
- A GitHub issue's DoD includes "capture wire format" or "decoded bodies pasted as comments"
Prerequisites Check
Run these checks before starting. Offer to install anything missing.
# 1. mitmproxy
if command -v mitmdump &>/dev/null; then
echo "✓ mitmdump $(mitmdump --version 2>&1 | head -1)"
else
echo "✗ mitmdump not found — install with: brew install mitmproxy"
# Offer: "Should I run brew install mitmproxy?"
fi
# 2. mitmproxy CA cert
if [ -f ~/.mitmproxy/mitmproxy-ca-cert.pem ]; then
echo "✓ mitmproxy CA cert exists"
# Verify it's trusted (security find-certificate returns 0 if found)
security find-certificate -c "mitmproxy" /Library/Keychains/System.keychain &>/dev/null \
&& echo "✓ CA cert is trusted" \
|| echo "✗ CA cert not trusted — run: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/.mitmproxy/mitmproxy-ca-cert.pem"
else
echo "✗ CA cert missing — run mitmdump once to generate it, then trust it"
fi
# 3. Paprika app
if [ -d "/Applications/Paprika Recipe Manager 3.app" ]; then
echo "✓ Paprika Recipe Manager 3 installed"
else
echo "✗ Paprika Recipe Manager 3 not found in /Applications"
fi
# 4. Network service (find the active one — not always "Wi-Fi")
NETWORK_SERVICE=$(networksetup -listallnetworkservices | grep -v '^\*' | while read svc; do
networksetup -getinfo "$svc" 2>/dev/null | grep -q "IP address: [0-9]" && echo "$svc" && break
done)
echo "Active network service: ${NETWORK_SERVICE:-UNKNOWN}"
# 5. Paprika credentials
ENV_FILE="$(python3 -c "
import os, json
# Check XDG config, then macOS default
for base in [os.environ.get('XDG_CONFIG_HOME', ''), os.path.expanduser('~/Library/Preferences')]:
p = os.path.join(base, 'mcp-paprika', '.env')
if os.path.isfile(p):
print(p)
break
" 2>/dev/null)"
if [ -n "$ENV_FILE" ]; then
echo "✓ Credentials at: $ENV_FILE"
grep -qc 'PAPRIKA_EMAIL' "$ENV_FILE" && echo " ✓ PAPRIKA_EMAIL present" || echo " ✗ PAPRIKA_EMAIL missing"
grep -qc 'PAPRIKA_PASSWORD' "$ENV_FILE" && echo " ✓ PAPRIKA_PASSWORD present" || echo " ✗ PAPRIKA_PASSWORD missing"
else
echo "✗ No .env found — check XDG_CONFIG_HOME/mcp-paprika/.env or $ENV_FILE"
fi
# 6. computer-use MCP (can't check programmatically — just note it)
echo "? computer-use MCP: verify it's available (call mcp__computer-use__list_granted_applications)"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 378 lines · 86 tokens per session scan B de8bfe72623a
capture-paprika-wire-format is a skill published in the GitHub repository bojanrajkovic/mcp-paprika (2 stars, last pushed yesterday), licensed MIT. It adds 86 tokens to every session and 4,302 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
printing-press-amend
Amend a published CLI from one of two input sources: (1) dogfood mode mines the active Claude Code session transcript for friction (missing flags, hand- rolled API payloads, silent-null returns); (2) direct-input mode accepts user-supplied asks (rename a command, add commands or feeds, fix a named bug, optionally…
convex-performance-audit
Audits Convex performance for reads, subscriptions, write contention, and function limits. Use for slow features, insights findings, OCC conflicts, or read amplification.
convex-insights
Query a running Convex app's logs + health in natural language (official MCP): failures, slow/expensive functions, deploy causality — scoped, evidence-backed, with a dashboard deep link.
ssl-proxy-troubleshoot
Systematic workflow for troubleshooting SSL/proxy connectivity issues with government websites.
diagnose-backend-bug
Diagnose a bounded backend or multi-service failure from GitHub Issues, Jira, Aone, user-provided exports, logs, traces, responses, stack traces, or job records. Use when a service, API, RPC, worker, queue, CLI, or scheduled job bug needs correlation through the project's existing observability route before repair; do…
axiom-networking
Use when implementing or debugging ANY network connection, API call, or socket. Covers URLSession, Network.framework, NetworkConnection, connection diagnostics.