Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add brake71/1c-ssl-skills --skill bspgit clone --depth 1 https://github.com/brake71/1c-ssl-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/brake71/1c-ssl-skills/bsp)<a href="https://agentmods.dev/skills/brake71/1c-ssl-skills/bsp"><img src="https://agentmods.dev/badge/skills/brake71/1c-ssl-skills/bsp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/brake71/1c-ssl-skills/bsp"><img src="https://agentmods.dev/badge/skills/brake71/1c-ssl-skills/bsp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium analysis-evasion · line 1 Suspicious Unicode normalization or mixed-script contentFix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00160 | $0.02398 |
| Opus 5.5 | $0.00064 | $0.00959 |
| Sonnet 5.5 | $0.00032 | $0.00480 |
| Haiku 4.5 | $0.00016 | $0.00240 |
Grade A, and why
bsp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 147 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Using 1C:BSP 3.1.11 in application code
This router is ASCII-only so that its initial read is safe even with a legacy Windows stdout code page. The task references remain UTF-8 Russian, with exact BSL names, signatures, regions, parameters, examples and pitfalls.
Reading UTF-8 files on Windows
Use a native UTF-8 reader: rg -n . -- "PATH" reads a file; rg patterns and
-A/-B/-C select a section. Replace PATH with the installed file's path;
quote paths containing spaces. Alternatively, read with explicit Python UTF-8:
python -X utf8 -c "import sys; from pathlib import Path; sys.stdout.reconfigure(encoding='utf-8'); print(Path(sys.argv[1]).read_text(encoding='utf-8'))" "PATH"
Get-Content -Encoding UTF8 controls input decoding, not captured stdout.
Avoid PowerShell content cmdlets and piping native readers through
Select-String, Select-Object or Where-Object: they may re-encode stdout.
Filter inside rg or Python instead. Apply UTF-8 reading to project files too;
do not combine a safe skill read with an unsafe README read. Do not change
global shell settings.
Workflow
Scope precedence: explicit BSP API review, including checking whether a method
exists, requires the selected reference even when the recommendation uses
platform APIs. Apply the version boundary below first. Standalone platform-only
requests without BSP API review are outside this workflow; answer them directly.
The presence of BSL files or a form element alone is not an integration task.
A library-based migration/update write is an integration task even without
an explicit BSP name or version; route it to update.md after the version check.
- Check the requested BSP version. For a different version, explain that these 3.1.11 references cannot confirm its signatures and request matching documentation/export; this boundary check needs no API reference. For 3.1.11 or an unspecified version, select one primary reference from the task table. Add a second only for a genuinely cross-cutting task, such as printing in a background job.
- Bind the installed root to the parent of the absolute
SKILL.mdfile you successfully opened. Build the selected path asINSTALLED_ROOT/references/REFERENCE.md; each skill has its own root. Open that file before an integration/API answer. Locate the scenario using nativerg -nheadings/context, then check its rules, signature, example and pitfalls. The router and remembered knowledge are insufficient. If a search fails, run the reference fallback below using that same absoluteSKILL.mdpath. A project file listing may omit hidden.agents/; it does not prove the installed reference is absent. A system skill's path is not the root of this project skill. Declare the reference unavailable only after the fallback fails; otherwise use its scenario. - If the user proposes a call or rule, check its original full
Module.Methodname and purpose. Identify mismatches explicitly. An API signature verified for 3.1.11 is not verification for another BSP version. - Prefer the stable public programmatic-interface region. Internal or
deprecated APIs require an explicit warning and no public alternative.
Show overridable-module hooks as implementations: BSP calls them;
application code implements them, not a direct qualified module call.
Exact Russian region and suffix names are documented in
fundamentals.md. - If a configuration XML export containing
CommonModules/is available, additionally verify each recommended signature/region withbsp_api.py. Otherwise use the supplied reference and do not claim source verification. - Answer in the user's language: API, client/server execution context, minimal BSL example and important constraints. Check each full BSP call name and argument order against the reference or available export. Take application-specific object/handler names from the task or project; do not invent symmetric BSP methods. Discuss absent/internal/forbidden calls in prose or inline code, not a runnable fenced BSL example.
What ships with it
26 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 296 B
- references/admin-tools.md 44 KB
- references/backup.md 27 KB
- references/base-common.md 30 KB
- references/bp-tasks.md 32 KB
- references/classifiers.md 33 KB
- references/commands-external.md 45 KB
- references/comms.md 37 KB
- references/contact-info.md 37 KB
- references/currencies-banks.md 36 KB
- references/data-exchange.md 33 KB
- references/esign-mcd.md 54 KB
- references/external-components.md 27 KB
- references/files-and-versions.md 45 KB
- references/forms-validation.md 53 KB
- references/fundamentals.md 27 KB
- references/longs-and-jobs.md 40 KB
- references/multilang.md 32 KB
- references/perf-monitoring.md 41 KB
- references/prefixes.md 26 KB
- references/print-reports.md 53 KB
- references/protection-pd.md 42 KB
- references/report-dedup.md 43 KB
- references/update.md 39 KB
- references/users-access.md 32 KB
- scripts/bsp_api.py 17 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago Changed · +16 lines · +29 tokens per session f041f360086a
- 17d ago Changed · +6 lines · +10 tokens per session 109942f15730
- 20d ago Changed · -14 lines · -36 tokens per session 5083ba8eae7f
- 26d ago Changed · +1 lines 78e132d260cb
- 1mo ago Changed · +2 lines 55978780cbd5
- 1mo ago Changed 16ad84bf1522
- 1mo ago First seen · 136 lines · 157 tokens per session scan A fe513ae3f4a6
bsp is a skill published in the GitHub repository brake71/1c-ssl-skills (82 stars, last pushed 15d ago), licensed MIT. It adds 160 tokens to every session and 2,398 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
1c-naparnik
A connection to 1C:Naparnik, a service for analyzing BSL code and searching 1C documentation and standards. BSL is the programming language used by the 1C:Enterprise platform.
1c-code-review
A code-review procedure for BSL, the programming language used by the 1C business software platform. It checks changed code against a defect catalogue and labels each finding with an identifier, severity, and location.
bsl-change-review
A review skill for proposed changes to BSL code, forms, and metadata in 1C systems. It produces either a visual code difference or a copyable guide for making the changes by hand.
xml-structure-review
A checker for XML metadata files used by 1C, a business software platform. It verifies objects, forms, layouts, roles, configuration membership, and permissions in extension roles.
bsl-code-review
A code-review check for BSL, the programming language used by the 1C business-software platform. It looks for static-analysis warnings, performance anti-patterns, naming issues, API signature errors, and missing shared modules.
bsl-architecture-review
An architecture review for 1C code, focused on how modules divide responsibilities and depend on one another. It applies design principles such as SOLID and GRASP, adapted to 1C.