Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add composite/korean-skills --skill egovframe-compatibilitygit clone --depth 1 https://github.com/composite/korean-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/composite/korean-skills/egovframe-compatibility)<a href="https://agentmods.dev/skills/composite/korean-skills/egovframe-compatibility"><img src="https://agentmods.dev/badge/skills/composite/korean-skills/egovframe-compatibility/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/composite/korean-skills/egovframe-compatibility"><img src="https://agentmods.dev/badge/skills/composite/korean-skills/egovframe-compatibility.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.01750 |
| Opus 5 | $0.00028 | $0.00875 |
| Sonnet 5 | $0.00011 | $0.00350 |
| Haiku 4.5 | $0.00006 | $0.00175 |
Grade A, and why
egovframe-compatibility scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 252 lines — stays where its author put it; the contents beside it link to each section on GitHub.
eGovFrame Compatibility Rules
Overview
eGovFrame 4.x/5.x adds constraints on top of Spring conventions for government system development. Only eGovFrame-specific rules are documented here — Spring Framework knowledge assumed.
Scope: Java projects using org.egovframe.rte.* (eGovFrame 4.x+). Excludes egovframework.rte.* (3.10 and earlier), non-Java code, and frontend concerns.
Controller Layer
Target: @Controller, @RestController, and Servlet code only when Spring MVC is impractical and justified.
Rules:
- Map handlers with Spring MVC annotations.
- Do not inject or call DAO classes directly, including subclasses of
SqlMapClientDaoSupport,SqlSessionDaoSupport, andHibernateDaoSupport. - No direct NoSQL, MQ, or cache access from controllers.
- Route business logic through an injected service interface.
// ✅ Correct
@Controller
@RequestMapping("/sample")
public class SampleController {
@Autowired
private SampleService sampleService;
@GetMapping("/list")
public String list(Model model) {
model.addAttribute("list", sampleService.selectList());
return "sample/list";
}
}
// ❌ DAO injected directly — forbidden
@Controller
public class SampleController {
@Autowired
private SampleMapper sampleMapper; // ❌ inject Service, not DAO
}
// ❌ Business logic handled inside controller — forbidden
@GetMapping("/calc")
public String calc(Model model) {
int result = heavyBusinessCalculation(); // ❌ delegate to Service
model.addAttribute("result", result);
return "sample/result";
}
Service Layer
Target: @Service or @Component business classes, excluding tests.
Rules:
- Each service implementation must extend
EgovAbstractServiceImpl, directly or through a base class. - Each service implementation must implement a dedicated service interface.
Why the interface matters: eGovFrame AOP relies on Java Dynamic Proxy, not CGLIB — class-only services cannot be proxied.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 252 lines · 55 tokens per session scan A 940542d307a3
egovframe-compatibility is a skill published in the GitHub repository composite/korean-skills (4 stars, last pushed 5mo ago), licensed MIT. It adds 55 tokens to every session and 1,750 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
authoring-java-sdk-tasks
Writes Airflow task logic in Java, Kotlin, or any JVM language using the Airflow Java SDK. Use when the user wants to implement Airflow tasks in Java/JVM, asks about @Builder.Dag/@Builder.Task/@Builder.XCom, the Task/BundleBuilder interfaces, reading connections/variables/XComs from Java, the JSON-to-Java type…
configuring-airflow-language-sdks
Configures Airflow to run language SDK tasks (Java, Go, and future native SDKs) — register a coordinator, map a queue to it, ensure the runtime/artifact on workers, and tune coordinator options. Use when the user wants Airflow to route a queue to a native-language coordinator, asks about the [sdk]…
remove-deprecated-api
AEM Cloud Service expert skill — migrate deprecated and removed Java APIs to comply with AEM as a Cloud Service enforcement policies. Detection is plugin-driven, not table-driven: the skill runs the AEM Analyser Maven Plugin (com.adobe.aem:aemanalyser-maven-plugin) at its latest published version against the project…
outbound-call-timeouts
AEM Cloud Service expert skill — add explicit connect/read/socket timeouts to outbound HTTP clients constructed without one (Apache HttpClient 4.x/5.x, OkHttp, JDK java.net.http.HttpClient), including the JDK per-request read timeout on HttpRequest. Use for "add HTTP timeouts", "this external/outbound call has no…
outdated-dependencies
AEM Cloud Service expert skill — upgrade outdated Maven dependencies in pom.xml, both literal and same-pom ${property} shapes. Use for "update my aem-sdk-api", "upgrade mockito", or scanning a project for stale dependency versions. Discovery can find blocks but "outdated" needs a target version, which the user…
inject-in-sling-model
AEM Cloud Service expert skill — migrate javax.inject.@Inject fields in Sling Model (@Model) classes to injector-specific annotations (@ValueMapValue / @OSGiService / @SlingObject). Self-discoverable (scan for @Model classes with field-level @Inject); the replacement is chosen deterministically from each field's…