Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Cratis/AI --skill cratis-stage-rendering-and-sandboxgit clone --depth 1 https://github.com/Cratis/AIWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cratis/ai/cratis-stage-rendering-and-sandbox)<a href="https://agentmods.dev/skills/cratis/ai/cratis-stage-rendering-and-sandbox"><img src="https://agentmods.dev/badge/skills/cratis/ai/cratis-stage-rendering-and-sandbox/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cratis/ai/cratis-stage-rendering-and-sandbox"><img src="https://agentmods.dev/badge/skills/cratis/ai/cratis-stage-rendering-and-sandbox.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00102 | $0.02541 |
| Opus 5 | $0.00051 | $0.01270 |
| Sonnet 5 | $0.00020 | $0.00508 |
| Haiku 4.5 | $0.00010 | $0.00254 |
Grade A, and why
cratis-stage-rendering-and-sandbox scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 231 lines — stays where its author put it; the contents beside it link to each section on GitHub.
What Stage renders, and what it refuses
Stage turns a Screenplay .play model into Cratis Arc + Chronicle application
source. It ships three things: a renderer exposed as a .NET library, a
disposable runtime sandbox container, and a specification runner
container.
⚠️ Stage is experimental, and its admitted model shape is very small. The
renderer accepts one command per state-change slice, one produced event,
not empty validation only, one read model with one projection, and at most one
by-identifier snapshot query. Anything richer produces no artifacts at all,
not thinner ones. Read the admission rules below before promising a model can be
rendered.
Verified product sources
| Artifact | Version | What it is |
|---|---|---|
Cratis.Stage.Contracts |
3.11.0 |
ArtifactRenderPlan, EventModelLoader, specification-result contracts |
Cratis.Stage.Rendering.Cratis |
3.11.0 |
The one rendering target and the CratisRendering facade |
Cratis.Stage |
3.11.0 |
The partial direct runtime engine |
cratis/stage |
3.11.0, latest |
Disposable HTTP host plus an in-memory Chronicle kernel |
cratis/stage-specrunner |
3.11.0, latest |
Run-to-completion specification job |
Behavior below is read from the repository at revision 4f3fc6a. Cratis.Stage.Host
and Cratis.Stage.SpecRunner are not packable — they exist only as the two
container images.
Input
The authoritative input is Screenplay source: a folder of .play files,
compiled recursively over **/*.play and merged into one model. There is no
other supported entry format — an event-model.json file is not the current
startup or rendering contract, and the loader cannot read one.
The renderer
There is no CLI, no dotnet tool, and no container for rendering. The entry
point is a static facade in Cratis.Stage.Rendering.Cratis:
var options = new CratisRenderingOptions("Projects", "Projects");
var scope = new ArtifactRenderScope(ArtifactRenderScopeKind.Application, model.Application.Id);
var plan = CratisRendering.Plan(model, executionPlan, scope, options);
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 231 lines · 102 tokens per session scan A 09bcda8fafd4
cratis-stage-rendering-and-sandbox is a skill published in the GitHub repository Cratis/AI (2 stars, last pushed today), licensed MIT. It adds 102 tokens to every session and 2,541 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.
Other skills, from other repositories
Event Sourcing Testing
Testing event sourcing patterns including event store validation, projection testing, saga orchestration, and event versioning compatibility.
author-test
Generate a test given sample. Parameters: C# SDK repository root; Package name: one of Azure.AI.Projects, Azure.AI.Projects.Agents or Azure.AI.Extensions.OpenAI; the sample to use as a starting point for the test.
crap-score
Calculates CRAP (Change Risk Anti-Patterns) for a named .NET method, class, or file. USE FOR: explicit CRAP calculation or coverage-and-complexity risk within that named target, including which tests to prioritize. DO NOT USE FOR: project-wide coverage/CRAP, plateaus, or project-wide blockers/priorities…
coverlet
Use the open-source free coverlet toolchain for .NET code coverage. Use when a repo needs line and branch coverage, collector versus MSBuild driver selection, or CI-safe coverage commands. USE FOR: coverlet setup; CI line or branch coverage; choosing between collector and MSBuild drivers. DO NOT USE FOR: coverage…
archunitnet
Use the open-source free ArchUnitNET library for architecture rules in .NET tests. Use when a repo needs richer architecture assertions than lightweight fluent rule libraries usually provide. USE FOR: the repo uses or wants ArchUnitNET; architecture testing needs richer modeling than simple dependency checks. DO NOT…
reportgenerator
Use the open-source free ReportGenerator tool for turning .NET coverage outputs into HTML, Markdown, Cobertura, badges, and merged reports. USE FOR: the repo uses or wants ReportGenerator; CI needs human-readable coverage reports; multiple coverage files must be merged. DO NOT USE FOR: raw coverage collection with no…