Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CrestApps/CrestApps.AgentSkills --skill orchardcore-data-sourcesgit clone --depth 1 https://github.com/CrestApps/CrestApps.AgentSkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-data-sources)<a href="https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-data-sources"><img src="https://agentmods.dev/badge/skills/crestapps/crestapps.agentskills/orchardcore-data-sources/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-data-sources"><img src="https://agentmods.dev/badge/skills/crestapps/crestapps.agentskills/orchardcore-data-sources.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00204 | $0.05588 |
| Opus 5.5 | $0.00082 | $0.02235 |
| Sonnet 5.5 | $0.00041 | $0.01118 |
| Haiku 4.5 | $0.00020 | $0.00559 |
Grade A, and why
orchardcore-data-sources scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 344 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Orchard Core Data Sources (Data Pipelines Core)
The Data Pipelines Core feature (OrchardCore.DataPipelines.Core, also DataPipelinesConstants.CoreFeatureId) ships with Orchard Core 4.0 in the Data Pipelines module. It is the data layer that data pipelines and other features, such as reports, share:
- data sources that expose site data as typed, tabular data sets, read in batches with the access of a user;
- file formats rows are written to and read from: CSV, Excel, JSON and JSON Lines;
- the formula language and filter operators (see
orchardcore-data-formulas); - bounded-memory data operations (sort, distinct, group, join) that spill to temporary files;
- shared links (see
orchardcore-data-pipeline-steps).
The feature has no admin screen and is EnabledByDependencyOnly: features such as OrchardCore.DataPipelines enable it. Using pipelines: orchardcore-data-pipelines.
Packages and dependencies
<!-- Web/startup project -->
<PackageReference Include="OrchardCore.DataPipelines" Version="4.*" />
<!-- Module project that reads or adds data sources -->
<PackageReference Include="OrchardCore.DataSources.Abstractions" Version="4.*" />
<PackageReference Include="OrchardCore.DataSources.Core" Version="4.*" />
ContentDataSourceOptions lives in the OrchardCore.DataPipelines package; IDataTimeZoneResolver in OrchardCore.DataPipelines.Core.
A module that reads or adds data sources either depends on the feature in its manifest (enabling the module enables the feature), or registers its services in a [RequireFeatures("OrchardCore.DataPipelines.Core")] startup (registered once another feature, such as Data Pipelines, enabled it):
[assembly: Module(
Name = "Support Reports",
Version = "1.0.0",
Dependencies = ["OrchardCore.DataPipelines.Core"]
)]
Concepts
| Concept | Description |
|---|---|
| Data source | An IDataSource scoped service with a stable static Name (such as Contents). |
| Data set | One table of a data source. DataSetDescriptor: Name (stable), DisplayName, Description, Group, DefaultDateField (its main date field, if any), References (data sets its fields link to). |
| Schema | DataSetSchema: the descriptor and its ordered DataFields (Name, may contain dots such as TitlePart.Title; DisplayName, Type, Group, Description, IsIdentifier, IsKeyFilterable, References). FindField(name). |
| Field type | DataFieldType: Text (string), Integer (long), Decimal (decimal), Boolean (bool), Date (a calendar date, DateTime) and DateTime (UTC, or a local time without zone after a conversion or from a file). A missing value is null. |
| Batch | DataBatch (Fields, Rows of object[] in field order, Count, IndexOf(name)), 500 rows by default (DataSourceQuery.DefaultBatchSize). |
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · -11 lines · -4 tokens per session 7a711fc9710e
- yesterday First seen · 355 lines · 208 tokens per session scan A ac655a3132c0
orchardcore-data-sources is a skill published in the GitHub repository CrestApps/CrestApps.AgentSkills (13 stars, last pushed today), licensed MIT. It adds 204 tokens to every session and 5,588 once invoked, about $0.0008 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-21.
Other skills, from other repositories
excel-cli
Discover and launch the Excel CLI for ordinary Excel workbook requests on Windows, including reads, writes, formulas, data refreshes, and workbook automation. Use the installed excel-cli plugin's npx launcher and native help to find commands; report presentation conventions are a separate optional skill.
excel-mcp-report-formatting
Apply optional presentation conventions when the user requests Excel report formatting or a new reader-facing report through Excel MCP tools. Use for readable headers, meaningful number formats, financial-model colours, and report layout. Do not load for ordinary reads, raw exports, targeted data updates, Power Query…
excel-cli-report-formatting
Apply optional presentation conventions when the user requests Excel report formatting or a new reader-facing report through excelcli. Use for readable headers, meaningful number formats, financial-model colours, and report layout. Do not load for ordinary reads, raw exports, targeted data updates, Power Query or Data…
npoi
Use when reading/writing Excel (.xls/.xlsx) or Word (.doc/.docx) files in .NET without Microsoft Office — data import/export, report generation, template filling. NPOI: .NET port of Apache POI for Office file I/O in server environments.
reogrid
Use when embedding an Excel-like spreadsheet control in .NET WinForms/WPF applications — formula engine, cell editing, clipboard, undo/redo. ReoGrid: .NET spreadsheet component with NPOI-based Excel read/write.
@bilig/exceljs-formula-recalc
Recalculate formula outputs for ExcelJS workbook flows in Node.js after agents or services edit cells.