Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CrestApps/CrestApps.AgentSkills --skill orchardcore-dnc-registrygit clone --depth 1 https://github.com/CrestApps/CrestApps.AgentSkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-dnc-registry)<a href="https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-dnc-registry"><img src="https://agentmods.dev/badge/skills/crestapps/crestapps.agentskills/orchardcore-dnc-registry/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-dnc-registry"><img src="https://agentmods.dev/badge/skills/crestapps/crestapps.agentskills/orchardcore-dnc-registry.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00221 | $0.03055 |
| Opus 5.5 | $0.00088 | $0.01222 |
| Sonnet 5.5 | $0.00044 | $0.00611 |
| Haiku 4.5 | $0.00022 | $0.00305 |
Grade A, and why
orchardcore-dnc-registry scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 229 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Orchard Core DNC Registry - Prompt Templates
Configure Do-Not-Call Suppression
You are an Orchard Core expert. Generate accurate compliance-focused configuration and code for the CrestApps DNC Registry modules. The module screens canonical phone numbers against national registries and locally uploaded lists. The same registries screen Omnichannel contact imports and Contact Center outbound dialing. The optional Azure module moves uploaded local-list files to Azure Blob Storage.
Guidelines
- Install
CrestApps.OrchardCore.DncRegistry(andCrestApps.OrchardCore.DncRegistry.Azurewhen needed) in the web/startup project. - Enable
CrestApps.OrchardCore.DncRegistryfirst; it depends onCrestApps.OrchardCore.PhoneNumbers(seeorchardcore-phone-numbers). - Pass canonical
PhoneNumbervalues (fromIPhoneNumberService.TryParse) to registries. Never hand a registry a raw string. - A registry that cannot complete a lookup throws
DoNotCallScreeningException; never return an empty set on failure. An empty set means "screened and not listed". - A registry with no credentials does not take part in screening and returns an empty set without throwing. Configure only registries whose answers you rely on.
- Keep
ProtectedApiKeyvalues and Azure connection strings out of source-controlled recipes and settings files. - All recipe JSON must be wrapped in
{ "steps": [...] }. - All C# classes must use the
sealedmodifier, except for View Models.
Feature Overview
| Feature | Feature ID | Admin location |
|---|---|---|
| DNC Registry | CrestApps.OrchardCore.DncRegistry |
Settings → Content Import (global enforcement) |
| USA FTC Do Not Call Registry | CrestApps.OrchardCore.DncRegistry.UsaFtc |
Settings → DNC Registries → USA FTC Registry |
| Canada LNNTE-DNCL Registry | CrestApps.OrchardCore.DncRegistry.CanadaDncl |
Settings → DNC Registries → Canada LNNTE-DNCL Registry |
| Local Do Not Call Registry | CrestApps.OrchardCore.DncRegistry.Local |
Interaction Center → Local DNC Registry |
| DNC Registry - Azure Blob Storage | CrestApps.OrchardCore.DncRegistry.Azure (depends on Local) |
Configuration only |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +5 lines · +86 tokens per session 1155046eb0fd
- 1mo ago First seen · 224 lines · 135 tokens per session scan A 3fb13f270b0a
orchardcore-dnc-registry is a skill published in the GitHub repository CrestApps/CrestApps.AgentSkills (13 stars, last pushed 3d ago), licensed MIT. It adds 221 tokens to every session and 3,055 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
powerpoint-mcp
Use the configured PowerPoint MCP server to inspect or edit presentations on Windows. Covers session safety, live tool discovery, saving, and visual verification; not general presentation design. Triggers: PowerPoint MCP, presentation tools, edit a PowerPoint deck.
data-classification-to-dlp-protocol
Use this skill when sensitive data must be discovered, classified with Microsoft Purview sensitivity labels, protected by Data Loss Prevention policies, and monitored for label adoption and DLP policy effectiveness across Microsoft 365 and Power Platform environments. Defines the end-to-end flow from data discovery…
aws-compliance-evidence-mapper
Map AWS compliance evidence for audits across Security Hub controls, AWS Config rules/conformance packs, Audit Manager assessments, evidence folders, manual evidence, AWS Artifact reports, CloudTrail, and control narratives. Use for evidence packaging and audit readiness, not general security hardening.
complyedge-eu-ai-act-runtime-deny
Runtime deny for EU AI Act Article 5 and Article 50 on this prompt or output via ComplyEdge TrustLint MCP. Use when the user wants agent I/O compliance enforcement, not system classification, FRIA forms, or C2PA watermarking.
check
A Russian-language checking workflow for websites that looks for possible issues under Russian personal-data, advertising, and consumer-protection laws. It checks forms, privacy policies, cookies, trackers, advertising identifiers, and product displays.
scan-url
A live-website checker that opens a URL in Chromium and examines the page structure and cookies for items such as consent, privacy-policy details, advertising identifiers, storefront information, and foreign trackers.