Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CrestApps/CrestApps.AgentSkills --skill orchardcore-recipesgit clone --depth 1 https://github.com/CrestApps/CrestApps.AgentSkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-recipes)<a href="https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-recipes"><img src="https://agentmods.dev/badge/skills/crestapps/crestapps.agentskills/orchardcore-recipes/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/crestapps/crestapps.agentskills/orchardcore-recipes"><img src="https://agentmods.dev/badge/skills/crestapps/crestapps.agentskills/orchardcore-recipes.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00169 | $0.02231 |
| Opus 5.5 | $0.00068 | $0.00892 |
| Sonnet 5.5 | $0.00034 | $0.00446 |
| Haiku 4.5 | $0.00017 | $0.00223 |
Grade A, and why
orchardcore-recipes scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 275 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Orchard Core Recipes
Recipes are JSON documents that configure a tenant through ordered steps. Use a recipe for repeatable setup, environment provisioning, deployment imports, or migration updates. Steps are processed in order and their names are case-insensitive at handler dispatch, but use the registered casing below and in the schemas.
Recipe location, discovery, and execution
- Place an extension recipe at
Recipes/<name>.recipe.jsonin a module or theme. The extension's manifest makes that extension discoverable; there is no separate recipe manifest file. RecipeHarvesteriterates enabled extensions and reads each extension'sRecipesfolder. The application recipe harvester also contributes application-level recipes.- Set
issetuprecipetotrueonly for recipes intended to appear during tenant setup. - Run a discovered recipe from Configuration → Recipes, during setup, or from another recipe using the
Recipesstep. A data migration may execute a recipe in its module/themeMigrationsfolder throughIRecipeMigrator. - Programmatic execution uses
IRecipeExecutor.ExecuteAsync(executionId, recipeDescriptor, environment, cancellationToken). ARecipeDescriptorcarries the recipe metadata, base path, file provider, and recipe file.
Use .recipe.json, not arbitrary .json, for discovered extension recipes. Recipes can contain JSON comments, but generated automation should emit strict JSON unless comments are intentionally needed.
Authoring rules
- Enable features before invoking their recipe steps.
- Keep content definition, settings, and workflow records under source control.
- Use variables and helpers such as
[js: uuid()],[file:text('...')],[env:NAME], and[appsettings:Section:Key]rather than inventing stable IDs or embedding secrets. - All examples below are complete recipe fragments. Preserve the
{ "steps": [ ... ] }root wrapper when composing a recipe. - For recipe-generated content, use expressions to generate
ContentItemId,ContentItemVersionId, and timestamps rather than manually invented IDs.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/recipe-schemas/A2AConnection.schema.json 6.0 KB
- references/recipe-schemas/AdminMenu.schema.json 771 KB
- references/recipe-schemas/AdminTemplates.schema.json 880 B
- references/recipe-schemas/AIDataSource.schema.json 2.8 KB
- references/recipe-schemas/AIDeployment.schema.json 4.3 KB
- references/recipe-schemas/AIProfile.schema.json 24 KB
- references/recipe-schemas/AIProfileTemplate.schema.json 31 KB
- references/recipe-schemas/AIProviderConnections.schema.json 6.4 KB
- references/recipe-schemas/AzureADSettings.schema.json 777 B
- references/recipe-schemas/azureai-index-create.schema.json 566 B
- references/recipe-schemas/azureai-index-rebuild.schema.json 632 B
- references/recipe-schemas/azureai-index-reset.schema.json 624 B
- references/recipe-schemas/command.schema.json 491 B
- references/recipe-schemas/content.schema.json 2.3 KB
- references/recipe-schemas/ContentDefinition.schema.json 82 KB
- references/recipe-schemas/CreateAIProfileFromTemplate.schema.json 25 KB
- references/recipe-schemas/CreateOrUpdateIndexProfile.schema.json 1.1 KB
- references/recipe-schemas/custom-settings.schema.json 320 B
- references/recipe-schemas/custom-user-settings.schema.json 1.5 KB
- references/recipe-schemas/DeleteAIDeployments.schema.json 600 B
- references/recipe-schemas/DeleteContentDefinition.schema.json 611 B
- references/recipe-schemas/deployment.schema.json 55 KB
- references/recipe-schemas/DynamicDataTranslations.schema.json 1.5 KB
- references/recipe-schemas/elastic-index-rebuild.schema.json 628 B
- references/recipe-schemas/elastic-index-reset.schema.json 620 B
- references/recipe-schemas/ElasticIndexSettings.schema.json 567 B
- references/recipe-schemas/FacebookCoreSettings.schema.json 1011 B
- references/recipe-schemas/FacebookLoginSettings.schema.json 432 B
- references/recipe-schemas/feature.schema.json 24 KB
- references/recipe-schemas/FeatureProfiles.schema.json 1.5 KB
- references/recipe-schemas/GitHubAuthenticationSettings.schema.json 673 B
- references/recipe-schemas/index.json 5.8 KB
- references/recipe-schemas/Layers.schema.json 243 KB
- references/recipe-schemas/lucene-index-rebuild.schema.json 612 B
- references/recipe-schemas/lucene-index-reset.schema.json 604 B
- references/recipe-schemas/lucene-index.schema.json 542 B
- references/recipe-schemas/McpConnection.schema.json 7.5 KB
- references/recipe-schemas/McpPrompt.schema.json 3.8 KB
- references/recipe-schemas/McpResource.schema.json 9.1 KB
- references/recipe-schemas/media.schema.json 1.2 KB
- references/recipe-schemas/MediaProfiles.schema.json 1.9 KB
- references/recipe-schemas/MicrosoftAccountSettings.schema.json 653 B
- references/recipe-schemas/move-attached-media-fields.schema.json 566 B
- references/recipe-schemas/OpenIdApplication.schema.json 3.7 KB
- references/recipe-schemas/OpenIdClientSettings.schema.json 2.6 KB
- references/recipe-schemas/OpenIdScope.schema.json 760 B
- references/recipe-schemas/OpenIdServerSettings.schema.json 4.5 KB
- references/recipe-schemas/OpenIdValidationSettings.schema.json 953 B
- references/recipe-schemas/Placements.schema.json 4.1 KB
- references/recipe-schemas/Queries.schema.json 5.0 KB
- references/recipe-schemas/README.md 978 B
- references/recipe-schemas/RebuildIndex.schema.json 603 B
- references/recipe-schemas/recipe.schema.json 2185 KB
- references/recipe-schemas/recipes.schema.json 918 B
- references/recipe-schemas/ReplaceContentDefinition.schema.json 82 KB
- references/recipe-schemas/ResetIndex.schema.json 595 B
- references/recipe-schemas/Roles.schema.json 8.2 KB
- references/recipe-schemas/Settings.schema.json 62 KB
- references/recipe-schemas/ShortcodeTemplates.schema.json 1.3 KB
- references/recipe-schemas/Sitemaps.schema.json 16 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 275 lines · 169 tokens per session scan A 31f572934b8a
orchardcore-recipes is a skill published in the GitHub repository CrestApps/CrestApps.AgentSkills (13 stars, last pushed 2d ago), licensed MIT. It adds 169 tokens to every session and 2,231 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.
Other skills, from other repositories
template-instantiation
Creates .NET projects from templates with validated parameters, smart defaults, Central Package Management adaptation, and latest NuGet version resolution. USE FOR: creating new dotnet projects, scaffolding solutions with multiple projects, installing or uninstalling template packages, creating projects that respect…
Technical Debt Tracking with PMAT
Tracks and manages technical debt using PMAT (Pragmatic AI Labs MCP Agent Toolkit). Use this skill when: User asks about technical debt, TODO comments, or code quality issues Planning sprint work and need to prioritize debt repayment Conducting code audits or technical debt assessments Tracking debt accumulation…
reviewing-sla-definitions
Reviewing ServiceNow SLA, OLA and underpinning-contract definitions and how they perform: breach rates per definition, overlapping or duplicated definitions on the same table and target, and definitions that never attach. Use when the user asks about SLA breaches by definition, too many SLAs, duplicate or conflicting…
pipefy-members-email-webhooks
Use this skill when the user wants to manage pipe membership, send or read card inbox emails, use email templates, or manage webhooks.
gitlab-issues
Issue review and tracking on GitLab via the gitlab-api MCP server — review a project's issues, review issues across a whole group/organization, and read, create, update, or close an issue with the domain-typed tool. Use when the agent must triage a project's issues, see every issue affecting a group, open a new issue…
alibaba-support-incident-coordinator
A coordinator for Alibaba Cloud support incidents, from creating the right support case to escalating it and preparing evidence and follow-up records.