Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Cumulocity-IoT/cumulocity-skills --skill new-appgit clone --depth 1 https://github.com/Cumulocity-IoT/cumulocity-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/new-app)<a href="https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/new-app"><img src="https://agentmods.dev/badge/skills/cumulocity-iot/cumulocity-skills/new-app/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/new-app"><img src="https://agentmods.dev/badge/skills/cumulocity-iot/cumulocity-skills/new-app.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.01826 |
| Opus 5 | $0.00037 | $0.00913 |
| Sonnet 5 | $0.00015 | $0.00365 |
| Haiku 4.5 | $0.00007 | $0.00183 |
Grade A, and why
new-app scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 256 lines — stays where its author put it; the contents beside it link to each section on GitHub.
New Cumulocity Application Skill
Overview
The @c8y/websdk Angular schematic scaffolds a custom Cumulocity application and wires it
into the platform. This skill produces all CLI commands needed to go from zero to a running
dev server without any interactive prompts.
Step 1 — Install Angular CLI
Install the Angular 20 CLI globally:
npm install @angular/cli@v20-lts -g
Why Angular 20? The
@c8y/websdkschematic currently targets Angular 20.
Step 2 — Generate the Angular Application
Use these flags to avoid any interactive prompts:
ng new <appName> \
--style=less \
--routing=true \
--ssr=false \
--skip-git=true \
--package-manager=npm \
--interactive=false \
--defaults
| Flag | Purpose |
|---|---|
--style=less |
LESS stylesheets (required by Cumulocity component styles) |
--routing=true |
Angular Router module pre-configured |
--ssr=false |
No server-side rendering (not supported by the platform) |
--skip-git=true |
Skip git init (manage VCS separately) |
--package-manager=npm |
For pure scaffolding use npm in a migration context, but for new project prefer pnpm as faster installs, better security) |
--interactive=false |
Fully non-interactive — no prompts |
--defaults |
Accept all remaining defaults |
Navigate into the new directory:
cd <appName>
Step 3 — Add @c8y/websdk
Choosing a version
Check available dist-tags on npm to find the right version:
npm dist-tags @c8y/websdk
Common dist-tags:
| Tag | Meaning |
|---|---|
latest |
Current stable release |
y2026-lts |
2026 Long-Term Support line |
y2025-lts |
2025 Long-Term Support line |
next |
Pre-release / RC channel |
Pass the tag directly to ng add:
ng add @c8y/websdk@y2026-lts
Or pin to an exact version:
ng add @c8y/[email protected]
Fully non-interactive install
Use --application + --skip-confirmation to bypass all prompts:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 256 lines · 74 tokens per session scan A 5ca8a3972d9b
new-app is a skill published in the GitHub repository Cumulocity-IoT/cumulocity-skills (5 stars, last pushed 11d ago), licensed Apache-2.0. It adds 74 tokens to every session and 1,826 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
arm-cortex-expert
Senior embedded software engineer specializing in firmware and driver development for ARM Cortex-M microcontrollers (Teensy, STM32, nRF52, SAMD). Decades of experience writing reliable, optimized, and maintainable embedded code with deep expertise in memory barriers, DMA/cache coherency, interrupt-driven I/O, and…
c-pro
Write efficient C code with proper memory management, pointer arithmetic, and system calls. Handles embedded systems, kernel modules, and performance-critical code. Use PROACTIVELY for C optimization, memory issues, or system programming.
opentrons-integration
Official Opentrons Protocol API for OT-2 and Flex robots. Use when writing protocols specifically for Opentrons hardware with full access to Protocol API v2 features. Best for production Opentrons protocols, official API compatibility. For multi-vendor automation or broader equipment control use pylabrobot.
pylabrobot
Vendor-agnostic lab automation framework. Use when controlling multiple equipment types (Hamilton, Tecan, Opentrons, plate readers, pumps) or needing unified programming across different vendors. Best for complex workflows, multi-vendor setups, simulation. For Opentrons-only protocols with official API…
igniteui-wc-choose-components
Identify and select the right Ignite UI Web Components for your app UI, then navigate to official docs, usage examples, and API references.
igniteui-blazor-generate-from-image-design
Implement Blazor application views from design images using Ignite UI Blazor components. Uses MCP servers (igniteui-cli, igniteui-theming) to discover components, generate themes, and follow best practices. Triggers when the user provides a design image (screenshot, mockup, wireframe) and wants it built as a working…