Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Cumulocity-IoT/cumulocity-skills --skill new-appgit clone --depth 1 https://github.com/Cumulocity-IoT/cumulocity-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/new-app)<a href="https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/new-app"><img src="https://agentmods.dev/badge/skills/cumulocity-iot/cumulocity-skills/new-app/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/new-app"><img src="https://agentmods.dev/badge/skills/cumulocity-iot/cumulocity-skills/new-app.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.01826 |
| Opus 5.5 | $0.00030 | $0.00730 |
| Sonnet 5.5 | $0.00015 | $0.00365 |
| Haiku 4.5 | $0.00007 | $0.00183 |
Grade A, and why
new-app scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 256 lines — stays where its author put it; the contents beside it link to each section on GitHub.
New Cumulocity Application Skill
Overview
The @c8y/websdk Angular schematic scaffolds a custom Cumulocity application and wires it
into the platform. This skill produces all CLI commands needed to go from zero to a running
dev server without any interactive prompts.
Step 1 — Install Angular CLI
Install the Angular 20 CLI globally:
npm install @angular/cli@v20-lts -g
Why Angular 20? The
@c8y/websdkschematic currently targets Angular 20.
Step 2 — Generate the Angular Application
Use these flags to avoid any interactive prompts:
ng new <appName> \
--style=less \
--routing=true \
--ssr=false \
--skip-git=true \
--package-manager=npm \
--interactive=false \
--defaults
| Flag | Purpose |
|---|---|
--style=less |
LESS stylesheets (required by Cumulocity component styles) |
--routing=true |
Angular Router module pre-configured |
--ssr=false |
No server-side rendering (not supported by the platform) |
--skip-git=true |
Skip git init (manage VCS separately) |
--package-manager=npm |
For pure scaffolding use npm in a migration context, but for new project prefer pnpm as faster installs, better security) |
--interactive=false |
Fully non-interactive — no prompts |
--defaults |
Accept all remaining defaults |
Navigate into the new directory:
cd <appName>
Step 3 — Add @c8y/websdk
Choosing a version
Check available dist-tags on npm to find the right version:
npm dist-tags @c8y/websdk
Common dist-tags:
| Tag | Meaning |
|---|---|
latest |
Current stable release |
y2026-lts |
2026 Long-Term Support line |
y2025-lts |
2025 Long-Term Support line |
next |
Pre-release / RC channel |
Pass the tag directly to ng add:
ng add @c8y/websdk@y2026-lts
Or pin to an exact version:
ng add @c8y/[email protected]
Fully non-interactive install
Use --application + --skip-confirmation to bypass all prompts:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 256 lines · 74 tokens per session scan A 5ca8a3972d9b
new-app is a skill published in the GitHub repository Cumulocity-IoT/cumulocity-skills (5 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 74 tokens to every session and 1,826 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
arm-cortex-expert
Senior embedded software engineer specializing in firmware and driver development for ARM Cortex-M microcontrollers (Teensy, STM32, nRF52, SAMD). Decades of experience writing reliable, optimized, and maintainable embedded code with deep expertise in memory barriers, DMA/cache coherency, interrupt-driven I/O, and…
c-pro
Write efficient C code with proper memory management, pointer arithmetic, and system calls. Handles embedded systems, kernel modules, and performance-critical code. Use PROACTIVELY for C optimization, memory issues, or system programming.
opentrons-integration
Official Opentrons Protocol API for OT-2 and Flex robots. Use when writing protocols specifically for Opentrons hardware with full access to Protocol API v2 features. Best for production Opentrons protocols, official API compatibility. For multi-vendor automation or broader equipment control use pylabrobot.
pylabrobot
Vendor-agnostic lab automation framework. Use when controlling multiple equipment types (Hamilton, Tecan, Opentrons, plate readers, pumps) or needing unified programming across different vendors. Best for complex workflows, multi-vendor setups, simulation. For Opentrons-only protocols with official API…
agent-upkeep
Perform one small, scoped maintenance improvement to the Elements monorepo and open a single reviewable pull request. Use this skill for scheduled or unattended upkeep runs that improve unit test coverage for one file, fix one behavioral bug in one module, or move one off ESLint rule toward enforcement to reduce…
unifly
Inspect and manage UniFi Network infrastructure with the unifly CLI: devices, clients, VLANs, WiFi, firewall, VPN, switch ports, site settings, and cloud fleets. Use for UniFi network configuration, monitoring, and troubleshooting, not UniFi Protect camera or recording management.