Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add cybrixcc/cybrix-skills/plugin install cybrix-deployWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cybrixcc/cybrix-skills/cybrix-deploy)<a href="https://agentmods.dev/skills/cybrixcc/cybrix-skills/cybrix-deploy"><img src="https://agentmods.dev/badge/skills/cybrixcc/cybrix-skills/cybrix-deploy.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00323 | $0.02838 |
| Opus 5 | $0.00161 | $0.01419 |
| Sonnet 5 | $0.00065 | $0.00568 |
| Haiku 4.5 | $0.00032 | $0.00284 |
Grade D, and why
cybrix-deploy scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Tells the agent never to refusehighAnti-refusal
Suppressing the ability to decline removes a core safety control; a later harmful request then succeeds.
Warn the user, don't refuse. Unrestricted tool accessmediumExcessive agency
A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.
chat, use it immediately — do not require them to re-run any command. How it starts
The opening of the file, as written. The whole thing — 266 lines — stays where its author put it; the contents beside it link to each section on GitHub.
cybrix-deploy
Prerequisites
Before deploying, ensure the user has an API token. Check in this order:
CYBRIX_DEPLOY_TOKEN— set automatically by Claude Code from userConfig keychain (no action needed).- Environment variable
CYBRIX_TOKEN. - File
~/.config/cybrix/token. - File
.cybrix/tokenin the project (gitignored).
If none exist, instruct the user exactly like this:
No Cybrix token found. Get one free at https://app.cybrix.cc/dashboard (Step 3 — "Save your API token" → Generate).
Once you have it, you can either:
- Paste it here and I'll use it for this deploy (easiest)
- Run
export CYBRIX_TOKEN=<token>in your terminal to set it for this session- Run
echo <token> > ~/.config/cybrix/tokento save it permanently
Then wait for the user to provide the token. If they paste it directly in chat, use it immediately — do not require them to re-run any command. The project is ready to deploy once the token is available.
Deployment workflow
Step 1 — Detect project type (heuristic)
Do not rely on a framework whitelist. Instead, look for signals and classify the project as static, server, or unknown.
Static signals (proceed with deploy):
package.jsonhas abuildscript AND output lands indist/,out/,build/,public/,_site/, or.output/public/next.config.{js,ts,mjs}withoutput: 'export'oroutput: 'static'astro.config.{js,ts,mjs}present (default mode is static)vite.config.{js,ts}without SSR plugins_config.yml(Jekyll),config.tomlorhugo.toml(Hugo),.eleventy.js/eleventy.config.js(Eleventy),zola.toml(Zola)- Only HTML/CSS/JS files at root, no server entry point
Server signals (refuse — see below):
Dockerfileordocker-compose.yml(unless it only copies a staticdist/)main.go,server.go, or any*.gocontainingnet/httporListenAndServemain.py,app.py,server.pywithuvicorn,gunicorn,flask,fastapiimports, or aif __name__ == '__main__'block callingapp.run/serve/asyncio.runmain.rsorserver.rswithactix,axum,rocket,warp, ortokio::mainpackage.jsonwith astartscript that runsnode/tsx/bunon a server file (NOTnext startin a static-export config)Gemfilewithpuma,unicorn,rails, orsinatrapom.xmlorbuild.gradlewithspring-boot.csprojwith ASP.NET
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 266 lines · 323 tokens per session scan D ff84ac1f7ed9
cybrix-deploy is a skill published in the GitHub repository cybrixcc/cybrix-skills (79 stars, last pushed 4mo ago), licensed MIT. It adds 323 tokens to every session and 2,838 once invoked, about $0.0016 per session on Opus 5. A static security scan graded it D with 2 findings (tells the agent never to refuse, unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
flow-nexus-platform
Comprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challenges.
deploy-site
Deploys an existing Power Pages code site to a Power Pages environment using PAC CLI. Handles tooling verification, authentication, environment confirmation, building, and uploading. Use when the user wants to deploy, upload, or publish their code site.
activate-site
Activates and provisions a Power Pages website in a Power Platform environment via the Power Platform REST API. Use when the user wants to activate, provision, turn on, or enable a Power Pages website or portal.
deploy
Builds and deploys a Power Apps code app to Power Platform. Use when deploying changes, redeploying an existing app, or pushing updates.
ecspresso
ECS deployment tool - deploy, manage, and troubleshoot ECS services.
securing-helm-chart-deployments
Secure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.