Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add datarobot-oss/datarobot-agent-skills --skill datarobot-workload-apigit clone --depth 1 https://github.com/datarobot-oss/datarobot-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/datarobot-oss/datarobot-agent-skills/datarobot-workload-api)<a href="https://agentmods.dev/skills/datarobot-oss/datarobot-agent-skills/datarobot-workload-api"><img src="https://agentmods.dev/badge/skills/datarobot-oss/datarobot-agent-skills/datarobot-workload-api/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/datarobot-oss/datarobot-agent-skills/datarobot-workload-api"><img src="https://agentmods.dev/badge/skills/datarobot-oss/datarobot-agent-skills/datarobot-workload-api.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 284 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00152 | $0.05018 |
| Opus 5 | $0.00076 | $0.02509 |
| Sonnet 5 | $0.00030 | $0.01004 |
| Haiku 4.5 | $0.00015 | $0.00502 |
Grade A, and why
datarobot-workload-api scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
**Transport.** Examples use Python `httpx` (`pip install httpx`). The API is plain HTTP, so equivalent calls work via `curl` or the `pulumi-datarobot` Pulumi provider declaratively. The skill teaches the model; transport How it starts
The opening of the file, as written. The whole thing — 342 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DataRobot Workload API
Run container images as managed, autoscalable services on DataRobot. One skill, four jobs — pick the section by user intent:
- Create / configure / scale — deploy a container; change replicas, resources, autoscaling, bundle; inject credentials
- Diagnose — workload is stuck, errored, or crash-looping
- Observe — logs, traces, metrics, service stats for a running workload
- Artifact lifecycle — iterate drafts, build images, lock for production, roll out new versions
Prerequisites
DATAROBOT_ENDPOINT (must end in /api/v2) and DATAROBOT_API_TOKEN must be set. Run datarobot-setup if not. Auth header: Authorization: Bearer ${DATAROBOT_API_TOKEN}. The Workload API is not in the datarobot Python SDK — call REST directly.
Transport. Examples use Python httpx (pip install httpx). The API is plain HTTP, so equivalent calls work via curl or the pulumi-datarobot Pulumi provider declaratively. The skill teaches the model; transport is interchangeable.
Bundled scripts
Runnable Python in scripts/ (this skill's folder). Each uses httpx and reads DATAROBOT_ENDPOINT + DATAROBOT_API_TOKEN:
wait_for_running.py <workload_id>— poll untilrunning; exit 2 on terminal failure, 3 on timeoutdiagnose_workload.py <workload_id>— run the 5-step debug flow, print a structured diagnosis (--jsonfor machine-readable)wait_for_build.py <artifact_id> <build_id>— poll a server-side image build; dumps last 2KB of logs onFAILEDwait_for_replacement.py <workload_id>— poll a rolling replacement; handles the 404-when-cleared casecheck_limits.py— print the user's effective org-set scaling limits via/account/info/
Deeper docs in references/
SKILL.md is the operational core; occasional detail lives in references/:
status-vocabulary.md— workload + proton status enums and transitionscommon-error-patterns.md— CrashLoopBackOff / ImagePullBackOff / OOMKilled / probe / exec-format / pendingschema-reference.md— schemas to look up, credential-type→key maps, public-spec path quirkslifecycle-flows.md— artifact draft→lock→prod rules, replacement preconditions, redeploy matrix,imageUrigotchascode-to-workload.md— deploy from source:drCLI,codeRef, Execution Environments, iterate-rebuild loopweb-uis-behind-the-edge.md— browser-facing web app through the endpoint: prefix stripping, auth gate,Authorizationhijack, shim, CSRF, WebSockets
What ships with it
11 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/code-to-workload.md 14 KB
- references/common-error-patterns.md 7.4 KB
- references/lifecycle-flows.md 6.9 KB
- references/schema-reference.md 5.0 KB
- references/status-vocabulary.md 4.3 KB
- references/web-uis-behind-the-edge.md 13 KB
- scripts/check_limits.py 2.8 KB runs code
- scripts/diagnose_workload.py 8.7 KB runs code
- scripts/wait_for_build.py 4.1 KB runs code
- scripts/wait_for_replacement.py 4.0 KB runs code
- scripts/wait_for_running.py 3.0 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 342 lines · 152 tokens per session scan A a67aab36bb72
datarobot-workload-api is a skill published in the GitHub repository datarobot-oss/datarobot-agent-skills (25 stars, last pushed yesterday), licensed Apache-2.0. It adds 152 tokens to every session and 5,018 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
offensive-container-escape
Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container breakout via host filesystem mount and nsenter, Docker socket abuse through /var/run/docker.sock, Linux capability exploitation including CAPSYSADMIN, CAPSYSPTRACE, and CAPNETADMIN, cgroup v1…
kubernetes
Use when deploying to or debugging Kubernetes. Covers workload configuration, resource requests and limits, probes, rollout strategy, networking, and the failure modes that produce CrashLoopBackOff and OOMKilled.
upstash-box-remote-work
Do work in an Upstash Box, a sandboxed cloud container driven through the remote Upstash MCP server (mcp.upstash.com), instead of on the local machine. Use when the user asks to run, build, test, clone, or edit something remotely, in a sandbox, in the cloud, or in a box, when the deliverable is a pull request, a…
kubectl
Execute kubectl commands to manage Kubernetes clusters — query pods and deployments, deploy applications, debug containers with logs and exec, update configurations, and monitor cluster health. Use when working with Kubernetes, asking for pod status, container logs, deployment updates, cluster diagnostics, or any…
gke-app-onboarding
Manages GKE application onboarding, covering containerization, deployment manifests, and migration. Use when onboarding or deploying an application to GKE for the first time, or containerizing an app for GKE. Don't use for general GKE cluster administration or upgrades (use gke-basics or gke-upgrades instead).
kubernetes-specialist
Use when deploying or managing Kubernetes workloads. Invoke to create deployment manifests, configure pod security policies, set up service accounts, define network isolation rules, debug pod crashes, analyze resource limits, inspect container logs, or right-size workloads. Use for Helm charts, RBAC policies…