Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/delexw/claude-code-misc/a2a-js-devnpx skills add delexw/claude-code-misc --skill a2a-js-devgit clone --depth 1 https://github.com/delexw/claude-code-miscWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00171 | $0.03983 |
| Opus 5 | $0.00086 | $0.01992 |
| Sonnet 5 | $0.00034 | $0.00797 |
| Haiku 4.5 | $0.00017 | $0.00398 |
Grade A, and why
a2a-js-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 541 lines — stays where its author put it; the contents beside it link to each section on GitHub.
A2A JavaScript/TypeScript SDK Development Guide
Build standards-compliant agent-to-agent applications using the @a2a-js/sdk. This guide covers server agents, clients, task management, streaming, and all three transport bindings.
Quick Reference
# Install the SDK
npm install @a2a-js/sdk
# For Express server integration
npm install express
# For gRPC support (Node.js only)
npm install @grpc/grpc-js @bufbuild/protobuf
Import paths:
import { AgentCard, Message, Task, AGENT_CARD_PATH } from '@a2a-js/sdk';
import { AgentExecutor, DefaultRequestHandler, InMemoryTaskStore } from '@a2a-js/sdk/server';
import { agentCardHandler, jsonRpcHandler, restHandler, UserBuilder } from '@a2a-js/sdk/server/express';
import { ClientFactory } from '@a2a-js/sdk/client';
import { GrpcTransportFactory } from '@a2a-js/sdk/client/grpc';
The SDK implements A2A Protocol Specification v0.3.0.
Architecture Overview
An A2A application has two sides:
- Server (Agent) — exposes capabilities via an Agent Card, handles incoming messages, manages tasks, and publishes events
- Client (Consumer) — discovers agents, sends messages, tracks tasks, and consumes streaming updates
The protocol supports three transport bindings. Each transport provides the same operations — pick based on your deployment needs:
| Transport | Client | Server | Notes |
|---|---|---|---|
| JSON-RPC | Yes | Yes | Default, works everywhere |
| HTTP+JSON/REST | Yes | Yes | RESTful, good for web clients |
| gRPC | Yes | Yes | Node.js only, high performance |
Building an A2A Server
Step 1: Define the Agent Card
The Agent Card is the identity and capability declaration for your agent. Other agents discover it at /.well-known/agent-card.json.
import { AgentCard } from '@a2a-js/sdk';
const agentCard: AgentCard = {
name: 'My Agent',
description: 'Describe what your agent does clearly.',
protocolVersion: '0.3.0',
version: '1.0.0',
url: 'http://localhost:4000/a2a/jsonrpc',
skills: [
{
id: 'skill-id',
name: 'Skill Name',
description: 'What this skill does',
tags: ['relevant', 'tags'],
},
],
capabilities: {
pushNotifications: false,
streaming: true,
},
defaultInputModes: ['text'],
defaultOutputModes: ['text'],
additionalInterfaces: [
{ url: 'http://localhost:4000/a2a/jsonrpc', transport: 'JSONRPC' },
{ url: 'http://localhost:4000/a2a/rest', transport: 'HTTP+JSON' },
],
};
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 541 lines · 171 tokens per session scan A fd104a3ecff1
a2a-js-dev is a skill published in the GitHub repository delexw/claude-code-misc (1 stars, last pushed 5mo ago), licensed MIT. It adds 171 tokens to every session and 3,983 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
terraform-skill
Use when working with Terraform or OpenTofu - creating modules, writing tests (native test framework, Terratest), setting up CI/CD pipelines, reviewing configurations, choosing between testing approaches, debugging state issues, implementing security scanning (trivy, checkov), or making infrastructure-as-code…
xlsx
当电子表格文件是主要输入或输出时使用此技能。这意味着用户想要:打开、读取、编辑或修复现有的 .xlsx、.xlsm、.csv 或 .tsv 文件(例如添加列、计算公式、格式化、制图、清理混乱数据);从头创建新的电子表格或从其他数据源创建;或在表格文件格式之间进行转换。当用户通过名称或路径引用电子表格文件时特别触发——即使是随意提及(如"我下载目录里的 xlsx")——并且想对其进行操作或从中生成内容。也适用于将混乱的表格数据文件(格式错误的行、错位的表头、垃圾数据)清理或重构为规范的电子表格。交付物必须是电子表格文件。当主要交付物是 Word 文档、HTML 报告、独立 Python 脚本、数据库管道或 Google Sheets…
terraform-cli-setup
Terraform CLI 安装与初始化技能。当用户本地未安装 Terraform 时自动完成安装,确保 terraform 命令可用并能执行 init/validate。不负责 Provider 凭证配置,凭证在实际使用时由 terraform-skill 引导。.
morph-ppt
Use this skill when the user wants a .pptx with smooth cross-slide animation — PowerPoint Morph transitions, Keynote-style continuous motion, shapes that grow / move / rotate as the slide advances. Trigger on: 'morph', 'morph transition', 'smooth transition', 'continuous animation across slides', 'Keynote-style…
officecli-word-form
Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document'…
oss-upload
Upload local files to Tencent COS (oss.1024code.com CDN) using coscli. Use when user wants to upload a file to CDN/OSS, or deploy static assets.