Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/dewtech-technologies/dare-method/skill-rails-apinpx skills add dewtech-technologies/dare-method --skill skill-rails-apigit clone --depth 1 https://github.com/dewtech-technologies/dare-methodWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00066 | $0.02867 |
| Opus 5 | $0.00033 | $0.01434 |
| Sonnet 5 | $0.00013 | $0.00573 |
| Haiku 4.5 | $0.00007 | $0.00287 |
Grade A, and why
skill-rails-api scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 394 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DARE Rails API Skill
Você é um desenvolvedor sênior Ruby on Rails 8.x especializado em APIs. Seu objetivo é gerar código idiomático Rails, com Layered Design, Solid Queue/Cable, serializers explícitos e auth/autz robustos.
Quando usar
- Projeto Rails 8 API novo via DARE
- Adicionar feature em API Rails existente
- Migrar de Rails 7 → 8 (incluindo Solid Queue + Solid Cable)
- Auditar projeto Rails para conformidade DARE
Stack canônica
- Ruby 3.3+
- Rails 8.x modo API (
rails new --api) - PostgreSQL 16
- Solid Queue (substitui Sidekiq/DelayedJob — built-in Rails 8)
- Solid Cable (substitui Redis para Action Cable — built-in Rails 8)
- Devise ou JWT puro (devise-jwt) para auth
- Pundit ou CanCanCan para autorização
- Blueprinter ou Alba para serializers (substituem Jbuilder em APIs)
- rack-attack para rate limit
- rswag para OpenAPI/Swagger
- RSpec + FactoryBot + Faker
- Rubocop + rubocop-rails-omakase (estilo oficial Rails)
- bundler-audit para CVEs
Layered Design em Rails
Mapeamento DARE → Rails:
| Camada DARE | Pasta Rails |
|---|---|
| Handler | app/controllers/api/v1/ |
| Service | app/services/ (ou app/interactors/) |
| Repository | app/repositories/ (opcional — Rails usa AR direto frequentemente) |
| Model | app/models/ |
| Presenter | app/serializers/ ou app/blueprints/ |
Em Rails 8 API, Repositories são opcionais — ActiveRecord queries em Services é comum quando bem encapsulado.
Controllers (Handler)
# app/controllers/api/v1/users_controller.rb
module Api
module V1
class UsersController < ApplicationController
before_action :authenticate_user!
def create
result = RegisterUser.call(params: user_params)
if result.success?
render json: UserBlueprint.render(result.user), status: :created
else
render json: { error: result.error_code }, status: :conflict
end
end
private
def user_params
params.require(:user).permit(:email, :name, :password)
end
end
end
end
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 394 lines · 66 tokens per session scan A 64a81abf7d92
skill-rails-api is a skill published in the GitHub repository dewtech-technologies/dare-method (5 stars, last pushed 1mo ago), licensed MIT. It adds 66 tokens to every session and 2,867 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
write-test-plan
Generate a QA/UAT test plan from product specifications and task definitions, covering acceptance testing, integration flows, and exploratory testing. Unit tests are out of scope (handled by write-unit-tests skill).
implement-telegram-bot
Implement Telegram bot interactions with command handlers, message parsing, and inline keyboards for conversational interfaces.
setup-background-job
Set up scheduled background jobs using Quartz.NET with proper configuration, error handling, and dependency injection.
write-unit-tests
Write comprehensive unit tests with proper setup, assertions, and coverage of happy paths, edge cases, and error scenarios.
blazor-component-design
Design Blazor components with proper parameter binding, event callbacks, lifecycle management, and render optimization. Use when creating new Blazor Server or WASM components, refactoring component hierarchies, implementing cascading values, or optimizing component rendering performance.
hedgehog-planning-intake
Use on any core for first-run planning intake — Phase 0 runs the vendored BMAD-METHOD planning shelf, shared by every core, and Phase 1 (mining 04-prd.md into intent records plus the Add-ons/sync-and-remote-entities decision) is full-stack-app's and pwa-app's shared procedure — identical mechanics, a different…