Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add diagrid-labs/dapr-skills --skill create-workflow-pythongit clone --depth 1 https://github.com/diagrid-labs/dapr-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/diagrid-labs/dapr-skills/create-workflow-python)<a href="https://agentmods.dev/skills/diagrid-labs/dapr-skills/create-workflow-python"><img src="https://agentmods.dev/badge/skills/diagrid-labs/dapr-skills/create-workflow-python/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/diagrid-labs/dapr-skills/create-workflow-python"><img src="https://agentmods.dev/badge/skills/diagrid-labs/dapr-skills/create-workflow-python.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 47 Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.Fix: Pin the image: image:tag or image@sha256:abc123
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00049 | $0.02333 |
| Opus 5.5 | $0.00020 | $0.00933 |
| Sonnet 5.5 | $0.00010 | $0.00467 |
| Haiku 4.5 | $0.00005 | $0.00233 |
Grade A, and why
create-workflow-python scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
5. List the available endpoints in the main.py file and provide examples how to call these using curl. Also include a link to the `local.http` file. How it starts
The opening of the file, as written. The whole thing — 168 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Create Dapr Workflow Python Application
Overview
This skill describes how to create a Dapr Workflow application using Python.
Execution Order
You MUST follow these phases in strict order:
- Check specification - Check if the user specified what needs to be built.
- Check optional tools — Check whether the Diagrid Dapr Dev Dashboard is installed and remember the result. Never stop, ask or install for this.
- Project Setup — Create all files and folders.
- Verify — Verify that the project builds.
- Create README.md — Create a readme that summarizes what is built and how to run & test the application. Do not provide instructions at the end of this phase.
- Show final message - Your LAST output MUST be EXACTLY the message defined in the
## Show final messagesection: the closing sentence followed by the Dev Dashboard recommendation. Do NOT add any other text, summary, or commentary.
Check specification
If you don't have enough context what to build, ask the user the following clarifying questions one by one using an interview style:
- What is the purpose of the workflow application?
- Describe how workflow should work. Which patterns should be used?
- Specify the input and output objects of the workflow.
- What's the name of this project? This will be used as the folder name. Don't use any spaces in this name.
Resolving the names
Before creating any file, write out the resolved names and restate them to the user in two or three lines,
so a wrong reading is caught before it is scaffolded. Resolve them exactly as
../dapr-shared/workflow-placeholders.md defines them:
<WorkflowName> from the purpose, <WorkflowInput> and <WorkflowOutput> from its stem, and one
<ActivityName> per step with its <ActivityInput> and <ActivityOutput>.
Prerequisites
The following must be installed by the user before this skill can run:
- Python 3.12+ (
uv venvuses the newest interpreter it finds; pin one withuv venv --python 3.12when you need a specific version) - uv (Astral)
- Docker or Podman
- Dapr CLI
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · -1 lines · -27 tokens per session 71cca6e731ed
- 4d ago Changed · +14 lines ef84534ca59e
- 5d ago Changed · +29 tokens per session c1dc67fcc3f8
- 6d ago Changed · +8 lines 02241ccf7ff7
- 1mo ago First seen · 147 lines · 47 tokens per session scan A ef9567bbd993
create-workflow-python is a skill published in the GitHub repository diagrid-labs/dapr-skills (13 stars, last pushed 2d ago), licensed MIT. It adds 49 tokens to every session and 2,333 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
django
Use when building Django applications. Covers ORM query performance, model design, migrations, Django REST Framework, security defaults, and testing. Trigger on "django view is slow", "too many queries from the orm", "add a drf endpoint", "migration on a big table". Do not use for API contract decisions independent of…
fastapi
Use when building APIs with FastAPI. Covers dependency injection, Pydantic v2 validation, async database access, authentication, background tasks, and testing. Trigger on "fastapi endpoint is slow under load", "set up depends for the db session", "pydantic v2 validation error", "test my fastapi app". Do not use for…
django-expert
Use when building Django web applications or REST APIs with Django REST Framework. Invoke when working with settings.py, models.py, manage.py, or any Django project file. Creates Django models with proper indexes, optimizes ORM queries using selectrelated/prefetchrelated, builds DRF serializers and viewsets, and…
fastapi-expert
Use when building high-performance async Python APIs with FastAPI and Pydantic V2. Invoke to create REST endpoints, define Pydantic models, implement authentication flows, set up async SQLAlchemy database operations, add JWT authentication, build WebSocket endpoints, or generate OpenAPI documentation. Trigger terms…
beautifulsoup-parsing
Expert guidance for HTML/XML parsing using BeautifulSoup in Python with best practices for DOM navigation, data extraction, and efficient scraping workflows.
odoo-development
Expert guidance for Odoo ERP development including Python ORM, XML views, and module architecture.