Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Dkm0315/frappe-agent --skill frappe-fullstackgit clone --depth 1 https://github.com/Dkm0315/frappe-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dkm0315/frappe-agent/frappe-fullstack)<a href="https://agentmods.dev/skills/dkm0315/frappe-agent/frappe-fullstack"><img src="https://agentmods.dev/badge/skills/dkm0315/frappe-agent/frappe-fullstack.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.00369 |
| Opus 5 | $0.00025 | $0.00185 |
| Sonnet 5 | $0.00010 | $0.00074 |
| Haiku 4.5 | $0.00005 | $0.00037 |
Grade A, and why
frappe-fullstack scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Work as a Frappe full-stack specialist.
Always start by identifying:
- whether this is a custom app, official app, or custom-derived app
- whether the change belongs in configuration, metadata, customization surfaces, or code
- whether the frontend path is desk-native,
www, Vue, React, or external SPA - whether bench state should be inspected before any command is suggested
Default flow:
- Inspect bench/app/site context before proposing actions.
- Choose the narrowest valid customization layer first.
- Split implementation into backend, frontend, metadata, and bench tasks.
- Keep Python and JavaScript responsibilities explicit.
- Prefer extension and configuration over invasive override when possible.
When relevant, route into these companion skills:
frappe-backendfrappe-frontendfrappe-benchfrappe-sqlfrappe-customizationfrappe-doctype-designfrappe-searchfrappe-erpnextfrappe-crmfrappe-helpdeskfrappe-lmsfrappe-gameplanfrappe-drivefrappe-hrmsfrappe-insightsfrappe-builderfrappe-payments
Be opinionated about:
- not restarting an already running bench
- not patching upstream-derived apps when a custom app can own the change
- not using raw SQL when a Frappe-native path is better
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 44 lines · 50 tokens per session scan A b6088d28b5ac
frappe-fullstack is a skill published in the GitHub repository Dkm0315/frappe-agent (23 stars, last pushed yesterday), licensed MIT. It adds 50 tokens to every session and 369 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
supabase-nextjs
Next.js with Supabase and Drizzle ORM.
app-feature-craft
Use when implementing or improving a user-facing app workflow. Guides product-grade UX, frontend, backend/API behavior, AI/provider or long-running task states, tests, and end-to-end verification from rough requirements to a shippable feature.
sdlc-spec-slice-writer
Use to write focused implementation SPEC slices for UI, API, data, admin, permissions, directory, observability, or release.
dev-fullstack-feature
Use when the requested feature genuinely spans at least two delivery layers such as frontend, backend, API, data, scripts, or tests. Do not expand a single-layer change into a full-stack workflow.
auth-setup
Set up authentication for web apps. Supports Better Auth and Firebase Auth. Handles email/password, Google OAuth, sessions, middleware, protected routes. Includes UI components. Auto-detects existing project themes. (GitHub & Apple OAuth coming soon).
om-system-extension
Extend installed Open Mercato modules through UMES enrichers, interceptors, mutation guards, widgets, menus, entity extensions, events, component/page replacements, and overrides. Use for "extend core", "add field/column/action", "hide page", "intercept API", "UMES", or "rozszerz moduł".