Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/dork-labs/dorkosnpx agentmods add skills/dork-labs/dorkos/marketplace-devWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dork-labs/dorkos/marketplace-dev)<a href="https://agentmods.dev/skills/dork-labs/dorkos/marketplace-dev"><img src="https://agentmods.dev/badge/skills/dork-labs/dorkos/marketplace-dev/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dork-labs/dorkos/marketplace-dev"><img src="https://agentmods.dev/badge/skills/dork-labs/dorkos/marketplace-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Rogue Agent · line 14 Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.Fix: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime.
- high Rogue Agent · line 272 Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.Fix: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime.
- medium Prompt Injection · line 261 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
- medium Rogue Agent · line 272 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.04908 |
| Opus 5.5 | $0.00022 | $0.01963 |
| Sonnet 5.5 | $0.00011 | $0.00982 |
| Haiku 4.5 | $0.00006 | $0.00491 |
Grade A, and why
marketplace-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 27d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 420 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Marketplace Package Development
Build packages that work for both DorkOS and Claude Code. Every package must pass dorkos package validate before submission. Claude Code compatibility of the whole marketplace is not verified end to end, so package copy never claims "works with any Claude Code setup".
An agent package ships a co-worker, not an assistant: its persona and description state the agent's job (what it owns and who it works with), so the person who installs it, and the agents beside it, can read what it does.
When to Use
| Signal | Example | Action |
|---|---|---|
| Creating a new marketplace item | "create a code-review agent for the marketplace" | Scaffold with dorkos package init, fill manifest, write skills |
| Working in the marketplace repo | Any work in dork-labs/marketplace |
Follow same-repo monorepo conventions (ADR-0237) |
| Building a personal package | "I want to make a skill pack for my workflow" | Scaffold in ~/.dork/personal-marketplace/packages/ |
| Fixing validation errors | dorkos package validate fails |
Diagnose using issue codes below |
| Adding to the registry | "publish this to the marketplace" | Add entries to marketplace.json + dorkos.json sidecar |
Package Types
There are exactly 5 types. Choose based on what the package delivers:
| Type | What It Is | Has .claude-plugin/plugin.json? |
Key Directories |
|---|---|---|---|
agent |
Reusable agent definition with persona, skills, tasks | No | .claude/skills/, .dork/tasks/ |
plugin |
Claude Code extension with commands, hooks, UI | Yes | skills/, hooks/, commands/ |
skill-pack |
Bundle of SKILL.md files providing reusable expertise | Yes | skills/ |
adapter |
Integration bridge (relay transport, mesh discovery) | Yes | .dork/adapters/ |
shape |
A "place" composing packages, agents, schedules, and chrome | Yes | extensions/ |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 27d ago Changed · +2 lines ebb986f3c47f
- 1mo ago Changed 9dfeb27259bc
- 1mo ago Changed · +10 lines 01e908cb3c4a
- 2mo ago First seen · 408 lines · 55 tokens per session scan A 44d51db4bd9c
marketplace-dev is a skill published in the GitHub repository dork-labs/dorkos (12 stars, last pushed today), licensed MIT. It adds 55 tokens to every session and 4,908 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
hive.slack-notifications-setup
Set up a Slack notification channel (Sentinel) for a colony by driving the browser — reuse or create the "Hive Sentinel" Slack app from a JSON manifest, install it, capture the bot + app tokens, create/select the channel via the Slack API, and turn Sentinel on so the colony can ping the user on Slack and accept…
hive.pdf
Read, write, merge, split, rotate, watermark, encrypt, and OCR PDF files using Python (pypdf, pdfplumber, reportlab, pypdfium2) and command-line tools (poppler-utils, qpdf). Use when the user asks to extract text/tables/images from a PDF, create or modify a PDF, combine or split PDFs, OCR a scanned PDF…
hive.note-taking
Maintain a free-form scratchpad of decisions, extracted values, and open questions so context pruning doesn't lose anything you still need.
returns-policy
Answer return, refund, and warranty questions for electronics. Use when the user mentions returns, refunds, RMAs, warranty coverage, damaged items, or opened packaging.
technical-troubleshooting
Provide setup, troubleshooting, and maintenance guidance. Use when the user reports a device that won't power on, connectivity issues, setup questions, overheating, or maintenance concerns.
Vizra ADK Evaluation Framework
Test and evaluate AI agents with automated evaluations, assertions, and LLM-as-a-Judge patterns.