Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Elnora-AI/elnora-merit-aktiva --skill merit-company-lookupgit clone --depth 1 https://github.com/Elnora-AI/elnora-merit-aktivaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/elnora-ai/elnora-merit-aktiva/merit-company-lookup)<a href="https://agentmods.dev/skills/elnora-ai/elnora-merit-aktiva/merit-company-lookup"><img src="https://agentmods.dev/badge/skills/elnora-ai/elnora-merit-aktiva/merit-company-lookup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/elnora-ai/elnora-merit-aktiva/merit-company-lookup"><img src="https://agentmods.dev/badge/skills/elnora-ai/elnora-merit-aktiva/merit-company-lookup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00195 | $0.00869 |
| Opus 5 | $0.00097 | $0.00434 |
| Sonnet 5 | $0.00039 | $0.00174 |
| Haiku 4.5 | $0.00019 | $0.00087 |
Grade A, and why
merit-company-lookup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Merit Company Lookup — äriregister free services
Two FREE (tasuta), read-only services from the Estonian Business Register, exposed via
elnora-merit ariregister. Nothing here writes to the books or costs money.
When to use
- Before creating a customer/invoice — pull the authoritative legal name, VAT number, and address instead of typing them by hand or trusting a stale value.
- Before sending an e-invoice — confirm the recipient actually has an active e-invoice channel, so you don't send into a void.
Commands
Requisites (needs credentials)
elnora-merit ariregister requisites <regCode> [--include-deleted] [--lang eng]
Returns JSON: regCode, name, vatNo, status, statusText, address {street, ehakCode, ehakText, postalIndex}, registryLink. status R = registered/active; K = deleted.
Example:
$ elnora-merit ariregister requisites 16818352
{"regCode":"16818352","name":"Elnora AI OÜ","vatNo":"EE102672514","status":"R", ...}
E-invoice capability (no credentials)
elnora-merit ariregister e-invoice-check <regCode> [<regCode> ...]
One row per code: status OK = active e-invoice relationship (canReceiveEInvoice: true),
MR = none/invalid; plus name and provider (operator).
Mapping requisites to a Merit customer
| äriregister field | Merit customer field |
|---|---|
name |
Name |
vatNo |
VatRegNo |
regCode |
RegNo |
address.street |
Address |
address.ehakText |
City / County |
address.postalIndex |
PostalCode |
Setup & limits
- Requisites needs
ARIREG_XML_USER/ARIREG_XML_PASSWORDin the environment or~/.config/elnora-merit/.env. Create an XML-authorised user in the e-äriregister portal (Haldus → Kasutajate haldamine) and use that account's credentials. A "credential rejected" error means they are missing or wrong. - E-invoice-check needs no credentials at all.
- Only these two free services are wired. Detailed company data, beneficial owners, and representation rights are billable in the register and are intentionally not exposed.
- Endpoint defaults to production; set
ARIREG_XML_ENV=testto hit the demo endpoint.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 76 lines · 195 tokens per session scan A 64625a19cb07
merit-company-lookup is a skill published in the GitHub repository Elnora-AI/elnora-merit-aktiva (8 stars, last pushed 5d ago), licensed Apache-2.0. It adds 195 tokens to every session and 869 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
handelsregister
Search the German commercial register (Handelsregister), download registry documents for a company — Gesellschafterliste (shareholder list), Gesellschaftsvertrag (articles of association), current/chronological printouts (AD/CD), structured XML (SI) — and query date-based Registerbekanntmachungen…
atmos-aws-compliance
AWS compliance commands in Atmos: atmos aws compliance report, Security Hub standards, CIS AWS, PCI DSS, SOC2, HIPAA, NIST, report formats, AI summaries.
app-store-preflight-compliance
Pre-submission compliance scanner workflow for Apple App Store apps. Use when reviewing iOS, macOS, tvOS, watchOS, or visionOS projects (Swift, Objective-C, React Native, Expo) for App Store rejection risks, submission readiness, privacy compliance, or guideline violations.
plagiarism-checker
Scans lyrics for phrases that may match existing songs using web search and LLM knowledge. Use before release to check for unintentional borrowing.
alive:demo
Generate a believable, lived-in ALIVE world from a free-text persona description (custom path) or a deterministic sandbox preset. Routes the create/list/activate/deactivate/delete/status surface and orchestrates the 5-stage subagent generation pipeline.
sync-check
Walks the documentation dependency web after a CLI code change and reports which downstream files (skills, SOPs, READMEs, plugin references) are out of sync. Use after fixing a bug, adding a command, changing auth behavior, refactoring, or before committing — and when the user says "sync check", "update docs"…