Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/felipefontoura/bento/installnpx skills add felipefontoura/bento --skill installgit clone --depth 1 https://github.com/felipefontoura/bentoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/felipefontoura/bento/install)<a href="https://agentmods.dev/skills/felipefontoura/bento/install"><img src="https://agentmods.dev/badge/skills/felipefontoura/bento/install.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00089 | $0.04607 |
| Opus 5 | $0.00044 | $0.02303 |
| Sonnet 5 | $0.00018 | $0.00921 |
| Haiku 4.5 | $0.00009 | $0.00461 |
Grade A, and why
install scanned grade A with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootlowPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
| SSH user | default `root`; ask if otherwise | has sudo or is root | Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
bash <(curl -sSL https://raw.githubusercontent.com/felipefontoura/bento/${BENTO_REF:-stable}/boot.sh)" How it starts
The opening of the file, as written. The whole thing — 308 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are operating an installer the user has trusted you with on a remote machine. Confirm scope before destructive actions. This skill chooses to be loud about what it is doing — narrate before every state-changing step, dump enough output to be auditable, and stop on anything that smells off rather than guess.
When to invoke
The user says something like:
- "install bento on
<host>with<apps>" - "set up paperclip + n8n + chatwoot on my new VPS"
- "bootstrap a bento deployment on
<ip>"
Or names this skill explicitly: /bento:install.
If the user asks a question about bento without asking you to install (e.g. "what does Step 1 do?"), this is the wrong skill — answer from CLAUDE.md instead.
Sibling skills in this plugin — route to them instead when the VPS already runs bento:
/bento:deploy— add or redeploy apps on a server that already has bento./bento:update— pull the latest bento and redeploy managed stacks./bento:status— read-only health check of a bento VPS./bento:auth— register AI-provider API keys on a bento VPS.
This skill (install) is only for the first run on a fresh host.
Inputs to gather
Before you touch the VPS, you need:
| Input | Source | Validation |
|---|---|---|
| VPS host | user message; ask if missing | reachable via SSH |
| SSH user | default root; ask if otherwise |
has sudo or is root |
BENTO_BASE_DOMAIN |
user message; ask if missing | matches ^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$ |
BENTO_ADMIN_EMAIL |
user message; default admin@<base_domain> |
matches email regex |
BENTO_APPS |
user message (CSV) | each value matches a directory under stacks/app/ on BENTO_REF |
BENTO_REF |
default stable; ask only if user wants main or a feature branch |
branch exists on felipefontoura/bento |
BENTO_ADVERTISE_ADDR |
default: probed via bento_detect_public_ipv4 on the VPS |
matches IPv4 regex |
Use AskUserQuestion for anything missing. Don't guess a domain or email.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 308 lines · 89 tokens per session scan A c05416de5c9a
install is a skill published in the GitHub repository felipefontoura/bento (20 stars, last pushed 1mo ago), licensed MIT. It adds 89 tokens to every session and 4,607 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
nvcf-self-managed-installation
Install and operate NVCF self-hosted control-plane and separate compute-plane stacks. Covers Helmfile values and CLI profile installation flows, teardown, values overrides, pull secrets, and troubleshooting. Use for nvcf-self-managed-stack, nvcf-compute-plane-stack, split compute-plane installation, control-plane…
nvcf-self-managed-prerequisite
Install the prerequisites the NVCA operator / compute plane needs before nvcf-nvca-install can succeed: the operator tool nvcf-cli (required by the compute-plane stack's register-cluster step), KAI Scheduler (for the KAIScheduler feature gate), and the SMB CSI driver (for the sharedStorage Samba sidecar PVCs). The two…
portal-relay
Set up and run a public Portal relay on any Linux host with a public IP — Docker Compose deployment, embedded authoritative DNS with one-time NS delegation, optional TCP/UDP lease ports for game hosting, and registration in the public relay pool. Use when the user asks to run their own relay, contribute a relay to the…
analyze-cloud-costs
Analyze Langfuse Cloud infrastructure cost structure using Metabase cost marts. Use when asked about cloud spend, AWS versus ClickHouse cost splits, cost drivers by provider/service/usage type/account, daily cost per tracing event, infra cost dashboards, or cost regressions visible in Metabase.
olares-chart
Olares app packaging and chart authoring via olares-cli chart — port a repo, docker-compose, or generic Helm chart; build/push the image; author, lint, package, and deploy an OlaresManifest; wire storage, middleware, entrances, env, and GPU; edit the chart after diagnosis. Runtime failure diagnosis is olares-doctor…
portal-expose
Expose, preview, protect with x402 payments, or keep a local web app, static site, HTTP route set, or explicitly requested TCP/UDP service reachable through Portal, then verify the public endpoint and report its lifecycle. Use when the user asks to deploy, publish, share, tunnel, expose, create a public preview, add a…