Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/fergana-labs/stash/staticnpx skills add Fergana-Labs/stash --skill staticgit clone --depth 1 https://github.com/Fergana-Labs/stashWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.02302 |
| Opus 5 | $0.00000 | $0.01151 |
| Sonnet 5 | $0.00000 | $0.00460 |
| Haiku 4.5 | $0.00000 | $0.00230 |
Grade A, and why
static scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -X POST {{BASE_URL}}/api/v1/users/register \ How it starts
The opening of the file, as written. The whole thing — 245 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Stash — Files, Skills, and Memory System
Concept: Your Stash and Skills
Stash is your personal home for agent work. Everything you create is scoped to your account — it is yours alone, with nothing to pick or set up first. Your Stash has three primary surfaces:
- Sessions — agent transcripts uploaded under
/api/v1/me/sessions. - Files — folders, markdown pages, HTML pages, uploads, and tables.
- Skills — modules of agent-usable knowledge: local SKILL.md folders and shareable bundles of sessions and Files.
To give your agents a skill, create a Files folder whose immediate children
include a file named SKILL.md. The body of SKILL.md starts with YAML
frontmatter:
---
name: dd-respond
description: Draft response packets to investor diligence asks
when_to_use: When an investor sends a DD checklist
version: 2.1
mcp_exposed: true
---
The folder may contain any number of supporting .md files (examples.md,
checklist.md, etc.) — they all become part of the skill payload. Stash
exposes skills via:
GET /api/v1/me/skills— list your skillsGET /api/v1/me/skills/{name}— full skill (SKILL.md + siblings)- MCP:
stash_list_skills,stash_read_skill
This is the same skills convention Claude Code uses, so a skill authored in
Stash works directly when dropped into any agent's ~/.claude/skills/ folder.
Overview
Stash is the product surface for you and your agents.
It provides:
- pages organized in nestable folders
- tables (typed columns, rows, CSV import/export, semantic row search)
- session events (with file attachments)
- file uploads (S3-backed; PDF/image text extraction when available)
- Skills for publishing sets of pages, sessions, and files
Design boundary:
- Stash owns persistent state and plugin-based memory access
- external orchestration layers own multi-agent delegation
- Claude-session memory access should go through the Stash plugin, not side-channel polling
Base URL
{{PUBLIC_URL}}
Authentication
All endpoints (except registration and a few public lookups) require an API key:
Authorization: Bearer st_xxxxxxxxxxxxx
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 245 lines · 0 tokens per session scan A 71ac199d1786
static is a skill published in the GitHub repository Fergana-Labs/stash (327 stars, last pushed 3d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 2,302 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
creating-skills
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Letta Code's capabilities with specialized knowledge, workflows, or tool integrations.
creating-claude-agents
Use when creating or improving Claude Code agents. Expert guidance on agent file structure, frontmatter, persona definition, tool access, model selection, and validation against schema.
creating-agent-skills-skill
Use when creating Agent Skills packages (SKILL.md format) for Codex CLI, GitHub Copilot, or Amp - provides the agentskills.io specification with frontmatter constraints, directory structure, and validation rules.
converting-mcps-to-skills
Connect to MCP (Model Context Protocol) servers and create skills for repeated use. Load when a user wants to use an MCP server, connect to external tools via MCP, or when they mention MCP, model context protocol, or specific MCP servers.
packmind-create-skill
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends GitLab Duo's capabilities with specialized knowledge, workflows, or tool integrations.
create-plugin
Create an OpenCode plugin for iPolloWork. Scaffolds the plugin file with the correct API shape, tool definitions, and hook registration. Use when the user asks to 'create a plugin', 'write a plugin', or 'make a plugin that does X'.