Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/filipebraida/adonisjs-starter-kit/attachmentnpx skills add filipebraida/adonisjs-starter-kit --skill attachmentgit clone --depth 1 https://github.com/filipebraida/adonisjs-starter-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/filipebraida/adonisjs-starter-kit/attachment)<a href="https://agentmods.dev/skills/filipebraida/adonisjs-starter-kit/attachment"><img src="https://agentmods.dev/badge/skills/filipebraida/adonisjs-starter-kit/attachment.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00107 | $0.01486 |
| Opus 5 | $0.00053 | $0.00743 |
| Sonnet 5 | $0.00021 | $0.00297 |
| Haiku 4.5 | $0.00011 | $0.00149 |
Grade A, and why
attachment scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Attachment
File uploads are managed by @jrmc/adonis-attachment. A Lucid model declares an attachment field with @attachment({...}); uploads produce a stored file plus derived variants (thumbnails, previews, formats) driven by named converters in config/attachment.ts. Actions accept a MultipartFile from a validated form and call attachmentManager.createFromFile(file) to assign it. Storage is Drive (fs locally, S3-family in prod). URLs are pre-computed on read via a static model helper — always call it before serializing to Inertia so the frontend gets a real URL, not undefined.
Rules
- Field on model: decorate with
@attachment({ preComputeUrl: false, variants: [...] })and type asAttachment:@attachment({ preComputeUrl: false, variants: ['thumbnail'] }) declare avatar: AttachmentpreComputeUrl: falsekeeps model reads cheap — URLs are computed on demand by the static helper. - Converters live in
config/attachment.tsas a keyed record. Each converter declares options (resize, format, etc.). The variant names in@attachment({ variants: [...] })reference those keys. - Declaration merge happens in the config file's
declare module '@jrmc/adonis-attachment'block — that's how TypeScript knowsvariants: ['thumbnail']is a valid key. - Validate uploads with VineJS
vine.file({...}):avatar: vine.file({ extnames: ['png', 'jpg', 'jpeg', 'gif'], size: 1 * 1024 * 1024 }).nullable() - Persist inside an action — the action takes a
MultipartFile(notHttpContext) and delegates to the manager:
See [[actions-events]] for the "no HttpContext in actions" rule.if (input.avatar) { input.target.avatar = await attachmentManager.createFromFile(input.avatar) } - Pre-compute URLs before serialization. Call the model's static helper on the loaded row (or list) before running the Transformer:
The Transformer variant reads the pre-computed URL from the loaded variant.await User.preComputeUrls(users) return inertia.render('users/index', { users: UserTransformer.paginate(users, meta).useVariant('forList'), }) - Fallback URL: Transformers usually resolve
variant.url ?? this.resource.<remoteUrl>so an externally-hosted URL (social-auth avatar, S3 direct link) works when no local upload exists. - Drive config picks the disk (
fs,s3,gcs, …). TheDRIVE_DISKenv var selects it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 113 lines · 107 tokens per session scan A 82d51126a0dc
attachment is a skill published in the GitHub repository filipebraida/adonisjs-starter-kit (95 stars, last pushed 26d ago), licensed MIT. It adds 107 tokens to every session and 1,486 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
coss-particles
Index of all COSS UI particle examples. Use when implementing UI features to find copy-paste-ready component patterns built on coss primitives. Each particle has a description and a JSON URL for easy installation.
coss
Helps implement coss UI components correctly. Use when building UIs with coss primitives and patterns (buttons, dialogs, selects, forms, menus, tabs, segmented controls, inputs, toasts, etc.), migrating from shadcn/Radix to coss/Base UI, composing trigger-based overlays, or troubleshooting coss component behavior.…
ui-beats
Use this skill when users want to add, customize, or troubleshoot UI Beats components in React/Next.js projects. It covers component selection, shadcn registry installation from uibeats.com, the UI Beats MCP server, motion and reduced-motion handling, and integration patterns for animated sections.
morphous-catalog
Create or refresh Morphous website design-system/theme bundles from animal, insect, plant, landscape, mineral, weather, or other nature motifs. Use when Codex is asked to generate Morphous motif images, light/dark design-system boards, reusable image prompts, generated web assets, shadcn/tweakcn theme exports, or the…
ktui
Comprehensive guide to KtUI (Keenthemes Tailwind UI) — components, theming, initialization, data-attribute API, event system, helpers, and common patterns. Use this skill when building UI with KtUI, adding/customizing components, working with KtUI theming/colors/dark-mode, or when the user mentions KtUI, ktui…
ktui-datatable
KtUI DataTable (KTDataTable) — local/remote data, sorting, filtering, pagination, checkbox selection, state persistence, fixed layouts, event system, and architecture. Use this skill when building, debugging, or customizing DataTable components.