agentmods.dev

api-surface

Show all public exports from the vlist package to catch accidental API changes.

Skill for Claude CodeCodex

16 1mo ago A scan 18 tokens MIT
View the source file floor/vlist
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/floor/vlist/api-surface
Any agent
npx skills add floor/vlist --skill api-surface
Clone the repo
git clone --depth 1 https://github.com/floor/vlist

Made for: Claude Code, Codex.

Per session 18 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 319 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00018 $0.00319
Opus 5 $0.00009 $0.00160
Sonnet 5 $0.00004 $0.00064
Haiku 4.5 $0.00002 $0.00032

Measured today against content hash 434f2165dc4f, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

api-surface scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/api-surface/SKILL.md · 51 lines

What it actually says

API Surface Check

List all public exports from the vlist package.

Context

  • Main entry: !cat src/index.ts
  • Internals entry: !cat src/internals.ts 2>/dev/null || echo "no internals.ts"

Instructions

  1. Parse src/index.ts and src/internals.ts to list every public export.

  2. Categorize exports:

    • Functions — factory functions like vlist, withGrid, etc.
    • Types — TypeScript type/interface exports
    • Constants — exported constant values
    • Classes — any exported classes

  3. Output format:

    ## Public API (src/index.ts)

### Functions
- `vlist(config)` — Builder factory
- `withGrid(config)` — Grid layout feature
...

### Types
- `VList<T>` — Main instance interface
- `BuilderConfig` — Configuration options
...

### Constants
- `OVERSCAN` — Default overscan count (3)
...

## Internals (src/internals.ts)
...

  4. For each feature factory function (with*), note its config type if one exists.

  5. Flag anything that looks like it might be accidentally exported (internal helpers, underscore-prefixed, etc.).

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 51 lines · 18 tokens per session scan A 434f2165dc4f

Subscribe to this mod's changes

api-surface is a skill published in the GitHub repository floor/vlist (16 stars, last pushed 1mo ago), licensed MIT. It adds 18 tokens to every session and 319 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.

Backend and APIslightweightperformancetypescriptvirtual-listvirtual-scrollvirtualization
Related

Other skills, from other repositories

frontmcp-production-readiness

Pre-production audit, hardening, and go-live checklists for FrontMCP servers. Use before shipping to verify security hardening, performance, reliability, and observability, and for target-specific production checklists: Node server (Docker, graceful shutdown, Redis session scaling), Vercel and edge (cold-start…

agentfront/frontmcp · 176 tokens

react-hooks-composition

Advanced React hooks composition patterns - SWR integration, debounced search, memoized contexts, state machines, and performance optimization.

bobmatnyc/claude-mpm-skills · 29 tokens

frontend-developer

Expert frontend developer persona — React/Vue/Angular, performance optimization, Core Web Vitals, accessibility. Builds responsive web apps with pixel-perfect precision.

chandrudp29/skillhub · 34 tokens

react-patterns

React production patterns — hooks, state management, performance optimization, and component design. Use when building React components, reviewing React code, or fixing React performance issues.

chandrudp29/skillhub · 36 tokens

v3-mcp-optimization

Use when ProxyManager throughput or cold-start latency is a bottleneck — catalogs six optimization patterns (O(1) lookup, 3-tier cache, batch compression, pool reuse, lazy deserialization, parallel boot) with TypeScript snippets and expected gains.

mattmre/EVOKORE-MCP-PUBLIC · 58 tokens

react_patterns_hooks

Curated Knowledge API for AI Agents — 68 MCP tools, 200+ skill packs, 46K chunks, semantic search over 670K vectors, 5-layer validation pipeline. Works with Claude Code, Cursor, Cline, Windsurf.

MidOSresearch/midos · 3 tokens