Borrowing it
Nothing to install: this file belongs to geekfujiwara/CodeAppsDevelopmentStandard. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/geekfujiwara/CodeAppsDevelopmentStandard/main/.github/skills/model-driven-app/SKILL.mdgit clone --depth 1 https://github.com/geekfujiwara/CodeAppsDevelopmentStandardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/model-driven-app)<a href="https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/model-driven-app"><img src="https://agentmods.dev/badge/skills/geekfujiwara/codeappsdevelopmentstandard/model-driven-app/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/model-driven-app"><img src="https://agentmods.dev/badge/skills/geekfujiwara/codeappsdevelopmentstandard/model-driven-app.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 326 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00036 | $0.04541 |
| Opus 5.5 | $0.00014 | $0.01816 |
| Sonnet 5.5 | $0.00007 | $0.00908 |
| Haiku 4.5 | $0.00004 | $0.00454 |
Grade A, and why
model-driven-app scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
requests.post( How it starts
The opening of the file, as written. The whole thing — 390 lines — stays where its author put it; the contents beside it link to each section on GitHub.
モデル駆動型アプリ構築スキル
Dataverse Web API(appmodules / sitemaps テーブル)でモデル駆動型アプリを ソリューション対応で 作成・構成・公開する。
前提:
setup_dataverse.pyで Dataverse テーブルが作成済みであること。 テーブルが存在しないとアプリに追加するコンポーネントがない。
大前提: 一つのソリューション内に開発
Dataverse テーブル・Code Apps・Power Automate フロー・Copilot Studio エージェント・モデル駆動型アプリ は すべて同一のソリューション内 に含める。
.env の SOLUTION_NAME と PUBLISHER_PREFIX を全フェーズで統一して使用する。
認証: Python スクリプトの認証は
standardスキルのauth_helper.pyを使用。
前提: 設計フェーズ完了後にデプロイに入る(必須)
アプリをデプロイする前に、アプリ設計をユーザーに提示し承認を得ていること。
設計提示時に含める内容:
| 項目 | 内容 |
|---|---|
| アプリ名 | 表示名とユニーク名(英語のみ) |
| アプリ説明 | アプリの目的の簡潔な説明 |
| 含めるテーブル一覧 | ソリューション内のどのテーブルをアプリに含めるか |
| ナビゲーション構造 | SiteMap の Area/Group/SubArea 構成 |
| ビュー・フォーム | 各テーブルで表示するビューとフォーム(デフォルト: 全て含む) |
| セキュリティロール | アプリに関連付けるロール |
モデル駆動型アプリ: 設計提示 → ユーザー承認 → デプロイスクリプト実行
必須要件
AppModule 作成の必須プロパティ
name: アプリの表示名(日本語 OK)
uniquename: 一意名(英語のみ。自動的にソリューション prefix が付く)
clienttype: 4(Unified Interface)★ 必須
webresourceid: アイコン用 WebResource ID
システムデフォルト: 953b9fac-1e5e-e611-80d6-00155ded156f
clienttype=4 を必ず指定する【必須】
❌ clienttype 未指定 → レガシー Web クライアント用アプリが作成される
「このアプリはレガシ Web クライアント用に設計されたものです」警告が表示
✅ clienttype=4 → Unified Interface(新しい Look & Feel)
モダンな UI で動作し、警告なし
uniquename は英語のみ
✅ uniquename: "ProjectManagement"
❌ uniquename: "プロジェクト管理"
→ 英数字とアンダースコアのみ許容
→ 作成時にソリューション publisher prefix が自動付与(例: new_ProjectManagement)
SiteMap が必須(ValidateApp で検証される)
❌ SiteMap なしで AppModule を作成 → ValidateApp で "App does not contain Site Map" エラー
✅ SiteMap を先に作成し、AddAppComponents でアプリに追加
SiteMap XML の正式フォーマット【必須】
<SiteMap IntroducedVersion="7.0.0.0">
<Area Id="MainArea" ShowGroups="true" IntroducedVersion="7.0.0.0">
<Titles><Title LCID="1041" Title="アプリ名" /></Titles>
<Group Id="grp_transaction" IntroducedVersion="7.0.0.0" IsProfile="false">
<Titles><Title LCID="1041" Title="業務データ" /></Titles>
<SubArea Id="sub_entity1" Entity="prefix_entity1" AvailableOffline="true" />
<SubArea Id="sub_entity2" Entity="prefix_entity2" AvailableOffline="true" />
</Group>
<Group Id="grp_master" IntroducedVersion="7.0.0.0" IsProfile="false">
<Titles><Title LCID="1041" Title="マスタ" /></Titles>
<SubArea Id="sub_master1" Entity="prefix_master1" AvailableOffline="true" />
</Group>
</Area>
</SiteMap>
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 390 lines · 36 tokens per session scan A afdea696a37d
model-driven-app is a skill published in the GitHub repository geekfujiwara/CodeAppsDevelopmentStandard (78 stars, last pushed yesterday), licensed MIT. It adds 36 tokens to every session and 4,541 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
model-driven-app compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| model-driven-appgeekfujiwara/CodeAppsDevelopmentStandard | Skill | 78 | yesterday | MIT | A | 36 | Claude Code, Codex |
| migrate-radix-to-baseshadcn-ui/ui | Skill | 127k | yesterday | MIT | A | 61 | Cursor |
| compiler-portreact/react | Skill | 252k | yesterday | MIT | A | 35 | Claude Code |
| tamaguitamagui/tamagui | Skill | 14k | today | MIT | A | 44 | Claude Code, Codex |
| tamagui-v6-configtamagui/tamagui | Skill | 14k | today | MIT | A | 0 | Claude Code, Codex |
| tamagui-theme-generatortamagui/tamagui | Skill | 14k | today | MIT | A | 48 | Claude Code, Codex |
| nuxt-uinuxt/ui | Skill | 7.1k | yesterday | MIT | A | 56 | Claude Code, Codex |