Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/gopherguides/gopher-ai/gopher-guidesnpx skills add gopherguides/gopher-ai --skill gopher-guidesgit clone --depth 1 https://github.com/gopherguides/gopher-aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/gopherguides/gopher-ai/gopher-guides)<a href="https://agentmods.dev/skills/gopherguides/gopher-ai/gopher-guides"><img src="https://agentmods.dev/badge/skills/gopherguides/gopher-ai/gopher-guides.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.01072 |
| Opus 5 | $0.00036 | $0.00536 |
| Sonnet 5 | $0.00014 | $0.00214 |
| Haiku 4.5 | $0.00007 | $0.00107 |
Grade B, and why
gopher-guides scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Harvests environment variablesmediumData exfiltration
Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.
KEY=$(printenv GOPHER_GUIDES_API_KEY) && curl -s -H "Authorization: Bearer $KEY" https://gopherguides.com/api/gopher-ai/me Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
**Do NOT use `$VAR` or `${VAR}` shell expansion in curl commands.** Environment variable expansion is unreliable in AI coding assistant shell/bash tools (Claude Code, Codex, etc.). Always use curl's built-in `--variable How it starts
The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Gopher Guides Professional Training
Plugin Resource Resolution
<PLUGIN_ROOT> is notation. Replace it with a concrete absolute plugin root before every resource read or command:
- Codex: Start from the directory containing the absolute selected
SKILL.mdpath, then ascend two directories (skills/<name>-> plugin root). - Claude Code: Bind it to the injected
${CLAUDE_PLUGIN_ROOT}value.
Access official Gopher Guides training materials via API for authoritative Go best practices.
Important: Always Use --variable/--expand-header Syntax
Do NOT use $VAR or ${VAR} shell expansion in curl commands. Environment variable expansion is unreliable in AI coding assistant shell/bash tools (Claude Code, Codex, etc.). Always use curl's built-in --variable % and --expand-header syntax instead.
Requires curl 8.3+. If you get
unknown option: --variable, see the fallback note at the bottom.
Step 1: Verify API Key
curl -s --variable %GOPHER_GUIDES_API_KEY \
--expand-header "Authorization: Bearer {{GOPHER_GUIDES_API_KEY}}" \
https://gopherguides.com/api/gopher-ai/me
On success: Display a brief confirmation to the user, then proceed to Step 2:
- "✓ Gopher Guides API: Authenticated as {email} ({tier_category} tier)"
On error or missing key: Help the user configure:
- Get API key at gopherguides.com
- Add to shell profile (
~/.zshrcor~/.bashrc):export GOPHER_GUIDES_API_KEY="your-key" - Restart your terminal/IDE to pick up the new environment variable
Do NOT provide Go advice without a valid, verified API key.
Step 2: Query the API
Use the cache wrapper script for all API calls. It automatically caches responses (24h for practices/examples, 1h for audit/review) to avoid redundant API calls.
The cache wrapper is at <PLUGIN_ROOT>/scripts/cache-api.sh.
For "what's the best way to..." questions
/bin/bash "<PLUGIN_ROOT>/scripts/cache-api.sh" practices '{"topic": "error handling"}'
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 545612ab1f1d
- yesterday Changed · +9 lines c3642f1d70d5
- 5d ago First seen · 103 lines · 71 tokens per session scan B 570319e18979
gopher-guides is a skill published in the GitHub repository gopherguides/gopher-ai (21 stars, last pushed today), licensed MIT. It adds 71 tokens to every session and 1,072 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it B with 2 findings (harvests environment variables, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
golang-stay-updated
Golang ecosystem watch list — official sources (go.dev/blog, pkg.go.dev, tour.golang.org, golang-nuts), newsletters (Golang Weekly, Awesome Go Newsletter), communities (r/golang, gophers.slack.com, Go Forum, go.dev/wiki), blogs (Dave Cheney, Ardan Labs, Rob Pike), YouTube channels (Gopher Academy, GopherCon EU/UK)…
concept-teaching
Use when 用户希望学习或澄清一个 Python、Go 或当前目标代码所依赖的编程概念，并需要讲解与练习时。.
learning-plan
Use when 用户要求创建、调整或恢复 Python、Go、混合路线或面向目标代码的学习计划时。.
exercise-coach
Use when 学习者正在完成 Python、Go 或代码阅读练习，展示了尝试、遇到卡点，或明确要求获得提示时。.
golang-stay-updated
Provides resources to stay updated with Golang news, communities and people to follow. Use when seeking Go learning resources, discovering new libraries, finding community channels, or keeping up with Go language changes and releases.
golang-stay-updated
Provides resources to stay updated with Golang news, communities and people to follow. Use when seeking Go learning resources, discovering new libraries, finding community channels, or keeping up with Go language changes and releases.