Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/harumiweb/exstruct/exstruct-clinpx skills add harumiWeb/exstruct --skill exstruct-cligit clone --depth 1 https://github.com/harumiWeb/exstructWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00076 | $0.00466 |
| Opus 5 | $0.00038 | $0.00233 |
| Sonnet 5 | $0.00015 | $0.00093 |
| Haiku 4.5 | $0.00008 | $0.00047 |
Grade A, and why
exstruct-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
ExStruct CLI
Use the existing editing CLI as the default local operational interface for ExStruct workbook create/edit requests.
Select a command
- Use
exstruct makewhen the user wants a new workbook created and populated. - Use
exstruct patchwhen the user wants an existing workbook edited. - Use
exstruct validatewhen workbook readability is uncertain or before a risky edit on an unfamiliar file. - Use
exstruct ops listwhen the required operation is still unclear. - Use
exstruct ops describe <op>when you know the likely op name but need the exact schema or constraints. - Hand the workflow off to MCP when the user needs host-owned path policy, transport mapping, artifact mirroring, or other server-managed behavior.
Safety rules
- Do not invent unsupported patch ops.
- Do not apply destructive edits immediately when the request is ambiguous.
- Prefer
--dry-runbefore risky edits. - Pin
--backend openpyxlwhen the dry run and the real apply must use the same engine. - Explain backend-specific failures directly instead of hiding them behind a generic retry.
Workflow
- Decide whether the request is create, edit, or actually an MCP-hosted task.
- Identify the needed op or inspect the public op schema.
- Validate the workbook when the file, backend, or request is uncertain.
- Run
--dry-runfor risky edits and inspectPatchResult. - Apply the real edit only after the planned change is acceptable.
- Verify the result with the lightest step that still matches the user's risk.
References
references/command-selection.mdreferences/safe-editing.mdreferences/ops-guidance.mdreferences/verify-workflows.mdreferences/backend-constraints.md
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 49 lines · 76 tokens per session scan A e3648e20a128
exstruct-cli is a skill published in the GitHub repository harumiWeb/exstruct (195 stars, last pushed 2mo ago), licensed BSD-3-Clause. It adds 76 tokens to every session and 466 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
pdf-table-to-excel
TablePack: Convert PDF tables to multi-sheet Excel packages with MinerU — original table screenshots, figures, QC notes, no fabricated data. Path A: existing MinerU users. Path B: run scripts/installmineru. first. REQUIRES multimodal/vision model for QC (open 原始表格/.jpg). Triggers: 转表格, 转excel, 转Excel, PDF表格…
mqc-timeline-master
Turn raw case materials into a faithful, court-ready case timeline (SVG + PNG + PPTX + VSDX + drawio, plus a traceability index in Word). Use this whenever the user hands over litigation materials — a judgment, complaint, defence, evidence list, contract, bank or Alipay statement, WeChat screenshots, scanned exhibits…
mqc-litigation-visual-redraw
Redraw a litigation diagram into a restrained, court-ready presentation graphic (SVG + PNG) WITHOUT changing any text or legal meaning. Use this whenever the user supplies a case timeline, a legal process flowchart, OR a party/relationship diagram and wants it cleaned up, beautified, redrawn, made professional…
peek
Searches memories and displays compact one-liner results, or looks up a specific memory by ID. Use for quick memory lookups, checking if a decision was recorded, resolving [mem0:id] citations, or browsing memories without full category detail.
mem0-test-integration
Verify a Mem0 integration produced by /mem0-integrate. Runs in the same workspace on the same branch (loose coupling) — installs dependencies, runs the repo's native test suite, then exercises a real end-to-end smoke flow against the user's API key. Produces a scorecard. TRIGGER when: user has just run /mem0-integrate…
mem0-oss-to-platform
Plan and then execute a migration of a project from the mem0 open-source / self-hosted SDK (the local Memory class) to the mem0 Platform / hosted / managed SDK (the MemoryClient class). Use this whenever a developer wants to move, switch, or migrate their mem0 usage off OSS/self-hosted to the hosted API — e.g.…