Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/hashgraph-online/awesome-codex-plugins/installing-julianpx skills add hashgraph-online/awesome-codex-plugins --skill installing-juliagit clone --depth 1 https://github.com/hashgraph-online/awesome-codex-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/installing-julia)<a href="https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/installing-julia"><img src="https://agentmods.dev/badge/skills/hashgraph-online/awesome-codex-plugins/installing-julia.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00015 | $0.00852 |
| Opus 5 | $0.00008 | $0.00426 |
| Sonnet 5 | $0.00003 | $0.00170 |
| Haiku 4.5 | $0.00002 | $0.00085 |
Grade C, and why
installing-julia scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
$ curl -fsSL https://install.julialang.org | sh -s -- --yes Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
$ curl -fsSL https://install.julialang.org | sh -s -- --yes How it starts
The opening of the file, as written. The whole thing — 77 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Installing Julia
If your machine does not have the Julia programming language runtime installed, follow the instructions below to install it.
Preferred: official installer
On macOS or Linux, run the following command:
$ curl -fsSL https://install.julialang.org | sh -s -- --yes
On Windows, run the following command in PowerShell:
PS> winget install --name Julia --id 9NJNWW8PVKMN -e -s msstore
Fallback: direct tarball install
Use this method when the curl | sh installer cannot run — for example, when a
sandbox or permission policy blocks piping a remote script directly into sh
(the "Code from External" pattern). This downloads the same official Julia
binary the installer would fetch, but as a plain file you extract locally
— no shell-pipe-to-interpreter.
Steps (macOS / Linux)
-
Detect platform with
uname -s(Linux / Darwin) anduname -m(x86_64 / aarch64 / arm64). -
Pick the URL fragment matching your platform:
OS / Arch URL path Tarball suffix Linux x86_64 linux/x64linux-x86_64.tar.gzLinux aarch64 linux/aarch64linux-aarch64.tar.gzmacOS x86_64 (Intel) mac/x64mac-x86_64.tar.gzmacOS aarch64 (Apple) mac/aarch64macaarch64.tar.gz -
Resolve the latest stable patch (see [[finding-latest-julia-version]] for the full set of methods — do not hard-code
VERSION=from memory), then download and extract:VERSION=$(curl -fsSL https://julialang-s3.julialang.org/bin/versions.json \ | jq -r 'to_entries | map(select(.value.stable)) | map(.key) | sort_by(split(".") | map(tonumber? // 0)) | last') MINOR=${VERSION%.*} # → e.g. 1.12 ARCH_PATH=linux/aarch64 # ← from table above ARCH_SUFFIX=linux-aarch64 # ← from table above mkdir -p ~/julia-install && cd ~/julia-install curl -fsSLO "https://julialang-s3.julialang.org/bin/${ARCH_PATH}/${MINOR}/julia-${VERSION}-${ARCH_SUFFIX}.tar.gz" tar -xzf "julia-${VERSION}-${ARCH_SUFFIX}.tar.gz" export PATH="$HOME/julia-install/julia-${VERSION}/bin:$PATH" julia --version
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 77 lines · 15 tokens per session scan C 78b7d478f930
installing-julia is a skill published in the GitHub repository hashgraph-online/awesome-codex-plugins (859 stars, last pushed 5d ago), licensed Apache-2.0. It adds 15 tokens to every session and 852 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
python-expert
Use for Python code changes, FastAPI/Django/Flask services, packaging, typing, async, pytest, data scripts, dependency hygiene, or Python performance fixes.
deobfuscating-javascript-malware
Deobfuscates malicious JavaScript code used in web-based attacks, phishing pages, and dropper scripts by reversing encoding layers, eval chains, string manipulation, and control flow obfuscation to reveal the original malicious logic. Activates for requests involving JavaScript malware analysis, script deobfuscation…
skill-security-auditor
Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skill directory or git repo URL for malicious code, (3) pre-install security gate for Claude Code plugins, OpenClaw skills, or Codex skills, (4) scanning Python…
go-gin-generator
Generate production-ready Go projects using the Gin framework with modern best practices, multiple templates, database integration, authentication, and comprehensive features for building scalable web applications and microservices.
vue3-generator
Generate production-ready Vue 3 frontend projects with TypeScript, Vite, Vue Router, and Pinia using modern best practices and the latest stable versions.
bulk-rna-expression
Python-first workflow for bulk RNA-seq expression intake, normalization, sample QC, and downstream-ready matrices.