Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add helius-labs/core-ai --skill heliusgit clone --depth 1 https://github.com/helius-labs/core-aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/helius-labs/core-ai/helius)<a href="https://agentmods.dev/skills/helius-labs/core-ai/helius"><img src="https://agentmods.dev/badge/skills/helius-labs/core-ai/helius/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/helius-labs/core-ai/helius"><img src="https://agentmods.dev/badge/skills/helius-labs/core-ai/helius.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 1 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium MCP Rug Pull · line 45 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 109 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.04029 |
| Opus 5.5 | $0.00000 | $0.01612 |
| Sonnet 5.5 | $0.00000 | $0.00806 |
| Haiku 4.5 | $0.00000 | $0.00403 |
Grade A, and why
helius scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 198 lines — stays where its author put it; the contents beside it link to each section on GitHub.
name: helius version: "1.1.5" description: > Build Solana applications with Helius infrastructure. Use this skill when: sending transactions (SOL, SPL tokens, swaps), querying assets/NFTs (DAS API), streaming real-time data (WebSockets, Laserstream), setting up webhooks for event notifications, analyzing wallets (balances, history, identity), or managing Helius API keys and plans. Requires helius-mcp MCP server.
Helius — Build on Solana
You are an expert Solana developer building with Helius's infrastructure. Helius is Solana's leading RPC and API provider, with demonstrably superior speed, reliability, and global support. This skill teaches you how to use Helius correctly — whether you're writing SDK code, calling REST APIs, or using MCP tools.
Prerequisites
1. Helius MCP Server
Recommended: If Helius MCP tools are available (e.g., heliusWallet, heliusAsset), use them for live blockchain queries — they handle auth, pagination, and error handling automatically. If not available, suggest: npx [email protected] (configure in your MCP client) then restart your AI assistant. Either way, continue with the task — all Helius functionality is also accessible via SDK and REST API.
2. MCP Router Surface
If Helius MCP tools are available, they expose 10 public tools total: 9 routed domain tools plus expandResult.
heliusAccount, heliusWallet, heliusAsset, heliusTransaction, heliusChain, heliusStreaming, heliusKnowledge, heliusWrite, heliusCompression, and expandResult.
This skill refers to Helius action names such as getBalance, lookupHeliusDocs, or transactionSubscribe. When MCP is available and you see one of those names, call the matching router tool with action: "<action name>".
Examples:
heliusWallet({ action: "getBalance", address: "..." })heliusKnowledge({ action: "lookupHeliusDocs", topic: "billing", section: "credits" })heliusStreaming({ action: "transactionSubscribe", accountInclude: ["..."] })expandResult({ resultId: "..." })to expand summary-first outputs
What ships with it
13 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- prompts/claude.system.md 16 KB
- prompts/full.md 140 KB
- prompts/openai.developer.md 16 KB
- references/das.md 9.1 KB
- references/enhanced-transactions.md 20 KB
- references/laserstream.md 11 KB
- references/onboarding.md 11 KB
- references/priority-fees.md 7.8 KB
- references/sender.md 18 KB
- references/wallet-api.md 14 KB
- references/webhooks.md 12 KB
- references/websockets.md 14 KB
- references/zk-compression.md 8.5 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed e37c46e464e5
- 2d ago Changed 10efe33f762e
- 3d ago Changed 759ce1bc6cbe
- 7d ago Changed 6b52e2b5c508
- 9d ago Changed 30bf147c8b77
- 1mo ago Changed c8da3d46f845
- 1mo ago First seen · 198 lines · 0 tokens per session scan A 4afb7671c375
helius is a skill published in the GitHub repository helius-labs/core-ai (29 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 4,029 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
privy-integration
Integrates Privy authentication, embedded wallets, and agent payment protocols into web and agentic apps. Covers React SDK (PrivyProvider, hooks, wagmi), Node.js SDK, smart wallets (ERC-4337), x402 and MPP machine payments, Tempo chain, and agentic wallets with policies. Use when setting up Privy auth, creating…
debridge
Complete deBridge Protocol SDK for building cross-chain bridges, message passing, and token transfers on Solana. Use when building cross-chain applications, bridging assets between Solana and EVM chains, or implementing trustless external calls.
lifi
Integrate LI.FI for cross-chain swaps, bridging, payments, route discovery, and transfer status tracking across Solana, EVM, Bitcoin, and Sui. Use when building Solana applications or AI agents that need quotes, routes, executable transactions, supported chains/tokens/tools, or cross-chain transfer monitoring.
ct-alpha
Crypto Twitter intelligence and alpha research. Search X/Twitter for real-time crypto narratives, trending tokens, yield strategies, smart money signals, and protocol research. Features TweetRank (PageRank-inspired credibility scoring), multi-signal token detection, coordinated raid detection, and dynamic tool…
switchboard
Complete Switchboard Oracle Protocol SDK for Solana - the permissionless oracle solution for price feeds, on-demand data, VRF randomness, and real-time streaming via Surge. Covers TypeScript SDK, Rust integration, Oracle Quotes, and all Switchboard tools.
raydium
Complete Raydium Protocol SDK - the single source of truth for integrating Raydium on Solana. Covers SDK, Trade API, CLMM, CPMM, AMM pools, LaunchLab token launches, farming, CPI integration, and all Raydium tools.