What is insforge-cli?

A command-line workflow for managing InsForge backends and cloud infrastructure. It covers projects, databases, security rules, functions, storage, backups, deployments, secrets, schedules, logs, and diagnostics.

Logging in, creating or linking projects, running SQL and migrations, configuring row-level security, deploying functions, managing storage and secrets, reviewing logs, and running diagnostics.

It ensures backend setup happens before application code is built and avoids placeholder connection details. It also provides a consistent way to inspect and manage the connected project.

insforge-cli — Skill for Claude Code and Codex by InsForge

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add InsForge/insforge-skills --skill insforge-cli

Clone the repo

git clone --depth 1 https://github.com/InsForge/insforge-skills

Made for: Claude Code, Codex.

Or install insforge, the plugin that ships this one along with the rest of its 4 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/insforge/insforge-skills/insforge-cli/github.svg)](https://agentmods.dev/skills/insforge/insforge-skills/insforge-cli)

Your own site

<a href="https://agentmods.dev/skills/insforge/insforge-skills/insforge-cli"><img src="https://agentmods.dev/badge/skills/insforge/insforge-skills/insforge-cli/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/insforge/insforge-skills/insforge-cli"><img src="https://agentmods.dev/badge/skills/insforge/insforge-skills/insforge-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 157 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 9,002 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

Socket pass 15 Sept 2026
Snyk pass 15 Sept 2026

How audits are shown

Origin 88% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00157	$0.09002
Opus 5.5	$0.00063	$0.03601
Sonnet 5.5	$0.00031	$0.01800
Haiku 4.5	$0.00016	$0.00900

Measured 1mo ago against content hash 235b9ef64527, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

insforge-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

88% identical to insforge-cli — 682 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/insforge-cli/SKILL.md · 402 lines

How it starts

The opening of the file, as written. The whole thing — 402 lines — stays where its author put it; the contents beside it link to each section on GitHub.

InsForge CLI

Use this skill whenever someone needs a backend, or when managing InsForge backend and cloud infrastructure with the InsForge CLI. For application code that calls InsForge from a frontend, backend, or edge function, use the insforge app-integration skill instead.

Core Rules

Always run the CLI through npx -y @insforge/cli <command>. Keep npx's -y: without it, npx asks "Ok to proceed?" before installing the package and blocks forever in a TTY-attached agent shell. Do not install or call a global insforge binary.
If the project is already linked, use the current linked project. Run login, project creation, link, project discovery, organization listing, or cloud project commands only when connection setup is actually needed.
When a task needs a backend and no project is linked yet, do connection setup FIRST — before writing any app code: (1) log in (whoami to check; in sandboxes use the two-step device login below), (2) create a new project or link an existing one, (3) then build against the real project URL and keys from the CLI. Never scaffold with placeholder credentials like your-project.region.insforge.app — get the real values first.
Treat InsForge API keys as full-access admin keys. Keep them server-only and out of frontend/public env vars.
Prefer CLI commands and documented project config over raw backend HTTP calls. If config apply reports unsupported/skipped fields, surface that result instead of bypassing the CLI with direct API calls.
Use --json when structured output or non-interactive value collection is needed. Use --yes for confirmation prompts when the user has approved the action.
At the start of a non-trivial task on a linked project, run npx -y @insforge/cli memory list (cheap, no AI call) and recall any title relevant to the task before designing or debugging. Record decisions and the gotchas you hit with memory remember at the moment they happen. See references/memory.md.
When you hit a hurdle that is InsForge's fault — something that should work but doesn't, a capability you needed but isn't supported, instructions (docs/skill) that reality contradicts, or needless friction — report it with npx -y @insforge/cli feedback (see Feedback), then continue the user's task with a workaround. Never file feedback for problems in the user's own app code.

Read the full file on GitHub · 402 lines

Files

What ships with it

29 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 402 lines · 157 tokens per session scan A 235b9ef64527

Subscribe to this mod's changes

insforge-cli is a skill published in the GitHub repository InsForge/insforge-skills (41 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 157 tokens to every session and 9,002 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 88% identical to insforge-cli, differing in 682 lines, and is treated as a copy.

Backend and APIs Cloud DevOps and cloud

stripe-projects

Provision SaaS services + sync creds via Stripe Projects.

NousResearch/hermes-agent · 15 tokens

django-storages-s3

Use when configuring Django to store static and media files on AWS S3 with django-storages. Invoke when working with the STORAGES setting, S3 buckets, presigned URLs, CloudFront, or boto3-backed file storage in settings.py. Configures the Django 4.2+ STORAGES dict, public/private custom backends, presigned GET/POST…

Jeffallan/claude-skills · 138 tokens

websocket-engineer

Use when building real-time communication systems with WebSockets or Socket.IO. Invoke for bidirectional messaging, horizontal scaling with Redis, presence tracking, room management.

Jeffallan/claude-skills · 36 tokens

azure-eventhub-dotnet

Azure Event Hubs SDK for .NET. Use for high-throughput event streaming: sending events (EventHubProducerClient, EventHubBufferedProducerClient), receiving events (EventProcessorClient with checkpointing), partition management, and real-time data ingestion. Triggers: "Event Hubs", "event streaming"…

microsoft/skills · 94 tokens

azure-mgmt-botservice-dotnet

Azure Resource Manager SDK for Bot Service in .NET. Management plane operations for creating and managing Azure Bot resources, channels (Teams, DirectLine, Slack), and connection settings. Triggers: "Bot Service", "BotResource", "Azure Bot", "DirectLine channel", "Teams channel", "bot management .NET", "create bot".

microsoft/skills · 78 tokens

wikipedia

Search and read Wikipedia via x wkp — MediaWiki API, no API key, zero install; query, extract, suggest, and DDG route in one module. Load for wiki, wikipedia, encyclopedia lookup, article summary.

x-cmd/x-cmd · 49 tokens