Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add iowarp/clio-kit --skill cluster-rungit clone --depth 1 https://github.com/iowarp/clio-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/iowarp/clio-kit/cluster-run)<a href="https://agentmods.dev/skills/iowarp/clio-kit/cluster-run"><img src="https://agentmods.dev/badge/skills/iowarp/clio-kit/cluster-run/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/iowarp/clio-kit/cluster-run"><img src="https://agentmods.dev/badge/skills/iowarp/clio-kit/cluster-run.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00053 | $0.01341 |
| Opus 5.5 | $0.00021 | $0.00536 |
| Sonnet 5.5 | $0.00011 | $0.00268 |
| Haiku 4.5 | $0.00005 | $0.00134 |
Grade A, and why
cluster-run scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 122 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Cluster Run
Use this when a workload needs software from Spack and has to run somewhere other than the current shell. It spans two servers, and the handoff between them is the part that goes wrong.
The Spack server deliberately refuses to load anything into an environment,
because a load performed inside a tool call dies with that call. JARVIS owns the
runtime environment instead — spack://capabilities says so directly:
stateful_load_exposed: false, runtime_owner: jarvis_run.
Pick the route first
There are two ways work reaches a cluster, and they are alternatives, not steps:
- Package-backed workload — a Spack package, run through a JARVIS pipeline.
clio-jarvis:jarvis_runtakes execution intent (local,cluster,hostfile) and resolves the scheduler itself. This is the path below. - A batch script you wrote yourself —
clio-slurm:slurm_submit, which returns a scheduler-native job ID.
Do not submit a JARVIS pipeline with clio-slurm:slurm_submit. Pass the cluster
intent to clio-jarvis:jarvis_run and let it own the scheduler.
Steps
1. Size the request against the machine.
Use clio-slurm:slurm_cluster to inspect target partitions and bounded node
records. clio-node-hardware:get_cpu_info and get_gpu_info describe the MCP
host, which may be a login node rather than a compute node. Verify scheduler
limits and the workload's rank/thread requirements before setting resources.
2. Find out whether the package is already installed.
Call clio-spack:spack_find with the constraint. No matches is a successful
result with count=0, not an error — do not retry it as if the call failed.
If it returns nothing, clio-spack:spack_search answers a different question:
whether a recipe exists at all, in which repo, and whether it is already
installed. Reach for it before concluding the software is unavailable.
3. Install only if it is missing.
Call clio-spack:spack_install with an explicit concretization choice. Skip this
entirely when step 2 already found a match — installing is slow and runs
synchronously, and reinstalling a package that is present wastes the wait.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 122 lines · 53 tokens per session scan A 4e4becd18c23
cluster-run is a skill published in the GitHub repository iowarp/clio-kit (30 stars, last pushed 8d ago), licensed BSD-3-Clause. It adds 53 tokens to every session and 1,341 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-08.
Other skills, from other repositories
remote-compute-ssh
Submit recoverable SSH-direct research Runs with live progress cards and model-free monitoring, including Slurm, PBS, LSF, and Grid Engine batch jobs from a cluster login node.
probe-compute-environment
Inspect a registered execution server before compute planning and interpret its persisted capability profile. Use when a server is added, when the user clicks Probe, before enabling an unfamiliar SSH/WSL resource, or when deciding whether GPU, sudo/root, a scheduler, Python, R, conda, mamba, or environment modules are…
ssh-management
SSH/SFTP session management for remote HPC execution. Use when connecting to supercomputers. Not needed when running directly on supercomputer.
mcp-runtime-troubleshooting
Debug MCP Runtime cluster, ingress, registry, Sentinel auth, MCPServer pods, and platform UI failures on Kind or k3s. Use when setup, doctor, e2e, or live traffic fails; when investigating 401/404/ImagePullBackOff/ACME/TLS/registry push errors; when a real MCP client (Cursor, Claude Desktop) cannot connect and you…
mcp-runtime-platform-public
Configure and debug public MCP Runtime installs with MCPPLATFORMDOMAIN, Let's Encrypt, registry/mcp/platform hostnames, registry TLS auth, and platform UI ingress. Use for --with-tls setup, ACME failures, DNS NXDOMAIN, registry forward-auth, or production hostname routing — not for local Kind test-mode (use…
using-drac-clusters
Use when working on a Digital Research Alliance of Canada (DRAC, Alliance, formerly Compute Canada) HPC cluster such as Narval, Rorqual, Fir, TamIA, Killarney, Vulcan, Nibi or Trillium — including ssh to .alliancecan.ca failing with "Permission denied (keyboard-interactive)", sinfo/sacctmgr reporting "command not…