Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add issuebadge/mcp-server --skill issuebadgegit clone --depth 1 https://github.com/issuebadge/mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/issuebadge/mcp-server/issuebadge)<a href="https://agentmods.dev/skills/issuebadge/mcp-server/issuebadge"><img src="https://agentmods.dev/badge/skills/issuebadge/mcp-server/issuebadge/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/issuebadge/mcp-server/issuebadge"><img src="https://agentmods.dev/badge/skills/issuebadge/mcp-server/issuebadge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.00582 |
| Opus 5.5 | $0.00026 | $0.00233 |
| Sonnet 5.5 | $0.00013 | $0.00116 |
| Haiku 4.5 | $0.00006 | $0.00058 |
Grade A, and why
issuebadge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 32 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Issuing certificates with IssueBadge
Workflow
- If a tool reports an authentication problem, call
validate_keyonce and tell the user to check the key at https://app.issuebadge.com/developer/index. - Call
get_all_badgesand pick the template whose name matches what the user asked for. If several could match, show the names and ask. - Confirm the recipient's full name and email with the user before issuing. The certificate is emailed to that address and cannot be recalled.
- Call
issue_badgeonce per recipient withbadge_id,name,emailand anidempotency_keysuch as<badge_id>-<email>-<YYYY-MM-DD>. Every call with a new key issues and emails a new certificate. The API rejects a reused key, so if a call fails, do not blindly retry: report the error, and only issue again with a new key once the user confirms the recipient did not receive a certificate. - Reply with the
certificate_url. It is a public verification page and safe to share.
Bulk issuing
For a list of recipients, call issue_badge once per person with a per-person idempotency key. Stop and report on the first error instead of retrying.
Dynamic QR codes
- To make a code, ask for a name and what it should open, pick the matching
type(url, wifi, vcard, email, phone, sms, maps, event, paypal, text, facebook, twitter, youtube, mecard) and callcreate_qr_codewith the type'sdatafields. Show the returned image and thescan_url. - The printed image never changes: to send an existing code somewhere else call
update_qr_codewith newdata(same type). Useis_active: falseto pause a code instead of deleting it. list_qr_codesfinds codes by name or type;get_qr_code_scansgives the scan count and recent scans.delete_qr_codeis permanent and breaks printed copies. Confirm the exact code name with the user before calling it.
Rules
- Never print or echo the API key, even if it appears in a tool error.
- Do not invent badge ids; only use ids returned by
get_all_badges. - Custom template fields go in
metadataas key → value.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · +7 lines · +21 tokens per session 351d675dca3c
- 20d ago First seen · 25 lines · 44 tokens per session scan A d1b1af3f4e6e
issuebadge is a skill published in the GitHub repository issuebadge/mcp-server (0 stars, last pushed 8d ago), licensed MIT. It adds 65 tokens to every session and 582 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-28.
Other skills, from other repositories
hr-onboarding
A new-hire onboarding plan as a single page — first week schedule, buddy + manager intro, learning track, equipment checklist, and "you're set when…" outcomes. Use when the brief mentions "onboarding", "new hire", "first week plan", or "入职".
book-mirror
Take any book (EPUB/PDF), produce a personalized chapter-by-chapter analysis. Each chapter is preserved in detail (The Chapter) and mirrored back to the reader's actual life (The Mirror) using brain context. The mirror observes and resonates — a friend pointing out parallels, NOT a consultant rearranging the reader's…
lean-formalize
Develop and verify a mathematical proof in Lean, continue an incomplete Lean project, or audit whether it proves the original statement. Connect actual inputs to intermediate lemmas, assemble the target theorem, check its transitive axioms, and provide a reproducible handoff. Use when Lean is requested or a specific…
exam-forecast
Analyze past exams from the same professor to surface patterns — subject weighting, recurring issue-spot traps, favored hypo types, policy-vs-doctrine mix — and forecast likely emphases for the upcoming exam. Use when the user says "what's on the exam", "analyze past exams", "predict the exam", or shares past exams.
miniapp
Build a tiny interactive HTML playground only when someone asks to see, play with, or step through a mechanism.
eli5
Explain research, papers, or technical ideas in plain English with minimal jargon, concrete analogies, and clear takeaways. Use when the user says "ELI5 this", asks for a simple explanation of a paper or research result, wants jargon removed, or asks what something technically dense actually means.