supercli: Skill for Claude Code

.devin/skills/sc-zig-usage/SKILL.md

sc-zig-usage is a skill for Claude Code, Codex from javimosch/supercli. It costs 0 tokens per session (1,744 once invoked), scanned C, original, MIT.

A Zig-based, single-file command-line version of SuperCLI, a tool for finding, installing, and running plugins for AI agents.

In plain words
What is it for?
It is for discovering plugins, inspecting their commands, installing plugins, and executing commands with machine-readable JSON output.
Why use it?
It provides these command-line operations without requiring the Node.js runtime for its main executable.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions AGENTS.md; mentions OpenCode.

This is javimosch/supercli's own configuration. It tells Claude Code and Codex how to work on supercli itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything supercli configures →

Reuse

Borrowing it

Nothing to install: this file belongs to javimosch/supercli. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/javimosch/supercli/master/.devin/skills/sc-zig-usage/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/javimosch/supercli

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sc-zig-usage

README.md
[![agentmods](https://agentmods.dev/badge/skills/javimosch/supercli/sc-zig-usage/github.svg)](https://agentmods.dev/skills/javimosch/supercli/sc-zig-usage)
Your own site
<a href="https://agentmods.dev/skills/javimosch/supercli/sc-zig-usage"><img src="https://agentmods.dev/badge/skills/javimosch/supercli/sc-zig-usage/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sc-zig-usage

Your own site · 80×15
<a href="https://agentmods.dev/skills/javimosch/supercli/sc-zig-usage"><img src="https://agentmods.dev/badge/skills/javimosch/supercli/sc-zig-usage.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,744 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.01744
Opus 5.5 $0.00000 $0.00698
Sonnet 5.5 $0.00000 $0.00349
Haiku 4.5 $0.00000 $0.00174

Measured today against content hash c568c7ea8d1f, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

sc-zig-usage scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Downloads and executes remote codehighSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

curl -sL https://github.com/javimosch/supercli/releases/download/v0.1.0-zig/install.sh | bash

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -sL https://github.com/javimosch/supercli/releases/download/v0.1.0-zig/install.sh | bash
.devin/skills/sc-zig-usage/SKILL.md · 274 lines

How it starts

The opening of the file, as written. The whole thing — 274 lines — stays where its author put it; the contents beside it link to each section on GitHub.

sc-zig Usage

Use this skill when working with the Zig implementation of SuperCLI (sc-zig). This is a single-binary, high-performance version of SuperCLI written in Zig, optimized for AI agents.

Quick Start

# Install sc-zig (single binary, no Node.js required)
curl -sL https://github.com/javimosch/supercli/releases/download/v0.1.0-zig/install.sh | bash

# Or manual install to custom location
curl -sL https://github.com/javimosch/supercli/releases/download/v0.1.0-zig/sc-zig-linux-amd64 -o ~/.local/bin/sc-zig && chmod +x ~/.local/bin/sc-zig

# Verify installation
sc-zig --version
# → SuperCLI (Zig) v0.1.0

Agent Workflow

The optimal agent workflow with sc-zig:

# 1. Get bootstrap guidance (self-documenting)
sc-zig --json

# 2. Discover plugins by topic
sc-zig plugins explore --name <topic> --json

# 3. Install plugin (delegates to Node.js sc when needed)
sc-zig plugins install <plugin-name>

# 4. Inspect command schema
sc-zig inspect <namespace> <resource> <action> --json

# 5. Execute command
sc-zig <namespace> <resource> <action> --flag value --json

Key Features for Agents

Bootstrap JSON

sc-zig returns self-documenting bootstrap JSON:

{
  "version":"1.0",
  "mode":"agent_bootstrap",
  "name":"supercli-zig",
  "workflow":"discover -> inspect -> execute",
  "first_steps":[...],
  "memory_workflow":{...},
  "feature_notes":[...]
}

Plugin Discovery

# Search by name
sc-zig plugins explore --name memory --json

# Search by tags (comma-separated)
sc-zig plugins explore --tags docker,kubernetes --json

# Filter to installed only
sc-zig plugins explore --installed --json

# Limit results
sc-zig plugins explore --name docker --limit 10 --json

Agent Guidance

When no plugins match your search, sc-zig provides actionable guidance:

{
  "total":0,
  "returned":0,
  "plugins":[],
  "suggestion":"Run: sc-zig plugins update"
}

Plugin Catalog Management

# Update plugin catalog from GitHub
sc-zig plugins update

# Check for updates without applying
sc-zig plugins update --check

# List installed plugins
sc-zig plugins list --json

Read the full file on GitHub · 274 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 274 lines · 0 tokens per session scan C c568c7ea8d1f

Subscribe to this mod's changes

sc-zig-usage is a skill published in the GitHub repository javimosch/supercli (56 stars, last pushed today), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,744 tokens. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-29.

Related

Other skills, from other repositories

harness-init-runner

Initialize a lightweight repo-local Node.js harness (harness/ + .harness/) WITHOUT AIOS dependency. Use ONLY when you need a standalone, portable harness. If AIOS is installed, use aios-long-running-harness instead — it has rex Command hosting, ContextDB integration, and checkpoint recovery.

rexleimo/aios · 70 tokens

topos

Manage the shared team skills and MCP servers topos delivers to this machine — see what is managed, update it, add more, and share local improvements back. Use when editing anything in a skills directory, when the user asks about team skills, skill updates, or sharing a skill, when setting up topos for a team or a…

topos-sh/topos · 0 tokens

update-harness

Update an existing Claude Code harness — check for outdated components, duplication with official features, missing patterns, and improvement opportunities, then apply approved changes. Use whenever: 'update harness', 'update my harness', 'is my harness up to date', 'harness outdated', 'optimize harness', 'check my…

bzantium/meta-harness · 112 tokens

create-harness

Generate a complete, project-specific Claude Code harness — agents, skills, hooks, CLAUDE.md rules — tailored to any codebase. Use whenever someone says 'create a harness', 'set up agents for this project', 'configure Claude Code', 'build an agent team', 'make this project AI-ready', 'harness this project', or any…

bzantium/meta-harness · 117 tokens

github-copilot-cli-expert

Expert knowledge of GitHub Copilot CLI - installation, configuration, usage, custom agents, MCP servers, and version management. Use when asking about copilot cli, copilot commands, installing copilot, updating copilot, copilot features.

rysweet/amplihack · 57 tokens

cf-cli

Cloudflare's official cf CLI (beta) for the public Cloudflare API and Workers projects. Use for finding and running Cloudflare commands from the terminal — sign-in and profiles, cf cli search, cf schema, cf deploy/dev/build, resource commands for DNS, zones, D1, KV, and R2 — and for choosing between cf and Wrangler in…

cloudflare/skills · 78 tokens