Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/jordan-gibbs/knack-cli/installernpx skills add jordan-gibbs/knack-cli --skill installergit clone --depth 1 https://github.com/jordan-gibbs/knack-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jordan-gibbs/knack-cli/installer)<a href="https://agentmods.dev/skills/jordan-gibbs/knack-cli/installer"><img src="https://agentmods.dev/badge/skills/jordan-gibbs/knack-cli/installer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00056 | $0.00788 |
| Opus 5 | $0.00028 | $0.00394 |
| Sonnet 5 | $0.00011 | $0.00158 |
| Haiku 4.5 | $0.00006 | $0.00079 |
Grade C, and why
knack-installer scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://knack.ai/install | sh Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://knack.ai/install | sh How it starts
The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Knack Installer
Install the Knack CLI on the user's machine, then run knack init to set up
either self-host (GitHub-backed) or Knack Cloud mode.
What you should do
-
Confirm intent. Check that the user actually wants to install. If they just mentioned Knack in passing, ask first.
-
Check if it's already installed:
knack --versionIf this prints a version, skip to step 4.
-
Install the binary. Detect the OS and pick the right command:
-
macOS or Linux:
curl -fsSL https://knack.ai/install | sh -
Windows (PowerShell):
irm https://knack.ai/install.ps1 | iex
The script detects arch, fetches the matching binary from github.com/jordan-gibbs/knack-cli/releases, drops it in
~/.local/bin(or%LOCALAPPDATA%\knack\binon Windows), and registers Knack with the detected agent surface. -
-
Run init to pick a backend:
knack initThis is interactive. The user gets two choices:
- GitHub (self-host) — skills live in a repo they own. Free, private.
- Knack Cloud — zero setup, public marketplace at knack.ai.
For non-interactive setups (CI, scripted onboarding), pass
--self-hostor--cloudto skip the prompt. -
If they picked Knack Cloud, finish auth:
knack auth loginFor self-host, no further auth is needed if they have
ghconfigured. -
Confirm by listing. Run
knack listto confirm Knack is wired up correctly. An empty result is fine; an error means something went wrong.
What to tell the user
- The CLI is open source: github.com/jordan-gibbs/knack-cli
- Self-host puts skills in their own GitHub repo. The cloud option is at knack.ai if they want zero setup, sharing with teammates, or the public marketplace.
- Team features (sharing, roles, audit log, SSO) are cloud-only.
- They can switch modes later by editing
~/.knack/config.yamlor by re-runningknack init --self-host/knack init --cloud.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 88 lines · 56 tokens per session scan C 7bd57f61a5b0
knack-installer is a skill published in the GitHub repository jordan-gibbs/knack-cli (20 stars, last pushed 1mo ago), licensed MIT. It adds 56 tokens to every session and 788 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
plan-create
Create structured implementation plans for autonomous TDD development. Use for new features, multi-file changes, or anything requiring multiple steps or tests. Triggers on aspirational openers ("let's build", "let's start building", "I want to make", "I want an app that", "help me build"), capability lists ("users…
plan-orchestrate
Execute implementation plans with parallel TDD workers. Use when ready to run, execute, or start a plan. Triggers on "run the plan", "execute the plan", "implement the plan", "start the plan", "start implementation", "orchestrate", "begin autonomous execution". Requires a plan created by plan-create.
project-update
Update project configuration to match the latest HCF plugin defaults. Use when the HCF plugin has been updated and you want to sync your project's config.
project-setup
One-time interactive setup to configure a project for autonomous development. Use when setting up a new project for TDD-based autonomous development with HCF.
stfu
Use this skill when the user wants terse, direct responses with no preamble, recap, filler, or unnecessary explanation. Supports persistent toggling with /stfu on and /stfu off. Applies to answers, writing, editing, commands, code changes, summaries, and any interaction where minimal output is preferred.
openalex
Use when the user asks about academic literature, research papers, scholarly works, authors, citations, institutions, journals, or any academic metadata. Trigger when users want to search for papers, find author profiles, track citations, discover related works, or explore academic topics. Also use when users mention…