Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add JuanMarchetto/agent-skills --skill noricum-devgit clone --depth 1 https://github.com/JuanMarchetto/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/juanmarchetto/agent-skills/noricum-dev)<a href="https://agentmods.dev/skills/juanmarchetto/agent-skills/noricum-dev"><img src="https://agentmods.dev/badge/skills/juanmarchetto/agent-skills/noricum-dev/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/juanmarchetto/agent-skills/noricum-dev"><img src="https://agentmods.dev/badge/skills/juanmarchetto/agent-skills/noricum-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.01179 |
| Opus 5 | $0.00023 | $0.00589 |
| Sonnet 5 | $0.00009 | $0.00236 |
| Haiku 4.5 | $0.00005 | $0.00118 |
Grade A, and why
noricum-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Noricum Development Conventions
Architecture
- Noricum is an agent orchestrator, not a compiler
- C2Rust is "step zero" (subprocess), not reinvented — but often skippable (P4:
--skip-c2rust) - LLM agents are central from v0
- Semantic Code Map (noricum-ir) tracks metadata, not compiler IR
- rig-rs 0.31 for LLM integration (Rust-native, rustls)
Crate Dependencies (layered)
noricum-cli -> noricum-core -> noricum-agents -> noricum-tools -> noricum-ir
-> noricum-validation -> noricum-tools -> noricum-ir
noricum-mcp -> noricum-core
Coding Standards
- Edition 2024,
thiserrorfor lib errors,anyhowfor CLI tracingfor logging, neverprintln!in library code- No
unwrap()in library code - Async with tokio
- Tests in
#[cfg(test)] mod testswithin each file - C compiler:
-std=gnu11(not c11, needed for POSIX like strdup),-lmfor math
State Machine
Pending -> Extracted -> Characterized -> C2RustDone -> Analyzed -> Refined -> Validated
|
Repairing (max iterations)
|
FallbackUnsafe
Model Router (Claude 4.6 era)
- Easy:
claude-haiku-4-5(fast, cheap) - Medium:
claude-sonnet-4-6(also used for analysis) - Hard:
claude-opus-4-6(translation, complex repair) - Fallback: Ollama
qwen2.5-coder:32bwhen no API key
Pipeline Improvements (P0-P5, learned from miniz + genann migrations)
- P0: Quality floor — repair rejected if unsafe count exceeds translation baseline
- P1: Best-version tracking — keeps highest-score version, uses it for fallback instead of c2rust
- P2: Per-function C2Rust context — extracts only matching c2rust functions per chunk
- P3: Incremental per-module —
split_into_modules()groups C functions by prefix - P4: Skip C2Rust —
--skip-c2rustflag; LLM often translates better without c2rust noise - P5: Idiomatic improvement hints — when code compiles + diff passes but score < threshold, generates actionable refactoring hints (reduce
ascasts, use iterators) so repair agent improves style instead of returning unchanged
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 91 lines · 47 tokens per session scan A 70711fe202f3
noricum-dev is a skill published in the GitHub repository JuanMarchetto/agent-skills (5 stars, last pushed 5mo ago), licensed MIT. It adds 47 tokens to every session and 1,179 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
rust-dependency-audit
Audit Rust dependencies for vulnerabilities, license compliance, supply chain integrity, and freshness using cargo-audit, cargo-deny, cargo-vet.
rust-sota-arsenal
Reference guide for state-of-the-art Rust tooling across refactoring, profiling, benchmarking, testing, and SIMD optimization. Use whenever the.
axum-web-framework
Complete guide for Axum web framework including routing, extractors, middleware, state management, error handling, and production deployment.
rust-systems-programming
Complete guide for Rust systems programming including ownership, borrowing, concurrency, async programming, unsafe code, and performance optimization.
omh-rust
This is a Hermes-native rust workflow skill.
rust-learner
Learn Rust language features and crate updates. Use when user asks about Rust version changelog, what's new in Rust, crate updates, Cargo.toml dependencies, tokio/serde/axum features, or any Rust ecosystem questions.