Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add just-done/just-publish-mcp --skill just-publishgit clone --depth 1 https://github.com/just-done/just-publish-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/just-done/just-publish-mcp/just-publish)<a href="https://agentmods.dev/skills/just-done/just-publish-mcp/just-publish"><img src="https://agentmods.dev/badge/skills/just-done/just-publish-mcp/just-publish/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/just-done/just-publish-mcp/just-publish"><img src="https://agentmods.dev/badge/skills/just-done/just-publish-mcp/just-publish.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00155 | $0.01201 |
| Opus 5 | $0.00077 | $0.00600 |
| Sonnet 5 | $0.00031 | $0.00240 |
| Haiku 4.5 | $0.00015 | $0.00120 |
Grade A, and why
just-publish scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Just Publish — put a static website online
Just Publish (https://justpublish.ai) turns static files into a live website
at https://{slug}.justpublish.site/. Publishing is free, needs no login and
no build step. The only credential is the edit_token returned by the first
deploy — store it; it is the sole way to update that exact site later.
When to use this skill
The user says things like:
- "publish this site" / "put this online" / "make this a website"
- "give me a link for this" / "I want a URL I can share"
- "host what we just built"
- "update my site" (one previously published with Just Publish)
The site must be static: HTML, CSS, JS, images, fonts — no server code, no SSR, no build step.
Do NOT use it when the user needs a backend (APIs, databases, Next.js/Nuxt
SSR), wants to buy or manage a domain (that is a registrar's job), or wants to
change a site that was not published with Just Publish — without its
edit_token there is nothing you can do.
Publish a new site
- Collect the site's files.
index.htmlat the root is required — a deploy without it is rejected. - Ask the user for their email if you don't have it (required). Publishing itself works immediately and needs no login — but a new site starts unverified, and Just Publish emails a verification link. This is not optional housekeeping: a brand-new site must be verified within about an hour or it is automatically taken down. You must relay this to the user (see "After publishing"). Verifying also lets them recover and manage the site if the edit_token is lost.
- Confirm with the user before the first publish of a new site — deploying makes the files public on the internet, and a verification email will follow.
- Call the
deployMCP tool onhttps://mcp.justpublish.ai/(Streamable HTTP, no auth required to connect):files: array of{ path, content, encoding? }— text files as plain strings; binary files base64-encoded with"encoding": "base64".email: the user's email address.
- The result carries the live
url, thesite_id, theedit_token, andverify_required. Whenverify_requiredis true (it is for every new site), the user must verify — relay the verify-to-keep step under "After publishing".
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 94 lines · 155 tokens per session scan A 018eca68594c
just-publish is a skill published in the GitHub repository just-done/just-publish-mcp (1 stars, last pushed 2d ago), licensed MIT. It adds 155 tokens to every session and 1,201 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
agentcore-investigation
Investigate Bedrock AgentCore runtime sessions via CloudWatch Logs Insights — resolve session/trace IDs, query OTEL spans, filter noise, build timelines. Use when debugging AgentCore agent sessions, tracing tool calls, or analyzing latency.
n8n-self-hosting
Deploy a production self-hosted n8n end-to-end to a fresh Linux VM over SSH, using Docker Compose behind a Caddy reverse proxy with automatic HTTPS. Use whenever the user wants to self-host, install, set up, provision, or deploy n8n on their own server/VPS/box (Hetzner, DigitalOcean, AWS EC2, bare metal, etc.) — in…
cloud-run
Manage Cloud Run services and jobs.
frontmcp-deployment
Use when deploying, building for production, packaging, or shipping a FrontMCP server. Covers build targets (node, cli SEA binary, browser, embeddable SDK, mcpb archive for Claude Desktop, serverless) and deploying to Vercel (with Vercel KV), AWS Lambda (API Gateway, SAM, CDK), Cloudflare Workers (KV, D1, Durable…
zdx-investigate-multi-app-outage
Diagnose a multi-application outage scoped to one location by correlating ZDX alerts, affected devices, and shared cloud-path hops. Identifies the devices affected at a specific office, compares the per-application network path across multiple SaaS apps to surface the common network bottleneck, and produces an…
dynatrace-managed
Set up and query Dynatrace Managed (self-hosted) through the Dynatrace Managed MCP server - configuring cluster connections and API tokens, choosing the right environment when several are configured, and building entity selectors for logs, metrics, events, problems, security vulnerabilities and SLOs. Use when the user…