Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add JustVugg/tools-factory --skill githubgit clone --depth 1 https://github.com/JustVugg/tools-factoryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/justvugg/tools-factory/github)<a href="https://agentmods.dev/skills/justvugg/tools-factory/github"><img src="https://agentmods.dev/badge/skills/justvugg/tools-factory/github/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/justvugg/tools-factory/github"><img src="https://agentmods.dev/badge/skills/justvugg/tools-factory/github.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.01978 |
| Opus 5.5 | $0.00013 | $0.00791 |
| Sonnet 5.5 | $0.00007 | $0.00396 |
| Haiku 4.5 | $0.00003 | $0.00198 |
Grade A, and why
github scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 110 lines — stays where its author put it; the contents beside it link to each section on GitHub.
github
Generated by Gutenberg. Use this skill to call the github API through the local github CLI.
When to use
- The user asks for data exposed by github (actions, activity, agent-tasks, agents, apps, billing).
- An agent task needs structured JSON from https://api.github.com.
- You need to perform a write/destructive operation on github — always preview first, run with
--yesonly on explicit user confirmation.
How to invoke
The skill assumes the generated CLI is on PATH (or invoke via scripts/use-go.sh run ./cmd/github from the project directory).
github operations
github call meta/root --json
github sync --json
github search "<keyword>" --json
Preview a write operation (default behavior, no side effects):
github call agent-tasks/create-task-in-repo --data '{"example":true}' --json
Execute it (only after explicit user confirmation):
github call agent-tasks/create-task-in-repo --data '{"example":true}' --yes --json
Authentication
No authentication required.
Operations index
meta/root(GET /) — read — GitHub API Rootsecurity-advisories/list-global-advisories(GET /advisories) — read — List global security advisoriessecurity-advisories/get-global-advisory(GET /advisories/{ghsa_id}) — read — Get a global security advisoryagent-tasks/list-tasks-for-repo(GET /agents/repos/{owner}/{repo}/tasks) — read — List tasks for repositoryagent-tasks/create-task-in-repo(POST /agents/repos/{owner}/{repo}/tasks) — write — Start a taskagent-tasks/get-task-by-repo-and-id(GET /agents/repos/{owner}/{repo}/tasks/{task_id}) — read — Get a task by repoagent-tasks/list-tasks(GET /agents/tasks) — read — List tasksagent-tasks/get-task-by-id(GET /agents/tasks/{task_id}) — read — Get a task by IDapps/get-authenticated(GET /app) — read — Get the authenticated appapps/create-from-manifest(POST /app-manifests/{code}/conversions) — write — Create a GitHub App from a manifestapps/get-webhook-config-for-app(GET /app/hook/config) — read — Get a webhook configuration for an appapps/update-webhook-config-for-app(PATCH /app/hook/config) — write — Update a webhook configuration for an appapps/list-webhook-deliveries(GET /app/hook/deliveries) — read — List deliveries for an app webhookapps/get-webhook-delivery(GET /app/hook/deliveries/{delivery_id}) — read — Get a delivery for an app webhookapps/redeliver-webhook-delivery(POST /app/hook/deliveries/{delivery_id}/attempts) — write — Redeliver a delivery for an app webhookapps/list-installation-requests-for-authenticated-app(GET /app/installation-requests) — read — List installation requests for the authenticated appapps/list-installations(GET /app/installations) — read — List installations for the authenticated appapps/get-installation(GET /app/installations/{installation_id}) — read — Get an installation for the authenticated appapps/delete-installation(DELETE /app/installations/{installation_id}) — destructive — Delete an installation for the authenticated appapps/create-installation-access-token(POST /app/installations/{installation_id}/access_tokens) — write — Create an installation access token for an appapps/suspend-installation(PUT /app/installations/{installation_id}/suspended) — write — Suspend an app installationapps/unsuspend-installation(DELETE /app/installations/{installation_id}/suspended) — destructive — Unsuspend an app installationapps/delete-authorization(DELETE /applications/{client_id}/grant) — destructive — Delete an app authorizationapps/check-token(POST /applications/{client_id}/token) — write — Check a tokenapps/reset-token(PATCH /applications/{client_id}/token) — write — Reset a tokenapps/delete-token(DELETE /applications/{client_id}/token) — destructive — Delete an app tokenapps/scope-token(POST /applications/{client_id}/token/scoped) — write — Create a scoped access tokenapps/get-by-slug(GET /apps/{app_slug}) — read — Get an appclassroom/get-an-assignment(GET /assignments/{assignment_id}) — read — Get an assignmentclassroom/list-accepted-assignments-for-an-assignment(GET /assignments/{assignment_id}/accepted_assignments) — read — List accepted assignments for an assignmentclassroom/get-assignment-grades(GET /assignments/{assignment_id}/grades) — read — Get assignment gradesclassroom/list-classrooms(GET /classrooms) — read — List classroomsclassroom/get-a-classroom(GET /classrooms/{classroom_id}) — read — Get a classroomclassroom/list-assignments-for-a-classroom(GET /classrooms/{classroom_id}/assignments) — read — List assignments for a classroomcodes-of-conduct/get-all-codes-of-conduct(GET /codes_of_conduct) — read — Get all codes of conductcodes-of-conduct/get-conduct-code(GET /codes_of_conduct/{key}) — read — Get a code of conductcredentials/revoke(POST /credentials/revoke) — write — Revoke a list of credentialsemojis/get(GET /emojis) — read — Get emojisactions/get-actions-cache-retention-limit-for-enterprise(GET /enterprises/{enterprise}/actions/cache/retention-limit) — read — Get GitHub Actions cache retention limit for an enterpriseactions/set-actions-cache-retention-limit-for-enterprise(PUT /enterprises/{enterprise}/actions/cache/retention-limit) — write — Set GitHub Actions cache retention limit for an enterpriseactions/get-actions-cache-storage-limit-for-enterprise(GET /enterprises/{enterprise}/actions/cache/storage-limit) — read — Get GitHub Actions cache storage limit for an enterpriseactions/set-actions-cache-storage-limit-for-enterprise(PUT /enterprises/{enterprise}/actions/cache/storage-limit) — write — Set GitHub Actions cache storage limit for an enterpriseoidc/list-oidc-custom-property-inclusions-for-enterprise(GET /enterprises/{enterprise}/actions/oidc/customization/properties/repo) — read — List OIDC custom property inclusions for an enterpriseoidc/create-oidc-custom-property-inclusion-for-enterprise(POST /enterprises/{enterprise}/actions/oidc/customization/properties/repo) — write — Create an OIDC custom property inclusion for an enterpriseoidc/delete-oidc-custom-property-inclusion-for-enterprise(DELETE /enterprises/{enterprise}/actions/oidc/customization/properties/repo/{custom_property_name}) — destructive — Delete an OIDC custom property inclusion for an enterprisecode-security/get-configurations-for-enterprise(GET /enterprises/{enterprise}/code-security/configurations) — read — Get code security configurations for an enterprisecode-security/create-configuration-for-enterprise(POST /enterprises/{enterprise}/code-security/configurations) — write — Create a code security configuration for an enterprisecode-security/get-default-configurations-for-enterprise(GET /enterprises/{enterprise}/code-security/configurations/defaults) — read — Get default code security configurations for an enterprisecode-security/get-single-configuration-for-enterprise(GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}) — read — Retrieve a code security configuration of an enterprisecode-security/update-enterprise-configuration(PATCH /enterprises/{enterprise}/code-security/configurations/{configuration_id}) — write — Update a custom code security configuration for an enterprise
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 110 lines · 33 tokens per session scan A 05357677a887
github is a skill published in the GitHub repository JustVugg/tools-factory (59 stars, last pushed 3mo ago), licensed MIT. It adds 33 tokens to every session and 1,978 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
github-openapi-skill
Operate GitHub REST API through UXC with the official OpenAPI schema, explicit gh-to-uxc auth import, and read-first guardrails for repo, issue, pull request, and event workflows.
release
Prepare and publish Perigon.CLI patch releases, including versioning, release notes, bilingual docs, validation, and the nuget-branch CI handoff.
code-review
Systematic code review SOP covering correctness, security, performance, and maintainability — plus GitHub PR review workflow (diff, inline comments, approve via gh/REST).
git-workflow
Professional Git branching, commit, and PR workflow following conventional commits.
diff-summary
Structured triage of a git diff. One call replaces the per-file Read sweep an agent normally does to figure out which files in a diff are tests, which touch the public API, which are migrations, which need careful review.
github-pr-workflow
GitHub PR yaşam döngüsü — branch, commit, aç, CI izle, merge et.