Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add konamgil/mandu --skill mandu-deploymentgit clone --depth 1 https://github.com/konamgil/manduWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/konamgil/mandu/mandu-deployment)<a href="https://agentmods.dev/skills/konamgil/mandu/mandu-deployment"><img src="https://agentmods.dev/badge/skills/konamgil/mandu/mandu-deployment.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00011 | $0.00889 |
| Opus 5 | $0.00005 | $0.00445 |
| Sonnet 5 | $0.00002 | $0.00178 |
| Haiku 4.5 | $0.00001 | $0.00089 |
Grade A, and why
Mandu Deployment scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Mandu Deployment Skill
Mandu 앱을 프로덕션 환경에 안전하고 효율적으로 배포하기 위한 가이드입니다.
Agent Workflow Contract
This skill is a Domain addendum. It must not replace mandu-agent-workflow.
Use it only after mandu.agent.plan selects the deploy domain.
Canonical workflow step: plan -> apply -> verify.
Preferred MCP tools:
| Step | Tools |
|---|---|
| plan | mandu.agent.plan, mandu.deploy.plan |
| apply | mandu.agent.apply, mandu.deploy.compile |
| verify | mandu.agent.verify, mandu.deploy.preview |
| repair | mandu.agent.repair |
Allowed file edits:
.mandu/deploy.intent.json- Provider artifacts named in the plan, such as
render.yaml,Dockerfile,docker-compose.yml,fly.toml,vercel.json, ornetlify.toml - CI workflow files only when deploy automation is explicitly requested
Verification command:
mandu agent verify --changed --json --write
Common failures:
- Executing a provider deploy before a dry-run or preview step
- Writing secrets into tracked config
- Changing provider artifacts without route/deploy intent verification
Repair path:
mandu agent repair --from .mandu/agent-verify.json --json
핵심 원칙
- Bun 네이티브: Bun 런타임과 번들러를 최대한 활용
- 환경 분리: 개발/스테이징/프로덕션 환경 명확히 구분
- 자동화: CI/CD를 통한 일관된 배포 프로세스
- 보안 우선: 민감 정보는 환경 변수로 관리
Provider Artifact Examples
Use these examples only after mandu.agent.plan selects the deploy domain and
mandu.agent.apply has produced the intended action order.
Render 배포 (권장)
# render.yaml
services:
- type: web
name: mandu-app
runtime: node
buildCommand: bun install && bun run build
startCommand: bun run start
envVars:
- key: NODE_ENV
value: production
- key: BUN_ENV
value: production
Docker 배포
FROM oven/bun:1.3.14
WORKDIR /app
COPY package.json bun.lockb ./
RUN bun install --frozen-lockfile --production
COPY . .
RUN bun run build
EXPOSE 3000
CMD ["bun", "run", "start"]
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- _sections.md 1008 B
- _template.md 547 B
- metadata.json 490 B
- rules/db-provider-supabase.md 9.3 KB
- rules/deploy-build-bun.md 2.0 KB
- rules/deploy-build-output.md 2.6 KB
- rules/deploy-cicd-github.md 4.5 KB
- rules/deploy-docker-bun.md 2.7 KB
- rules/deploy-docker-compose.md 4.0 KB
- rules/deploy-platform-fly.md 2.3 KB
- rules/deploy-platform-render.md 3.3 KB
- rules/deploy-platform-vercel.md 3.0 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 136 lines · 11 tokens per session scan A 731a4d191c56
Mandu Deployment is a skill published in the GitHub repository konamgil/mandu (46 stars, last pushed 11d ago), licensed MPL-2.0. It adds 11 tokens to every session and 889 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
truecourse-hooks
Install, configure, or remove the TrueCourse pre-commit hook.
init-workspace-documentation
Skill "init-workspace-documentation" from griddynamics/rosetta, covering agent memory.md, agent memory, preventive rules, what worked and what failed.
truecourse-list
List TrueCourse violations found in this repository.
plan
Research the codebase and create an implementation plan following Propose/Justify/Recommend. Use this before any feature, fix, or refactor.
flash-reel
Generates a 30-second 9 16 cinematic reel from a user prompt (setting + vibe + rough storyline). Flash Reel — 30s Cinematic Reel Skill When to use User provides: a setting, a vibe/mood, and optionally a rough storyline. They want a 30 second 9:16 reel with hard cuts every 3-4 seconds, anchored by one or more…
seedance-prompting-skills-for-cinematic-films
When to use Trigger this skill when the user requests photorealistic cinematic motion — not stylized animation, not motion design, not UGC. Specifically.