Borrowing it
Nothing to install: this file belongs to LedgerHQ/ledger-live. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/LedgerHQ/ledger-live/develop/.agents/skills/runner-images/SKILL.mdgit clone --depth 1 https://github.com/LedgerHQ/ledger-liveWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ledgerhq/ledger-live/runner-images)<a href="https://agentmods.dev/skills/ledgerhq/ledger-live/runner-images"><img src="https://agentmods.dev/badge/skills/ledgerhq/ledger-live/runner-images/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ledgerhq/ledger-live/runner-images"><img src="https://agentmods.dev/badge/skills/ledgerhq/ledger-live/runner-images.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00091 | $0.00430 |
| Opus 5.5 | $0.00036 | $0.00172 |
| Sonnet 5.5 | $0.00018 | $0.00086 |
| Haiku 4.5 | $0.00009 | $0.00043 |
Grade A, and why
runner-images scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Runner images
The ledger-wallet-* runner images are built in LedgerHQ/ledger-wallet-runners. They preinstall the mise toolchain and the Android AVD. CI adapts automatically when this repo changes a version, so nothing breaks, but jobs stay slower until the image is updated to match.
Triggers
mise.toml:min_version, any entry under[tools](node, pnpm, bun, gitleaks, hk, ...), or a tool added or removedmise.lockchanges from a version bump- AVD: any value in
tools/actions/composites/setup-android-avd/avd.env(API level, arch, profile, target, cores, RAM, heap, emulator build and options), the rest of thesetup-android-avdaction, orpatch-avd-config.sh
Renovate bumps count too when you are the one reviewing or editing them.
What to do
Make the change here, then tell the user to update the matching image in LedgerHQ/ledger-wallet-runners, naming the old and new value. For example:
This bumps pnpm 11.28.7 → 11.29.0. Update the runner image in LedgerHQ/ledger-wallet-runners to match.
- Don't skip the prompt because CI still passes: the cost is speed, not failures.
- Don't edit ledger-wallet-runners yourself unless asked.
- Mention it again in the PR description so reviewers see the follow-up.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 27 lines · 91 tokens per session scan A 01701fa6a0a1
runner-images is a skill published in the GitHub repository LedgerHQ/ledger-live (624 stars, last pushed yesterday), licensed MIT. It adds 91 tokens to every session and 430 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-24.
Other skills, from other repositories
chinese-git-workflow
A reference for configuring Git with Chinese code-hosting services such as Gitee, Coding.net, GitLab China, and CNB, including SSH, HTTPS, credentials, CI, and repository mirroring.
managing-github-actions-secrets
Creates and updates GitHub Actions secrets for PostHog workflows. Use when adding a new CI secret, rotating an existing secret, wiring a workflow to an API token, package registry credential, deploy key, or any value referenced via ${{ secrets. }} in .github/workflows/.
monorepo-management
Master monorepo management with Turborepo, Nx, and pnpm workspaces to build efficient, scalable multi-package repositories with optimized builds and dependency management. Use when setting up monorepos, optimizing builds, or managing shared dependencies.
deployment-engineer
Expert deployment engineer specializing in modern CI/CD pipelines, GitOps workflows, and advanced deployment automation. Masters GitHub Actions, ArgoCD/Flux, progressive delivery, container security, and platform engineering. Handles zero-downtime deployments, security scanning, and developer experience optimization.…
update-github-workflows
Add or change GitHub Actions workflows, CI jobs, triggers, matrices, and shared PHP bootstrap behavior while preserving this repository's prerequisite gates, test setup, and reporting safeguards.
qa-project-bootstrap
Onboard a new QA engineer to an existing codebase, or audit an existing test architecture. Produces a 30-day ramp plan: codebase orientation, framework walkthrough, test architecture audit, mentorship pairing, and first-test guidance. Use when: "QA onboarding," "new tester," "ramp up," "test architecture audit,"…