Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/leynier/python-template/if-ai_capabilities-none-operate-ai-stack-endifnpx skills add leynier/python-template --skill if-ai_capabilities-none-operate-ai-stack-endifgit clone --depth 1 https://github.com/leynier/python-templateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/leynier/python-template/if-ai_capabilities-none-operate-ai-stack-endif)<a href="https://agentmods.dev/skills/leynier/python-template/if-ai_capabilities-none-operate-ai-stack-endif"><img src="https://agentmods.dev/badge/skills/leynier/python-template/if-ai_capabilities-none-operate-ai-stack-endif.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00065 | $0.00375 |
| Opus 5 | $0.00032 | $0.00187 |
| Sonnet 5 | $0.00013 | $0.00075 |
| Haiku 4.5 | $0.00006 | $0.00038 |
Grade A, and why
operate-ai-stack scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Operate AI Stack
Treat .copier-answers.yml as the layer map and inspect the generated modules before assuming a framework or provider API.
Workflow
- Identify the workload, framework, model provider, embedding provider, data roles, interfaces, training extensions, serving engine, and quality tools that are actually enabled.
- Preserve the boundary between model and embedding providers. Keep provider-specific construction in the generated provider module and inject it into framework code.
- Use deterministic fakes for unit tests. Put real-provider checks behind explicit environment variables and never make the normal test suite spend tokens or require cloud credentials.
- For agents and MCP, test tool schemas and error paths. For RAG, test ingestion, retrieval, empty results, and citation metadata. For training, test a tiny local batch and artifact creation. For inference, test health plus one prediction.
- Record required secrets in
.env.example, use the settings layer, and redact prompt, credential, and personal data from logs. - Run the project quality gates from
project-workflow, followed by the smallest representative end-to-end check for the enabled stack.
Operational Checks
- Pin or bound model and API dependencies; review upstream breaking changes before updating.
- Track latency, token or compute usage, provider errors, and evaluation quality separately.
- Make external calls timeout and fail clearly; do not silently switch providers or models.
- Require an explicit review before changing production prompts, tools with side effects, or model artifacts.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 25 lines · 65 tokens per session scan A d0d52540dd9e
operate-ai-stack is a skill published in the GitHub repository leynier/python-template (37 stars, last pushed today), licensed MIT. It adds 65 tokens to every session and 375 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
datamodel-code-generator
Use this skill when the user wants Python data models, Pydantic models, dataclasses, TypedDicts, msgspec structs, or type-safe Python classes generated from OpenAPI, AsyncAPI, JSON Schema, GraphQL, JSON/YAML/CSV sample data, MCP tool schemas, Protocol Buffers, XML Schema, Apache Avro, or existing Python model objects.…
fastapi-guard
Production-ready security middleware for FastAPI. Use when adding IP filtering, rate limiting, per-route security decorators, route-resolution strict mode, global behavior rules, passive/log-only mode, or Guard Agent SaaS telemetry to a FastAPI app. Covers SecurityMiddleware setup, SecurityConfig tuning, and the…
emil-design-eng
This skill encodes Emil Kowalski's philosophy on UI polish, component design, animation decisions, and the invisible details that make software feel great.
playwright-testing
Use when writing Playwright tests, fixing flaky tests, debugging failures, implementing Page Object Model, configuring CI/CD, optimizing performance, mocking APIs, handling authentication or OAuth, testing accessibility (axe-core), file uploads/downloads, date/time mocking, WebSockets, geolocation, permissions…
content-quality-auditor
Publish-readiness gate: 80-item CORE-EEAT audit with weighted scoring, veto checks, and fix plan. 内容质量/EEAT评分.
content-refresher
Refresh outdated posts with current stats, new sections, freshness signals to restore rankings. 内容更新/排名恢复.