Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/luccapinto/agentic-data-kitnpx agentmods add skills/luccapinto/agentic-data-kit/creating-agents-and-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/luccapinto/agentic-data-kit/creating-agents-and-skills)<a href="https://agentmods.dev/skills/luccapinto/agentic-data-kit/creating-agents-and-skills"><img src="https://agentmods.dev/badge/skills/luccapinto/agentic-data-kit/creating-agents-and-skills/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/luccapinto/agentic-data-kit/creating-agents-and-skills"><img src="https://agentmods.dev/badge/skills/luccapinto/agentic-data-kit/creating-agents-and-skills.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00113 | $0.01921 |
| Opus 5.5 | $0.00045 | $0.00768 |
| Sonnet 5.5 | $0.00023 | $0.00384 |
| Haiku 4.5 | $0.00011 | $0.00192 |
Grade A, and why
creating-agents-and-skills scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 128 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Skill: creating-agents-and-skills
The governance gate for extending this kit. Goal: people add capabilities only when they help, build them with quality, and every installed tool folder stays in sync.
Follow three phases in order: Decide → Author → Propagate.
Phase 1 — Decide what (if anything) to build
Run these gates before creating anything. If a gate says stop, explain why and stop.
- LLM-native? → don't create. If a capable model already does this well ("write clean code", "use CTEs", "explain this function"), no artifact is needed. Just do the task.
- Narrow knowledge / a tool / a format / a checklist / a script? → make a SKILL. This is the default for almost everything: a team naming standard, a framework's rules, a validation procedure. Skills auto-activate by description and cost almost nothing until used.
- A repeatable multi-step procedure the user invokes? → make a WORKFLOW (slash command).
- Overlaps an existing skill/agent? → extend it, don't add a near-duplicate.
The agent-survival rule
An agent is allowed only if it imposes something the model cannot impose on itself:
- Restricted tools — a frontmatter
toolslist that removes capabilities (e.g. read-only). - Independent review — fresh context, without the author's reasoning.
- A different model than the main session.
- An automatic trigger that fires without the user asking.
If none applies, it is a skill: "a persona with a domain" is not a reason. Domain knowledge belongs in a skill, or is dropped if the model already knows it. Agents must not hand off to other agents.
Default to a skill. Recommend an agent only if you can name which of the four criteria it satisfies, and say so in the agent's description or body.
Phase 2 — Author it lean
Write only domain/org-specific signal. No filler, no restating what the model knows. English.
Agent — .agent/agents/<name>.md (example: pbi-visual-reviewer, a read-only reviewer):
---
name: pbi-visual-reviewer
description: Independently reviews Power BI report screenshots against the request and the PBIR folder; PASS/FAIL per page and visual. Use after a report change has been reloaded and screenshotted.
tools: Read, Grep, Glob # the restriction that justifies the agent: no Bash/Edit/Write
model: inherit
---
# PBI Visual Reviewer
<1–2 line identity> → fixed checklist → output format (PASS/FAIL). No handoffs.
tools is the field that matters: list only what the agent needs.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago Changed · +13 lines · +3 tokens per session e925e829f332
- 2mo ago First seen · 115 lines · 110 tokens per session scan A b580987ba7a2
creating-agents-and-skills is a skill published in the GitHub repository luccapinto/agentic-data-kit (7 stars, last pushed 10d ago), licensed MIT. It adds 113 tokens to every session and 1,921 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
creating-agents-and-skills compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| creating-agents-and-skillsluccapinto/agentic-data-kit | Skill | 7 | 10d ago | MIT | A | 113 | Claude Code, Codex |
| spec-kitty-charter-doctrinePriivacy-ai/spec-kitty | Skill | 1.7k | 26d ago | MIT | A | 135 | Claude Code, Codex |
| managing-astro-local-envastronomer/agents | Skill | 462 | 11d ago | Apache-2.0 | A | 63 | Claude Code |
| checking-freshnessastronomer/agents | Skill | 462 | 11d ago | Apache-2.0 | A | 44 | Claude Code |
| setup-husky-dotnetSebastienDegodez/copilot-instructions | Skill | 199 | 7d ago | Apache-2.0 | A | 30 | Claude Code, Codex |
| 128-java-genericsjabrena/plinth | Skill | 462 | today | Apache-2.0 | A | 147 | Claude Code, Codex |
| 322-frameworks-spring-boot-testing-integration-testsjabrena/plinth | Skill | 462 | today | Apache-2.0 | A | 123 | Claude Code, Codex |