Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add luno-cms/mcp --skill skillgit clone --depth 1 https://github.com/luno-cms/mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/luno-cms/mcp/skill)<a href="https://agentmods.dev/skills/luno-cms/mcp/skill"><img src="https://agentmods.dev/badge/skills/luno-cms/mcp/skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/luno-cms/mcp/skill"><img src="https://agentmods.dev/badge/skills/luno-cms/mcp/skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.01062 |
| Opus 5.5 | $0.00032 | $0.00425 |
| Sonnet 5.5 | $0.00016 | $0.00212 |
| Haiku 4.5 | $0.00008 | $0.00106 |
Grade A, and why
luno scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
LUNO
ユーザー引数: $ARGUMENTS
接続済みの LUNO を MCP で操作する。キーはチャットに出さない。フルキーを復唱しない(末尾数文字のみ確認可)。
未接続のとき
キーを聞かない。チャットに sk-agent- を出させない。
- 設定ファイルが無い(初回)→
npx -y @luno-cms/mcp setup(ブラウザで確認。キーは聞かない) - 401・期限切れ・プレースホルダ・clone 後にキーだけ無い →
npx -y @luno-cms/mcp login(ブラウザで確認。MCP 設定は作り直さない)
npx -y @luno-cms/mcp login
明示環境(アクセスがある人だけ):
npx -y @luno-cms/mcp login --env stg
JSON の手書きや .mcp.json 解説を主経路にしない。
公開デフォルト
一般ユーザーが届くのは prod(luno-prod / https://api.luno.rest/admin)。
dev / stg は消さない。ユーザーが明示したときだけ使う。
- prod →
https://api.luno.rest/admin→luno-prod - stg →
https://stg-api.luno.rest/admin→luno-stg(内部 / Benchmark / Partner) - dev →
http://127.0.0.1:8787/admin→luno-dev(ローカル)
アクティブ確認: npx -y @luno-cms/mcp env active
引数
空なら作業を続ける(セットアップウィザードを始めない)。
| 引数 | 動作 |
|---|---|
| (空) | 接続済み前提でユーザーの依頼を進める |
status |
npx -y @luno-cms/mcp env status を説明 |
prod / stg / dev |
env has-key が成功なら env switch。失敗なら login へ(設定が無ければ setup。キーを聞かない) |
help または不明 |
下の使い方。推測でコマンドを増やさない |
/luno 作業を続ける(接続済み前提)
/luno status 状態表示
/luno prod|stg|dev 環境切替(キーが無ければ login へ)
/luno はショートカット。入場券ではない。
最初の成功
最初の依頼は 一覧か下書き。publish / スキーマ変更 / prod 公開は初回にしない。
作業ルール
- 質問は 1 つずつ。
- Form Set / Contact Form の削除や課金・メンバー管理はエージェントキーでは不可。
- エントリ保存前に
get_form_set_schemaのsnapshotShape.exampleを使い、{ [formKey]: { [fieldKey]: value } }でsave_revisionする。 - 公開確認は
get_public_api_infoの/public/p/{projectId}/v1。 - 以降の MCP ツールは
luno-<active>(未指定なら luno-prod)を使う。 - 必要なら「MCP を再接続してください(Claude:
/mcp、Cursor: Reload / Tools & MCP)」と一言。
やってはいけないこと
- キーを git にコミットする
- チャットで API キーを要求する
- プレースホルダ
sk-agent-xxxxxxxxのまま接続成功にする - ユーザーが選んでいない環境のキーを要求し続ける
- prod を黙って publish / 破壊する
- 届かない dev / stg を推奨する
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +7 lines · +22 tokens per session 599a8bb1d576
- 1mo ago Changed · -45 lines · +20 tokens per session 3b45a7ef358f
- 1mo ago Changed 7904bb19615c
- 1mo ago First seen · 121 lines · 37 tokens per session scan A 9c02a05dfedc
luno is a skill published in the GitHub repository luno-cms/mcp (0 stars, last pushed 29d ago), licensed MIT. It adds 79 tokens to every session and 1,062 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…