Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add magnusrodseth/sparebank1-cli --skill sparebank1-sharedgit clone --depth 1 https://github.com/magnusrodseth/sparebank1-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/magnusrodseth/sparebank1-cli/sparebank1-shared)<a href="https://agentmods.dev/skills/magnusrodseth/sparebank1-cli/sparebank1-shared"><img src="https://agentmods.dev/badge/skills/magnusrodseth/sparebank1-cli/sparebank1-shared/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/magnusrodseth/sparebank1-cli/sparebank1-shared"><img src="https://agentmods.dev/badge/skills/magnusrodseth/sparebank1-cli/sparebank1-shared.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00083 | $0.01505 |
| Opus 5.5 | $0.00033 | $0.00602 |
| Sonnet 5.5 | $0.00017 | $0.00301 |
| Haiku 4.5 | $0.00008 | $0.00151 |
Grade A, and why
sparebank1-shared scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
sparebank1-shared
Foundation skill for the sb1 CLI, a client for the
SpareBank 1 personal banking API. Read this
before using any other sparebank1 skill.
This is real money and real bank data. Be conservative. Never invent account numbers or amounts; only act on what commands return or what the user states.
Install & first-time setup
cargo install sparebank1-cli # installs the `sb1` binary
One-time setup the user must do themselves (requires their BankID):
- Register a personal client app at https://developer.sparebank1.no
- Set its redirect URI to exactly
http://localhost:12345/callback - Put
CLIENT_ID/CLIENT_SECRETin a.env(git-ignored) or env vars sb1 login, opens the browser for BankID, stores the token
Do not run sb1 login on the user's behalf without asking; it triggers an
interactive BankID flow.
Authentication & storage
sb1 status # logged in? token expiry? which storage backend?
sb1 refresh # force a token refresh
sb1 logout # remove the token (add --all to also drop client credentials)
sb1 status --profile <profile-name>
sb1 refresh --profile <profile-name>
Each local profile has its own credentials and tokens. sb1 status lists
profiles and marks the default. Read commands and hello use the default unless
--profile <profile-name> is supplied. sb1 login --profile <profile-name>
creates a profile after confirmation or reauthenticates it; each person
completes their own BankID login. Use a separate personal client for each
independently authenticated profile. CLIENT_ID and CLIENT_SECRET in .env
provide one credential pair for initial setup; pass another profile's client
credentials with --client-id and --client-secret (or environment
variables). sb1 profile set-default <profile-name> changes the designation.
sb1 profile rename <old-name> <new-name> changes a profile's local name
without requiring a new BankID login; the default designation follows the rename.
refresh and logout require --profile when multiple profiles exist.
Repeat --profile to select a subset for combined reads. Commands requiring
one profile reject multiple selected profiles. Repeated names are queried once.
Read-only commands accept --all-profiles to combine results from every
configured profile: hello, accounts, account, balance, transactions,
transaction, export, and summary. This option is mutually exclusive with
--profile and is not supported for status, login, logout, refresh, profile
management, or transfers.
Aggregate account lists deduplicate accounts by the bank account key. Shared
accounts are counted once in balances and summaries; transaction and export
rows include the profile used to fetch them. JSON aggregate responses contain
complete and errors; in table or CSV mode, read stderr warnings for partial
failures. Never describe an incomplete result as complete. If an account
reference is ambiguous, use --profile or its exact bank account key.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +18 lines d0c766a10a25
- 15d ago Changed · +18 lines ce5f124d9c56
- 2mo ago First seen · 82 lines · 83 tokens per session scan A a5da15a892cf
sparebank1-shared is a skill published in the GitHub repository magnusrodseth/sparebank1-cli (23 stars, last pushed 7d ago), licensed MIT. It adds 83 tokens to every session and 1,505 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
tbank-transfer-money
A guide for sending money through T-Bank, including transfers by phone number, bank details, or payment QR code. T-Bank is a Russian bank, and SBP is Russia's instant interbank payment system.
tbank-bill-pay
A set of tools for paying bills through T-Bank, including utilities, phone service, internet, taxes, and traffic fines. It can inspect providers and payment fields before making a payment.
tbank-invest-advisor
An investment-analysis skill that uses T-Bank data to review brokerage accounts, holdings, transactions, profit and loss, returns, and allocation. A brokerage account is an account used to buy and sell investments such as shares, bonds, and exchange-traded funds.
tbank-messenger
A chat connection for T-Bank, a Russian bank, that lets an agent read conversations, download attachments, and contact bank support. It works with chats inside the bank app, not SMS codes or push notifications.
tbank-budget-analyzer
A financial analysis skill that uses T-Bank data to examine accounts, transactions, spending categories, subscriptions, recurring payments, and automatic payments. T-Bank is a Russian bank and financial services provider.
tbank-cards-documents
A read-only T-Bank connection for viewing card and account details, transactions, identity documents, insurance policies, and bank certificates.