Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add magnusrodseth/sparebank1-cli --skill sparebank1-sharedgit clone --depth 1 https://github.com/magnusrodseth/sparebank1-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/magnusrodseth/sparebank1-cli/sparebank1-shared)<a href="https://agentmods.dev/skills/magnusrodseth/sparebank1-cli/sparebank1-shared"><img src="https://agentmods.dev/badge/skills/magnusrodseth/sparebank1-cli/sparebank1-shared/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/magnusrodseth/sparebank1-cli/sparebank1-shared"><img src="https://agentmods.dev/badge/skills/magnusrodseth/sparebank1-cli/sparebank1-shared.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00083 | $0.00986 |
| Opus 5 | $0.00042 | $0.00493 |
| Sonnet 5 | $0.00017 | $0.00197 |
| Haiku 4.5 | $0.00008 | $0.00099 |
Grade A, and why
sparebank1-shared scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 82 lines — stays where its author put it; the contents beside it link to each section on GitHub.
sparebank1-shared
Foundation skill for the sb1 CLI, a client for the
SpareBank 1 personal banking API. Read this
before using any other sparebank1 skill.
This is real money and real bank data. Be conservative. Never invent account numbers or amounts; only act on what commands return or what the user states.
Install & first-time setup
cargo install sparebank1-cli # installs the `sb1` binary
One-time setup the user must do themselves (requires their BankID):
- Register a personal client app at https://developer.sparebank1.no
- Set its redirect URI to exactly
http://localhost:12345/callback - Put
CLIENT_ID/CLIENT_SECRETin a.env(git-ignored) or env vars sb1 login, opens the browser for BankID, stores the token
Do not run sb1 login on the user's behalf without asking; it triggers an
interactive BankID flow.
Authentication & storage
sb1 status # logged in? token expiry? which storage backend?
sb1 refresh # force a token refresh
sb1 logout # remove the token (add --all to also drop client credentials)
Tokens auto-refresh before expiry; the user normally does not re-login between
sessions. Secrets live in one of three backends, chosen by SB1_STORE:
SB1_STORE |
Where |
|---|---|
unset / keychain |
OS keychain (macOS Keychain / Linux keyutils / Windows Credential Manager), default |
op / 1password |
1Password via the op CLI (SB1_OP_VAULT, SB1_OP_ACCOUNT) |
file |
~/.config/sparebank1-cli/*.json (0600), plaintext, opt-in for headless/automation |
If a command reports "not logged in" or the client secret is rejected, tell the
user to run sb1 login (the secret has limited validity and may need rotating
in the developer portal). Do not retry in a loop.
Output & flags
- Default output is human-readable tables (Norwegian amounts:
kr 1 234,56). - Add
--jsonto any command for machine-readable output, always use this when parsing programmatically. - Errors print to stderr with a non-zero exit code.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 82 lines · 83 tokens per session scan A a5da15a892cf
sparebank1-shared is a skill published in the GitHub repository magnusrodseth/sparebank1-cli (22 stars, last pushed 2mo ago), licensed MIT. It adds 83 tokens to every session and 986 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
tbank-transfer-money
A guide for sending money through T-Bank, including transfers by phone number, bank details, or payment QR code. T-Bank is a Russian bank, and SBP is Russia's instant interbank payment system.
tbank-bill-pay
A set of tools for paying bills through T-Bank, including utilities, phone service, internet, taxes, and traffic fines. It can inspect providers and payment fields before making a payment.
tbank-invest-advisor
An investment-analysis skill that uses T-Bank data to review brokerage accounts, holdings, transactions, profit and loss, returns, and allocation. A brokerage account is an account used to buy and sell investments such as shares, bonds, and exchange-traded funds.
tbank-messenger
A chat connection for T-Bank, a Russian bank, that lets an agent read conversations, download attachments, and contact bank support. It works with chats inside the bank app, not SMS codes or push notifications.
tbank-budget-analyzer
A financial analysis skill that uses T-Bank data to examine accounts, transactions, spending categories, subscriptions, recurring payments, and automatic payments. T-Bank is a Russian bank and financial services provider.
tbank-cards-documents
A read-only T-Bank connection for viewing card and account details, transactions, identity documents, insurance policies, and bank certificates.