Borrowing it
Nothing to install: this file belongs to marcoemrich/agentic_coding_lab. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/marcoemrich/agentic_coding_lab/main/.claude/skills/publish-site/SKILL.mdgit clone --depth 1 https://github.com/marcoemrich/agentic_coding_labWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/marcoemrich/agentic_coding_lab/publish-site)<a href="https://agentmods.dev/skills/marcoemrich/agentic_coding_lab/publish-site"><img src="https://agentmods.dev/badge/skills/marcoemrich/agentic_coding_lab/publish-site/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/marcoemrich/agentic_coding_lab/publish-site"><img src="https://agentmods.dev/badge/skills/marcoemrich/agentic_coding_lab/publish-site.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00088 | $0.01560 |
| Opus 5.5 | $0.00035 | $0.00624 |
| Sonnet 5.5 | $0.00018 | $0.00312 |
| Haiku 4.5 | $0.00009 | $0.00156 |
Grade C, and why
publish-site scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -LsSf https://astral.sh/uv/0.12.17/install.sh | sh Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -LsSf https://astral.sh/uv/0.12.17/install.sh | sh How it starts
The opening of the file, as written. The whole thing — 146 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/publish-site — build and publish the results site
The lab has two publishing paths and they are not alternatives:
| Path | Produces | Entry point |
|---|---|---|
| this skill | the live site on the gh-pages branch, one page per RQ |
pnpm deploy:site |
/build-overview |
a frozen Markdown snapshot under research/reports/ |
generate-snapshot-skeleton.py |
Do not reach for one when the user asked for the other. "Snapshot", "report",
"Bericht", "Stand" → /build-overview. "Site", "online", "deploy", "Pages" →
here.
What publishes, and what does not
export-site-data.py globs research/questions-*/*/README.md. So the site
carries the per-harness and cross-harness RQs only — research/workflow-dev/
and research/kata-dev/ are deliberately not published yet. If the user expects
a workflow-development RQ on the site, say that it is out of scope rather than
hunting for a bug.
Each RQ page shows its findings.md as written, behind a warning banner. There
is no separate review step, so a findings file that contradicts its own data
goes online as it stands. Worth a sentence to the user when you know of one.
Deploy is outward-facing
deploy-site.py pushes to a public branch. Never run it without the user
saying so in this conversation. Building is free and reversible; deploying is
not. When the user asks "how do I publish", answer with the commands and stop —
do not deploy to demonstrate.
Phase 1 — preconditions
deploy-site.py refuses on any of these, and it refuses after running its own
build, so checking first saves the build. Report them as a block:
cd /path/to/agentic_coding_lab
git rev-parse --abbrev-ref HEAD # must be main
git merge-base --is-ancestor HEAD origin/main && echo pushed || echo NOT-pushed
git status --porcelain -- research site | wc -l # must be 0
command -v uv || echo "uv MISSING"
test -d site/node_modules || echo "site deps MISSING"
Two of these are the traps:
site/node_modulesis not in the repo. Without it the Astro build dies withastro: not foundandbuild-site.pyexits 1 after already re-aggregating every RQ. Fix:cd site && pnpm install --frozen-lockfile. Do not worry about the host's pnpm version — corepack honours thepackageManagerpin insite/package.jsonand uses that one.uvis the documented interpreter and may be absent. Both pnpm scripts areuv run --project ../experiments python .... Install it the way the Dockerfile does, at the same pin, rather than reaching for pip (the system Python is PEP 668 managed and has noensurepip):curl -LsSf https://astral.sh/uv/0.12.17/install.sh | sh cd experiments && uv sync
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 146 lines · 88 tokens per session scan C 1134d99d9859
publish-site is a skill published in the GitHub repository marcoemrich/agentic_coding_lab (30 stars, last pushed 5d ago), licensed MIT. It adds 88 tokens to every session and 1,560 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-25.
publish-site compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| publish-sitemarcoemrich/agentic_coding_lab | Skill | 30 | 5d ago | MIT | C | 88 | Claude Code |
| gke-compute-classesgoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 83 | Claude Code, Codex |
| gke-reliabilitygoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 85 | Claude Code, Codex |
| gke-workload-securitygoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 171 | Claude Code, Codex |
| cloud-architectJeffallan/claude-skills | Skill | 12k | 7d ago | MIT | A | 71 | Claude Code |
| nemo-automodel-launcher-configNVIDIA/skills | Skill | 3.9k | yesterday | Apache-2.0 | A | 30 | Claude Code |
| azure-mgmt-botservice-dotnetmicrosoft/skills | Skill | 3.2k | yesterday | MIT | A | 78 | Claude Code |