Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/mdcms-ai/mdcms/mdcms-self-host-setupnpx skills add mdcms-ai/mdcms --skill mdcms-self-host-setupgit clone --depth 1 https://github.com/mdcms-ai/mdcmsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00120 | $0.01249 |
| Opus 5 | $0.00060 | $0.00624 |
| Sonnet 5 | $0.00024 | $0.00250 |
| Haiku 4.5 | $0.00012 | $0.00125 |
Grade A, and why
mdcms-self-host-setup scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sf http://localhost:4000/healthz How it starts
The opening of the file, as written. The whole thing — 105 lines — stays where its author put it; the contents beside it link to each section on GitHub.
MDCMS Self-Host Setup
Stand up an MDCMS backend the user can point the CLI, Studio, and SDK at. The official self-hosting story is Docker Compose from the MDCMS source repo.
When to use this skill
The user has decided to run MDCMS themselves (local development, staging, or production), and there is no existing server URL they can use. If they already have a hosted MDCMS endpoint, skip this skill.
Prerequisites
- Docker 24+ and Docker Compose v2+ on the target machine (Docker Desktop covers both on macOS/Windows).
- Git, to clone the MDCMS source.
- Outbound network access to
github.com,ghcr.io(or Docker Hub), and any package registries the images pull from. - A free TCP port for the server (default
4000) and dependencies (5432,6379,9000,9001,1025,8025).
Steps
1. Clone the MDCMS source
git clone https://github.com/mdcms-ai/mdcms.git
cd mdcms
The project lives in a monorepo but Docker Compose handles everything — the host does not need Bun or Node.js to run the server.
2. Create the env file
cp .env.example .env
The example defaults are suitable for local evaluation. For staging or production, change:
- Database credentials (
POSTGRES_PASSWORD,DATABASE_URL). - S3/MinIO credentials (
S3_ENDPOINT,S3_ACCESS_KEY,S3_SECRET_KEY,S3_BUCKET) if switching to a real S3 bucket. - Auth provider settings if using OIDC/SAML/email.
MDCMS_STUDIO_ALLOWED_ORIGINS— the list of origins Studio is allowed to embed from. Add the URL(s) of the host apps that will embed<Studio />.
Keep the file out of version control.
3. Bring up the stack
docker compose up -d --build
This starts:
| Service | Port | Purpose |
|---|---|---|
| MDCMS Server | 4000 |
API backend |
| PostgreSQL 16 | 5432 |
primary database |
| Redis 7 | 6379 |
sessions + cache |
| MinIO | 9000 / 9001 |
S3-compatible object storage |
| Mailhog | 1025 / 8025 |
dev email capture |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 105 lines · 120 tokens per session scan A f11c80079d80
mdcms-self-host-setup is a skill published in the GitHub repository mdcms-ai/mdcms (22 stars, last pushed 4d ago), licensed MIT. It adds 120 tokens to every session and 1,249 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
release-and-publish
Ship a release end-to-end across every registry the project targets (npm, MCP Registry, GitHub Releases for .mcpb bundles, GHCR). Runs the final verification gate, pushes commits and tags, then publishes to each applicable destination. Assumes git wrapup (version bumps, changelog, commit, annotated tag) is already…
Shade ShadCN install
Guardrails for running pnpm dlx shadcn@latest add in Shade — never overwrite existing components, fresh branch first, swap raw colours for semantic tokens after integrating. Trigger when the user proposes a shadcn add, or when a fresh ShadCN-shaped file lands in apps/shade/src/components/ui.
wordpress-plugin-to-emdash
Port a WordPress plugin to EmDash CMS. Use this skill when asked to migrate, convert, or port a WordPress plugin, theme functionality, or custom post type to EmDash. Provides concept mapping and implementation patterns.
deploy-docker-compose
Run the Omnigent server as a Docker compose stack (server + Postgres) on any Docker host — your laptop, a VPS, EC2 by hand, or as the base layer of any container-platform deploy. Invoke when the user wants to build the image, bring up the compose stack, debug the stack on a host they already have, or extend the stack…
reproduce-issue
The single skill for reproducing an nx issue. Given a GitHub issue number (human entry) OR explicit repro parameters (agent entry), it runs the reproduction ENTIRELY inside an isolated Docker sandbox — gVisor on Linux, the Docker VM on macOS — so the untrusted repro's install scripts and commands never execute on the…
diagnose
Trace from a reproduced symptom to the source code that causes it. Pin the specific file and approximate line, rate confidence in the cause and clarity of the fix independently, and always propose a concrete fix.