Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add michtio/craftcms-claude-skills --skill craft-garnishgit clone --depth 1 https://github.com/michtio/craftcms-claude-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/michtio/craftcms-claude-skills/craft-garnish)<a href="https://agentmods.dev/skills/michtio/craftcms-claude-skills/craft-garnish"><img src="https://agentmods.dev/badge/skills/michtio/craftcms-claude-skills/craft-garnish/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/michtio/craftcms-claude-skills/craft-garnish"><img src="https://agentmods.dev/badge/skills/michtio/craftcms-claude-skills/craft-garnish.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00358 | $0.01863 |
| Opus 5 | $0.00179 | $0.00932 |
| Sonnet 5 | $0.00072 | $0.00373 |
| Haiku 4.5 | $0.00036 | $0.00186 |
Grade A, and why
craft-garnish scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Garnish — Craft CMS Control Panel JavaScript Toolkit
Reference for Garnish, Craft CMS's built-in JavaScript UI framework. Covers the class system, UI widgets, drag interactions, form components, accessibility helpers, and integration with Craft's CP.
This skill is scoped to Garnish itself — the JavaScript library at src/web/assets/garnish/. For PHP-side plugin development (elements, controllers, services), see the craftcms skill. For CP template markup that Garnish widgets attach to, see the craftcms skill's cp.md reference.
Companion Skills — Load When Needed
craftcms— Load when the task involves PHP asset bundle classes, plugin architecture, or CP template markup that Garnish widgets attach to. Skip for pure JavaScript refactoring, Garnish API questions, or JS-only tasks.craft-php-guidelines— Load only when editing PHP files (asset bundle classes, controllers that register JS). Skip for pure JS work.
Documentation
- Garnish source:
src/web/assets/garnish/src/in the Craft CMS repository - No official external documentation exists — this skill IS the documentation.
Use WebFetch on Craft's class reference (https://docs.craftcms.com/api/v5/) when looking up PHP-side asset bundle registration.
Common Pitfalls (Cross-Cutting)
- Using jQuery
.on()directly instead ofthis.addListener()— listeners added via jQuery won't auto-clean ondestroy(), causing memory leaks. - Forgetting
this.base()when overridingdestroy()— parent cleanup (listener removal, event teardown) gets skipped. - Using
clickinstead ofactivateevent on non-<button>elements —activatehandles both click and keyboard (Space/Enter), making the UI accessible. - Fighting
UiLayerManagerby binding ESC directly — useGarnish.uiLayerManager.registerShortcut(Garnish.ESC_KEY, callback)so escape routes through the layer stack correctly. - Magic key code numbers instead of
Garnish.ESC_KEY,Garnish.RETURN_KEY, etc. — constants are self-documenting and consistent. - Instantiating Garnish widgets before the DOM is ready — Garnish requires jQuery and all dependencies loaded first; in plugin assets, rely on
CpAssetdependency chain. - Not calling
destroy()when removing widgets — orphaned listeners accumulate, especially in slideouts and live preview where DOM is repeatedly created/destroyed. - Importing Garnish into webpack bundles instead of using the external —
import Garnish from 'garnishjs'resolves towindow.Garnishvia webpack externals; bundling it duplicates 134KB. - Giving
nameattributes to inputs in a panel injected into another form (an entry-edit sidebar panel, a CP template hook) — the host form serializes them on save and your plugin's values are silently swallowed. Inputs are id-only, your JS reads them by id and posts to your own endpoint, and an Enter-key guard keeps the host form from submitting. Seeintegration.md(Panels Injected Into Another Form). - Using deprecated
Garnish.Menuinstead ofGarnish.CustomSelect—Menuis an alias kept for BC only. - Using deprecated
Garnish.escManagerorGarnish.shortcutManagerinstead ofGarnish.uiLayerManager— the newer manager provides layer-aware keyboard routing that respects the modal/menu stack.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 69 lines · 358 tokens per session scan A 6b7f04af670b
craft-garnish is a skill published in the GitHub repository michtio/craftcms-claude-skills (78 stars, last pushed 9d ago), licensed MIT. It adds 358 tokens to every session and 1,863 once invoked, about $0.0018 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
liveview-patterns
Build LiveView: async data (assignasync), PubSub (check connected?), phx-change events, form components/modals/uploads, streams for lists, livepatch. Use when handling interactions, debugging events, or tracking Presence.
fullstack-coder
Full-stack implementation agent that writes complete, production-ready code following an approved architecture and schema. Triggers on: write the code, implement features, build the app, code the MVP, generate codebase.
odoo-js
Use when writing, reviewing, or migrating any JavaScript, OWL component, QWeb/OWL template, or SCSS under static/src in an Odoo module — POS overrides, backend widgets, website/public widgets, services. Carries PSAE review-derived principles for OWL correctness, the patch() discipline, template conventions, frontend…
odoo-js
Use when writing, reviewing, or migrating any JavaScript, OWL component, QWeb/OWL template, or SCSS under static/src in an Odoo module — POS overrides, backend widgets, website/public widgets, services. Carries PSAE review-derived principles for OWL correctness, the patch() discipline, template conventions, frontend…
genpage
Creates, updates, and deploys Power Apps generative pages for model-driven apps using React v17, TypeScript, and Fluent UI V9. Orchestrates specialist agents for planning, entity creation, and code generation. Use it when user asks to build, retrieve, or update a page in an existing Microsoft Power Apps model-driven…
top-design
Create award-winning, immersive web experiences at the level of Awwwards-featured agencies. Use when the user mentions "Awwwards quality", "make my site stunning", "scroll animations", "parallax storytelling", "cinematic web design", "portfolio site", or "brand experience". Also trigger when elevating a standard…