Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add michtio/craftcms-claude-skills --skill craft-pluginsgit clone --depth 1 https://github.com/michtio/craftcms-claude-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/michtio/craftcms-claude-skills/craft-plugins)<a href="https://agentmods.dev/skills/michtio/craftcms-claude-skills/craft-plugins"><img src="https://agentmods.dev/badge/skills/michtio/craftcms-claude-skills/craft-plugins/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/michtio/craftcms-claude-skills/craft-plugins"><img src="https://agentmods.dev/badge/skills/michtio/craftcms-claude-skills/craft-plugins.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00363 | $0.02037 |
| Opus 5 | $0.00181 | $0.01019 |
| Sonnet 5 | $0.00073 | $0.00407 |
| Haiku 4.5 | $0.00036 | $0.00204 |
Grade A, and why
craft-plugins scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Craft CMS 5 — Plugin References (Index & Router)
This skill is a router, not a tutorial. Its job is to make per-plugin guidance discoverable from any task framing — front-end, back-end PHP, content migration, deployment, or config — and point you at the right reference file.
Each plugin's curated reference lives in references/<plugin>.md and covers
configuration, the Twig and/or PHP API, and the real-world pitfalls. Read the
matching reference before implementing anything plugin-specific.
How to use this skill
- Identify the plugin(s) named in the task (by name, package, or feature).
- Open the matching
references/<plugin>.mdfrom the table below. - If the task is back-end (PHP, content migration, events, deployment), check the reference's back-end / programmatic sections specifically — several plugins (Formie, Feed Me, Element API, Amazon SES) are primarily or substantially back-end despite historically living under the front-end skill.
Routing table
| Reference | Plugin (vendor) | Primary altitude | Key surface |
|---|---|---|---|
references/formie.md |
Formie (verbb) | Front-end and back-end | Form rendering (one-line/granular), theme config; programmatic form creation in a content migration, editing an existing form's field in a migration, forms as DB elements (not project config), cross-environment deployment, multi-site/static translation, overriding Formie's bundled strings (server + client window.FormieTranslations), native min/max length validation & its two message keys, required+min interaction, File Upload volume + file renaming, notification attachments, captcha & caching |
references/seomatic.md |
SEOmatic (nystudio107) | Front-end + config | Meta cascade, Twig get/set API, JSON-LD, custom element SEO bundles, sitemaps, GraphQL |
references/blitz.md |
Blitz (putyourlightson) | Mixed (front-end + ops) | Refresh modes, Twig dynamic content, driver architecture (storage/purger/deployer), Nginx rewrite, Cloudflare integration |
references/feed-me.md |
Feed Me (craftcms) | Back-end / ops | Data import from XML/JSON/CSV, field mapping, duplicate handling, CLI automation, scheduled imports |
references/imager-x.md |
Imager X (spacecatninja) | Front-end + config | Quick syntax, responsive srcset, named transforms, Power Pack markup (ppimg/pppicture), automatic generation, transformers, effects, optimizers |
references/image-optimize.md |
ImageOptimize (nystudio107) | Front-end + field config | OptimizedImages field, imgTag()/pictureTag() builders, loading strategies, transform methods, console commands |
references/ckeditor.md |
CKEditor (craftcms) | Mixed (field config + front-end) | Field settings (toolbar, headings, image mode), nested entries with chunk rendering and value helpers, link configuration, GraphQL Mode, ES-module custom plugins, HTML Purifier, Redactor migration |
references/sprig.md |
Sprig (putyourlightson) | Front-end | Reactive Twig components (htmx), live search, load more, pagination, filtering, form submissions without JS |
references/element-api.md |
Element API (craftcms) | Back-end / config | JSON API via config file, Fractal transformers, endpoint routing, pagination, caching |
references/retour.md |
Retour (nystudio107) | Ops / config | Redirect types (exact/regex), 404 tracking, CSV import, auto slug-change redirects, config |
references/navigation.md |
Navigation (verbb) | Front-end | Node querying, custom rendering, active states, custom fields on nodes, GraphQL |
references/hyper.md |
Hyper (verbb) | Front-end + field config | Link types, getLinkAttributes(), getText(), single/multi-link, element access, button atom integration |
references/colour-swatches.md |
Colour Swatches (craftpulse) | Mixed | Palette config, multi-colour swatches, Tailwind class mapping, Twig model API |
references/password-policy.md |
Password Policy (craftpulse) | Back-end / config | Validation rules, HIBP check, retention/expiry, console commands, recommended settings |
references/typogrify.md |
Typogrify (nystudio107) | Front-end | |typogrify, |widont, |truncateOnWord, smart quotes, widow prevention |
references/cache-igniter.md |
Cache Igniter (putyourlightson) | Ops | GlobalPing warmer, geographic locations, refresh delay, Blitz companion |
references/knock-knock.md |
Knock Knock (verbb) | Ops / config | Staging password protection, environment-aware config, URL exclusions |
references/timeloop.md |
Timeloop (craftpulse) | Mixed | Repeating date field, craft.timeloop variable API, recurringDates() function, GraphQL, period frequencies |
references/elements-panel.md |
Elements Panel (putyourlightson) | Dev tooling | Debug toolbar panels for element population counts, duplicate detection, eager-loading opportunities |
references/sherlock.md |
Sherlock (putyourlightson) | Ops / config | Security scanning, HTTP headers, CMS config checks, scheduled scans, IP restriction, monitoring |
references/embedded-assets.md |
Embedded Assets (spicyweb) | Mixed | oEmbed as first-class assets, craft.embeddedAssets.get(), iframe customization, GraphQL |
references/amazon-ses.md |
Amazon SES (putyourlightson) | Back-end / config | SES mail transport adapter, AWS credential config, SNS bounce tracking (no Twig API) |
references/warp.md |
Warp (craftpulse) | Front-end and back-end | Passwordless member auth: magic links (mlToken, never token), emailed one-time codes + segmented input, passkeys/WebAuthn, passwordless registration, session/device management. craft.warp variable, four fluent render builders (class accumulation + resetClass, key-by-key data merge, renderCss), @layer warp CSS escape, ten action routes (returnUrl vs Craft's redirect asymmetry, enumeration-safe responses, recent-auth-gated passkey routes), DOM contracts for hand-written markup |
references/vite.md |
Vite (nystudio107) | Front-end + buildchain | craft.vite.* Twig API (script, register, entry, asset, integrity, inline, includeCriticalCssTags, devServerRunning), vite.php config keys. Buildchain/vite.config.ts detail in the craft-site skill's references/vite-buildchain.md |
What ships with it
24 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/amazon-ses.md 2.9 KB
- references/blitz.md 9.4 KB
- references/cache-igniter.md 2.8 KB
- references/ckeditor.md 16 KB
- references/colour-swatches.md 7.0 KB
- references/element-api.md 6.6 KB
- references/elements-panel.md 2.4 KB
- references/embedded-assets.md 5.1 KB
- references/feed-me.md 7.9 KB
- references/formie.md 26 KB
- references/hyper.md 5.4 KB
- references/image-optimize.md 6.5 KB
- references/imager-x.md 15 KB
- references/knock-knock.md 2.1 KB
- references/navigation.md 6.5 KB
- references/password-policy.md 5.1 KB
- references/retour.md 4.1 KB
- references/seomatic.md 23 KB
- references/sherlock.md 3.2 KB
- references/sprig.md 9.7 KB
- references/timeloop.md 6.7 KB
- references/typogrify.md 2.9 KB
- references/vite.md 6.0 KB
- references/warp.md 12 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · -6 tokens per session 854de2dcee15
- 10d ago First seen · 60 lines · 369 tokens per session scan A c95730ff0aca
craft-plugins is a skill published in the GitHub repository michtio/craftcms-claude-skills (78 stars, last pushed 7d ago), licensed MIT. It adds 363 tokens to every session and 2,037 once invoked, about $0.0018 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
skill-monitor
Analyze skill effectiveness across sessions. Computes per-skill metrics (action rate, friction, outcomes), identifies degrading skills, and generates improvement recommendations. Requires session-scan data in metrics.jsonl.
audit
Project health audit and health check — architecture, performance, tests, dependencies, code quality. Use when assessing overall project health, before releases, or after refactors.
learn-from-fix
Capture Elixir/Ecto/LiveView lessons and Hex API rules. Use after corrections or when asked to document learning, record a lesson, prevent a fixed mistake, or remember package guidance with --library.
review
Review code with parallel agents — tests, security, Ecto, LiveView, Oban. Use after implementation to catch bugs and anti-patterns before committing.
phx-deps-audit
Audit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after mix deps.update, when checking if a package upgrade is safe, or reviewing mix.lock PR diffs.
promote
Generate X/Twitter release promotion posts with ASCII tables and CodeSnap rendering. Use when writing release posts, promotion tweets, plugin announcements, or preparing social media content for new versions.