Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add modu-ai/moai-cowork --skill data-publicgit clone --depth 1 https://github.com/modu-ai/moai-coworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/modu-ai/moai-cowork/data-public)<a href="https://agentmods.dev/skills/modu-ai/moai-cowork/data-public"><img src="https://agentmods.dev/badge/skills/modu-ai/moai-cowork/data-public/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/modu-ai/moai-cowork/data-public"><img src="https://agentmods.dev/badge/skills/modu-ai/moai-cowork/data-public.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 86 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00273 | $0.01768 |
| Opus 5 | $0.00137 | $0.00884 |
| Sonnet 5 | $0.00055 | $0.00354 |
| Haiku 4.5 | $0.00027 | $0.00177 |
Grade A, and why
data-public scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.
공공데이터 정밀 조회 (Public Data Advanced)
역할
공공데이터포털(data.go.kr)과 KOSIS 통계청 OpenAPI를 직접 제어해 정밀 조회·고급 분석을 수행하는 전문가. 자연어 1줄 질문은 korean-stats MCP로 우선 라우팅하고, 본 스킬은 OpenAPI 직접 제어·파라미터 정밀 조작·특정 엔드포인트 호출이 필요한 케이스를 담당합니다.
라우팅 우선순위 (중요)
| 요청 유형 | 우선 스킬/MCP | 비고 |
|---|---|---|
| 자연어 KOSIS 통계 1줄 질문("광진구 고용률", "성남시 인구 추이", "전국 출산율 순위") | korean-stats MCP (공용키 hosted, 발급 불필요) | quick_stats·quick_trend·quick_rank·chain_* 14도구. 92 키워드 + 100+ 자연어 별칭. |
| data.go.kr 정밀 조회·특정 API 엔드포인트 직접 호출 | 본 스킬 (BYOK: DATA_GO_KR_API_KEY) | OpenAPI 직접 제어. |
| KOSIS OpenAPI 정밀 파라미터·고급 시계열 분석 | 본 스킬 (BYOK: KOSIS_API_KEY) | 통계표 ID·분류 코드 직접 지정. |
| CSV/Excel 통계 파일 분석 | moai-analyst:data-explorer |
파싱된 파일 분석. |
| 차트 시각화 | moai-analyst:data-visualizer |
차트 생성. |
자연어 KOSIS 통계 질문은 korean-stats MCP가 우선입니다. 본 스킬은 (1) data.go.kr의 다양한 API를 직접 제어할 때, (2) KOSIS에서 특정 통계표 ID·분류 항목을 정밀하게 지정해야 할 때, (3) OpenAPI 응답을 가공·분석해야 할 때 사용합니다.
지원 데이터 소스
data.go.kr (공공데이터포털)
- API URL: https://apis.data.go.kr/
- 인증: DATA_GO_KR_API_KEY 환경변수
- 발급: https://www.data.go.kr/ 회원가입 → 활용신청 → 자동승인
- 일일 제한: 1,000회 (개발계정)
KOSIS (통계청)
- API URL: https://kosis.kr/openapi/Param/statisticsParameterData.do
- 인증: KOSIS_API_KEY 환경변수
- 발급: https://kosis.kr/openapi/ 회원가입 → 자동승인
- 일일 제한: 1,000회
- 응답 포맷: JSON, XML, SDMX
워크플로우
Step 1: 라우팅 확인
자연어 1줄 질문이면 korean-stats MCP 우선. 본 스킬은 아래 케이스에만 진입:
- data.go.kr 특정 API 엔드포인트 직접 지정 필요
- KOSIS 통계표 ID·분류 항목 코드를 정밀하게 제어해야
- OpenAPI 응답 원본(JSON/XML/SDMX) 가공 필요
Step 2: API 키 확인 (필수)
공공데이터 정밀 조회를 위해 API 키가 필요합니다. 키 없이는 진행하지 않습니다.
IF DATA_GO_KR_API_KEY 미설정 AND KOSIS_API_KEY 미설정:
"공공데이터 정밀 조회를 위해 API 키가 필요합니다.
[공공데이터포털]
1. https://www.data.go.kr/ 접속 → 회원가입
2. 개발계정 신청 → 활용신청 → 자동승인
무료, 1,000회/일
[KOSIS 통계청]
1. https://kosis.kr/openapi/ 접속 → 회원가입
2. 인증키 신청 → 자동승인 즉시 발급
무료, 1,000회/일
또는 자연어 1줄 질문이면 korean-stats MCP(키 불필요)를 사용하세요.
어떤 API 키를 등록하시겠습니까?"
AskUserQuestion:
○ 공공데이터포털 키 입력 (권장)
○ KOSIS 통계 키 입력
○ 두 키 모두 입력
○ korean-stats MCP로 자연어 조회 (키 불필요)
+ Other
→ 키 입력 후 ${CLAUDE_PLUGIN_DATA}/moai-credentials.env에 저장
→ Step 3로 진행
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 120 lines · 273 tokens per session scan A ea79caa56be1
data-public is a skill published in the GitHub repository modu-ai/moai-cowork (298 stars, last pushed 6d ago), licensed Apache-2.0. It adds 273 tokens to every session and 1,768 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
market-intelligence-report
Produce a Market Intelligence Report — YouTube competitive research, channel analysis, content gap discovery, idea generation, daily scanning, and AI trend scouting — then render it as a BenAI-branded HTML dashboard in the instant-ui design language. Use this skill whenever the user says "market intelligence report"…
linkedin-writer-vault
Vault-aware LinkedIn writer. Same step-by-step LinkedIn post process as linkedin-writer, but ICP, voice, and offer context come from the vault's Context/ folder instead of being bundled inside the skill. Update one file in the vault and every skill pointing to it inherits the change. TRIGGERS: LinkedIn post, LinkedIn…
marketing-os-carousel
Build an image-first social carousel from an asset already filed in the Marketing OS, export it as a PDF, and record it back as a real channel asset. Brand palette, typography, the logo pointer and the never-black-background rule all resolve from Context/brand/brand-kit.md. Source is a filed newsletter edition…
operator
Build and schedule a personalized Operator prompt that runs a Baalda vault as a second brain on a recurring cadence. Run it from inside the vault: it reads Context/ and CLAUDE.md first to infer org, team, brand voice and paths, then asks only the gaps (cadence, connectors, DM recipient, budgets, signature), writes the…
crm-prospect-mining
Mine high-value prospects from CRM pipeline stages (Lost, No Show, Churned, Stalled) by cross-referencing records with LinkedIn company data and comms history. Connects to any CRM, pulls records from target stages, filters out personal email domains, finds company LinkedIn pages via web research, bulk-scrapes company…
seo-hreflang
Hreflang and international SEO audit, validation, and generation. Detects common mistakes, validates language/region codes, and generates correct hreflang implementations for HTML, HTTP headers, and XML sitemaps. Use when user says "hreflang", "i18n SEO", "international SEO", "multi-language", "multi-region"…