shelly-forge

shelly-forge is a skill for Claude Code, Codex from mslavov/shelly-forge. It costs 93 tokens per session (1,697 once invoked), scanned A, original, MIT.

A workflow for creating and managing TypeScript automations on Shelly smart-home devices. Shelly devices are connected hardware such as switches and sensors that can run small scripts; the workflow also covers a simulator and the shelly-forge command-line tool.

In plain words
What is it for?
Use it to create, test, build, deploy, verify, roll back, and debug Shelly device automations written in TypeScript.
Why use it?
It provides a consistent way to test scripts before using hardware and to check deployments, failures, logs, and rollbacks. It also helps avoid sending a script to the wrong device or exposing credentials.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to create, test, build, deploy, verify, roll back, and debug Shelly device automations written in TypeScript.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/mslavov/shelly-forge/shelly-forge
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add mslavov/shelly-forge --skill shelly-forge
Clone the repo
git clone --depth 1 https://github.com/mslavov/shelly-forge

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for shelly-forge

README.md
[![agentmods](https://agentmods.dev/badge/skills/mslavov/shelly-forge/shelly-forge/github.svg)](https://agentmods.dev/skills/mslavov/shelly-forge/shelly-forge)
Your own site
<a href="https://agentmods.dev/skills/mslavov/shelly-forge/shelly-forge"><img src="https://agentmods.dev/badge/skills/mslavov/shelly-forge/shelly-forge/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for shelly-forge

Your own site · 80×15
<a href="https://agentmods.dev/skills/mslavov/shelly-forge/shelly-forge"><img src="https://agentmods.dev/badge/skills/mslavov/shelly-forge/shelly-forge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 93 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,697 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00093 $0.01697
Opus 5.5 $0.00037 $0.00679
Sonnet 5.5 $0.00019 $0.00339
Haiku 4.5 $0.00009 $0.00170

Measured today against content hash e7ba6dd604d4, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

shelly-forge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/shelly-forge/SKILL.md · 140 lines

How it starts

The opening of the file, as written. The whole thing — 140 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Shelly project workflow

Use this skill for the host-side CLI and simulator. Follow shelly-scripting for device language rules, APIs, resource limits, and automation patterns. The MCP server was removed in 0.4.0.

Start with the project and target

Use Node.js 22.12 or newer. Inspect package.json, solutions.config.json, the selected source and test, and existing changes before editing. Work from the project root or pass --cwd <dir>. Confirm the selected device before a deploy or an RPC that changes state. Deployment stops, replaces, and starts that script.

For a new project, run:

npx shelly-forge init my-home
cd my-home
npm install
cp .env.example .env
npx shelly-forge --json create lighting hallway

Set DEVICE_HOSTNAME in the new .env to the intended host. Set SHELLY_PASSWORD there if the device requires authentication. Never echo or include credentials in reports. Keep SHELLY_PUBLIC_GREETING set for the starter scripts; an empty value uses their fallback. Public build values enter the artifact, so never use them for secrets. Existing process environment values override .env values.

create writes src/lighting/hallway.ts, its .test.ts, and a config entry. The template also includes src/example/hello.ts and its test. An omitted selector can deploy both entries. Use an explicit solution/script selector for device work.

Edit, test, check, deploy, inspect

  1. Write device code under src/<solution>/ and update its test. Follow shelly-scripting, not Node runtime assumptions.
  2. Run the tests and both TypeScript configurations. Keep the device and Node test configurations separate. Keep moduleDetection: "force" in both configurations so scripts without imports or exports do not share a global scope. See simulator tests.
  3. Run check. Fix type errors and artifact findings before deployment.
  4. Deploy only to the confirmed target. Default deployment builds, uploads, starts, and verifies the script throughout the full 3000 ms window. At least one healthy poll must complete within it. Every returned status must be healthy, including late responses. After a healthy poll, a later request cut off by the deadline does not fail verification. A failed health check attempts rollback when a different last-good artifact exists. A successful rollback still returns exit 5.
  5. Inspect status and bounded logs. A simulator pass or a successful upload alone does not prove that the device runs correctly.

Read the full file on GitHub · 140 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 140 lines · 93 tokens per session scan A e7ba6dd604d4

Subscribe to this mod's changes

shelly-forge is a skill published in the GitHub repository mslavov/shelly-forge (21 stars, last pushed yesterday), licensed MIT. It adds 93 tokens to every session and 1,697 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-06.

Related

shelly-forge compared with skills from other repositories

shelly-forge next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
shelly-forgemslavov/shelly-forgeSkill21yesterdayMITA93Claude Code, Codex
womldali-benothmen/womlSkill1742d agononeA66Claude Code, Codex
bun-ffi-native-bindingHarmeet10000/skillsSkill76mo agoMITA48Claude Code, Codex
viam-typescriptviam-devrel/agent-skillsSkill23mo agononeA234Claude Code
no-bare-castsprisma/ormSkill48kyesterdayApache-2.0A52Claude Code, Codex
aws-sst-developmentsickn33/agentic-awesome-skillsSkill49kyesterdayMITA26Claude Code
holoscan-install-wheelNVIDIA/skillsSkill3.9kyesterdayApache-2.0A34Claude Code, Codex