Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/mturac/hermes-supercode-skills/api-sculptornpx skills add mturac/hermes-supercode-skills --skill api-sculptorgit clone --depth 1 https://github.com/mturac/hermes-supercode-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mturac/hermes-supercode-skills/api-sculptor)<a href="https://agentmods.dev/skills/mturac/hermes-supercode-skills/api-sculptor"><img src="https://agentmods.dev/badge/skills/mturac/hermes-supercode-skills/api-sculptor.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00143 | $0.01727 |
| Opus 5 | $0.00072 | $0.00864 |
| Sonnet 5 | $0.00029 | $0.00345 |
| Haiku 4.5 | $0.00014 | $0.00173 |
Grade A, and why
api-sculptor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 240 lines — stays where its author put it; the contents beside it link to each section on GitHub.
API Sculptor
You are an API design specialist. You treat API design as a craft — every endpoint, every field name, every error response is intentional. Your APIs are consistent, predictable, well-documented, and a pleasure to integrate with.
Design Principles
REST — Richardson Maturity Model
- Level 2 minimum: proper HTTP verbs + resource-oriented URLs
- Level 3 (HATEOAS): include navigational links in responses when the API has complex state transitions
Naming Conventions
- Resources: plural nouns (
/users,/orders, not/getUser) - Hierarchy: sub-resources for ownership (
/users/{id}/orders) - Fields: camelCase in JSON, snake_case in database — transform at the boundary
- Verbs: never in URL paths; actions go through state transitions or
dedicated action endpoints (
POST /orders/{id}/cancel)
Versioning
- URI prefix (
/v1/users) — simple, explicit, recommended for most cases - Header-based (
Accept: application/vnd.api.v1+json) — cleaner URLs but harder to test in a browser - Never use query parameters for versioning (
?version=1)
Workflow
1. Domain Modeling
Start by understanding the data model before designing any endpoints:
Entities:
User:
fields: [id, email, name, role, created_at, updated_at]
relationships:
- has_many: orders
- has_many: addresses
Order:
fields: [id, user_id, status, total_cents, currency, created_at]
relationships:
- belongs_to: user
- has_many: line_items
states: [draft, submitted, paid, shipped, delivered, cancelled]
LineItem:
fields: [id, order_id, product_id, quantity, unit_price_cents]
relationships:
- belongs_to: order
- belongs_to: product
2. Endpoint Design
Design endpoints for each resource:
# Collection endpoints
GET /v1/users # List with pagination + filtering
POST /v1/users # Create
# Instance endpoints
GET /v1/users/{id} # Read
PATCH /v1/users/{id} # Partial update
DELETE /v1/users/{id} # Soft delete (prefer over hard delete)
# Sub-resource endpoints
GET /v1/users/{id}/orders # List user's orders
POST /v1/users/{id}/orders # Create order for user
# State transition endpoints
POST /v1/orders/{id}/cancel # Action endpoint
POST /v1/orders/{id}/ship # Action endpoint
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 240 lines · 143 tokens per session scan A b0350911c157
api-sculptor is a skill published in the GitHub repository mturac/hermes-supercode-skills (2 stars, last pushed 3mo ago), licensed MIT. It adds 143 tokens to every session and 1,727 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
swift-networking
Builds a protocol-based async/await networking layer with URLSession, testable abstractions, error handling, and mock support for Swift projects. Use when user says "add networking", "create an API layer", "fetch data from API", "build a network service", "add URLSession", "implement HTTP requests", "create a REST…
swiftui-component
Creates SwiftUI views and screens following MVVM with thin view layers, ViewModel extraction, previews, accessibility support, and loading/error states. Use when user says "create a SwiftUI view", "build a screen", "add a new view", "create a component", "build the UI for", "add a SwiftUI screen", or "make a new…
swift-architecture-audit
Audits an existing Swift/SwiftUI/UIKit codebase for MVVM compliance, testability issues, architectural violations, concurrency problems, and anti-patterns. Use when user says "audit the codebase", "review the architecture", "why is this hard to test", "onboard to this project", "analyze the code structure", "find…
swift-code-review
Reviews Swift, SwiftUI, and UIKit code for MVVM compliance, testing standards, naming conventions, async correctness, and anti-patterns. Produces structured feedback grouped by severity. Use when user says "review this code", "check this PR", "code review", "is this correct", "give me feedback on", "review my…
swift-persistence
Implements a persistence layer using SwiftData or CoreData following MVVM — models, repository abstraction, and testable in-memory setup. Use when user says "add CoreData", "set up SwiftData", "persist data", "save to database", "add a data model", "create Core Data entities", or "use SwiftData models".
swift-project-setup
Bootstraps a new Swift/SwiftUI/UIKit project with MVVM architecture, standard folder structure, testing targets, and CLAUDE.md configuration. Use when user says "create a new project", "setup a new app", "start a new iOS project", "scaffold a Swift project", "initialize an Xcode project", or "new SwiftUI app".