Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ncaq/konoka/himarinpx skills add ncaq/konoka --skill himarigit clone --depth 1 https://github.com/ncaq/konokaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ncaq/konoka/himari)<a href="https://agentmods.dev/skills/ncaq/konoka/himari"><img src="https://agentmods.dev/badge/skills/ncaq/konoka/himari.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.01164 |
| Opus 5 | $0.00030 | $0.00582 |
| Sonnet 5 | $0.00012 | $0.00233 |
| Haiku 4.5 | $0.00006 | $0.00116 |
Grade A, and why
himari scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 108 lines — stays where its author put it; the contents beside it link to each section on GitHub.
himari
himariは、 ncaqが作成した、 rio の思想を受け継ぎつつ改良したカスタムPreludeライブラリです。
himariに依存するプロジェクトでは、
NoImplicitPreludeが有効になっており、
標準のPreludeの代わりにhimariを使います。
import は import Himari の1行だけ
himariを使うモジュールでは、 原則として以下の1行だけをimportします。
import Himari
Himariモジュールが以下を全て再exportするエントリポイントだからです。
Himari.CharHimari.EnvHimari.Env.SimpleHimari.LoggerHimari.Prelude
import Himari.Prelude を直接書かない
Himari.Preludeなどのサブモジュールを直接importするのは間違いです。
-- 間違い: サブモジュールを直接importしている
import Himari.Prelude
これをやるとHimari.CharやHimari.EnvやHimari.Loggerなどが漏れてしまい、
本来使えるはずのシンボルが見つからなくなります。
Himari.PreludeはHimariから再exportされるための内部モジュールであり、
利用側が直接importするものではありません。
同様にHimari.SafePreludeやHimari.Prelude.Typeなども基本は直接importしません。
全てimport Himariで揃います。
例外としてはSafe言語拡張を使うモジュールでHimari.SafePreludeのみをimportするケースがあります。
またhidingしたけど一部だけrenameしてシンボルを利用したいこともあるかもしれませんが、
これはqualified importの方を使うので稀でしょう。
主なシンボルの出どころ
import Himariで以下が利用可能になります。
個別importは不要です。
- ReaderT IOパターンの、
支援モナドと例えば以下の関数:
newtype Himari env a = Himari { unHimari :: ReaderT env IO a }runHimari :: (MonadIO m) => env -> Himari env a -> m a
- 文字列・コンテナ型、例えば以下:
ByteStringHashMapMapNonEmptySeqSetTextVector
- IO・並行:
UnliftIO系、例えば以下:UnliftIO.AsyncUnliftIO.DirectoryUnliftIO.Exception
- ログ: ロガーライブラリのre-exportで提供される
logInfoなど - Aeson:
Data.Aeson系とDeriving.Aeson
そのままimportしたら名前がコンフリクトしやすい、 個別のモジュールに属する関数が必要になった場合は、 qualified importが必要になります。 その時のエイリアス規約の一部(himariのhlintルール由来)は以下の通りです。
Data.ByteString→qualified as BData.Text→qualified as TData.Map.Strict→qualified as MapData.List→qualified as L
関連するhaskell-tasukeスキル
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 108 lines · 60 tokens per session scan A 6e0bf158818a
himari is a skill published in the GitHub repository ncaq/konoka (3 stars, last pushed 2d ago), licensed Apache-2.0. It adds 60 tokens to every session and 1,164 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
better-auth
Skill for integrating Better Auth - comprehensive TypeScript authentication framework for Cloudflare D1, Next.js, Nuxt, and 15+ frameworks. Use when adding auth, encountering D1 adapter errors, or implementing OAuth/2FA/RBAC features.
bun-ffi
This skill should be used when the user asks about "bun:ffi", "foreign function interface", "calling C from Bun", "native libraries", "dlopen", "shared libraries", "calling native code", or integrating C/C++ libraries with Bun.
bun-hot-reloading
Use when implementing hot reloading with Bun (--hot, --watch), HMR, or automatic code reloading during development. Covers watch mode, hot mode, and HTTP server reload.
cloudflare-workers-multi-lang
Multi-language Workers development with Rust, Python, and WebAssembly. Use when building Workers in languages other than JavaScript/TypeScript, or when integrating WASM modules for performance-critical code.
test-driven-development
Strict red-green-refactor TDD workflow for implementing features, fixing bugs, or changing behavior in Rails applications. Enforces the discipline of writing a failing test before any production code. Use whenever you want to implement with TDD — whether a new feature, a bugfix, a refactor, or any behavior change.
csharp-zero-gc
C# zero-GC engineering plans. Use when the user asks to make a system allocation-free, or mentions zero-GC, zero allocation, GC spikes, per-frame allocation budgets, object pooling systems, or preventing GC regressions. Produces a plan with commitment levels, acceptance criteria and regression guards, not a one-off…