Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ncaq/konoka --skill surveygit clone --depth 1 https://github.com/ncaq/konokaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ncaq/konoka/survey)<a href="https://agentmods.dev/skills/ncaq/konoka/survey"><img src="https://agentmods.dev/badge/skills/ncaq/konoka/survey/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ncaq/konoka/survey"><img src="https://agentmods.dev/badge/skills/ncaq/konoka/survey.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.01760 |
| Opus 5.5 | $0.00016 | $0.00704 |
| Sonnet 5.5 | $0.00008 | $0.00352 |
| Haiku 4.5 | $0.00004 | $0.00176 |
Grade A, and why
survey scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
あらゆる情報ソースを横断検索して回答します。
調査クエリ
$ARGUMENTS
利用可能なソース
- Web
- 一般的なWeb検索(WebSearch)
- 任意のURL取得(WebFetch)
- ドキュメント
- Cloudflare Docs(MCP)
- Context7(ライブラリの最新ドキュメント)(MCP)
- Hackage(WebFetch)
- MDN(MCP)
- Microsoft Learn(MCP)
- Nix
- nixpkgs(MCP)
- home-manager(MCP)
- flakes(MCP)
- リポジトリ
- GitHub(コード検索、Issue/PR確認)(MCP)
- DeepWiki(MCP)
- プロジェクト管理
- Backlog(課題、Wiki、PR)(MCP)
検索戦略
- 質問の種類を判断し適切なソースを選択
- ライブラリの問題調査時はGitHub Issue/PRを確認
- 複数ソースから情報を収集して統合
実行方針
- 情報の網羅性と根拠の数を保つ
- 深い推論、長い検討、仮説の掘り下げは避ける
- 独立した検索を進め、得られた事実をそのまま報告する
- 情報源間に矛盾がある場合だけ、原因を簡潔に確認する
- 推測で補完せず、確証のない点は不明として明記する
- 各ソースの取得後に再計画せず、必要な検索を完了したら直ちに報告する
出力
- 情報源を明記
- 関連URLを提示
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 153 lines · 39 tokens per session scan A 4505cc546b69
survey is a skill published in the GitHub repository ncaq/konoka (3 stars, last pushed yesterday), licensed Apache-2.0. It adds 39 tokens to every session and 1,760 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
cloudflare-email-routing
Cloudflare Email Routing for receiving/sending emails via Workers. Use for email workers, forwarding, allowlists, or encountering Email Trigger errors, worker call failures, SPF issues.
bun-sqlite
Use for bun:sqlite, SQLite operations, prepared statements, transactions, and queries.
bun-http-server
Use when building HTTP servers with Bun.serve, handling requests/responses, implementing routing, creating REST APIs, or configuring fetch handlers.
api-testing
HTTP API testing for TypeScript (Supertest) and Python (httpx, pytest). Test REST APIs, GraphQL, request/response validation, authentication, and error handling.
bun-jest-migration
Use when migrating from Jest to Bun's test runner, import compatibility, mocks, and config.
cloudflare-workers-migration
Migrate to Cloudflare Workers from AWS Lambda, Vercel, Express, and Node.js. Use when porting existing applications to the edge, adapting serverless functions, or resolving Node.js API compatibility issues.