Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/nimblebraininc/upjack/upjack-app-buildernpx skills add NimbleBrainInc/upjack --skill upjack-app-buildergit clone --depth 1 https://github.com/NimbleBrainInc/upjackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nimblebraininc/upjack/upjack-app-builder)<a href="https://agentmods.dev/skills/nimblebraininc/upjack/upjack-app-builder"><img src="https://agentmods.dev/badge/skills/nimblebraininc/upjack/upjack-app-builder.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00092 | $0.05994 |
| Opus 5 | $0.00046 | $0.02997 |
| Sonnet 5 | $0.00018 | $0.01199 |
| Haiku 4.5 | $0.00009 | $0.00599 |
Grade A, and why
upjack-app-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 706 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Upjack App Builder
Generate complete, spec-compliant NimbleBrain Upjack apps from a plain English description. The user says "create me a todo app" and you produce every file needed for a working Upjack app.
Quick Start
User says: "Create me a todo app"
You produce:
todo/
├── manifest.json
├── README.md
├── schemas/
│ ├── task.schema.json
│ ├── project.schema.json
│ └── label.schema.json
├── skills/
│ └── task-management/
│ └── SKILL.md
├── context.md
├── seed/
│ └── sample-tasks.json
└── server.py
References
Read these before generating. They are the source of truth. All paths are relative to the Upjack repo root.
- Upjack spec:
docs/SPEC.md - Entity model:
docs/ENTITY_MODEL.md - Manifest spec:
docs/UPJACK_MANIFEST.md - Manifest schema:
schemas/v1/upjack-manifest.schema.json - Entity base schema:
schemas/v1/upjack-entity.schema.json - CRM example:
examples/crm/ - Research example:
examples/research-assistant/ - Library source:
lib/src/upjack/
Process
Phase 1: Understand the Request
Extract from the user's description:
- App domain: What problem space? (productivity, finance, content, operations, etc.)
- Core entities: What things does the user manage? (tasks, projects, invoices, articles)
- Behaviors: What should the agent do automatically? (prioritize, categorize, alert, summarize)
- Relationships: How do entities connect? (tasks belong to projects, invoices have line items)
- Target location: Where to create files. Default:
examples/{app-name}/
If the request is ambiguous, ask ONE round of clarifying questions. Keep it tight — propose a default and ask if they want changes:
I'll build a todo app with these entities:
- task (the core item — title, description, priority, due date)
- project (groups tasks)
- label (categorization tags)
One skill: task-management (prioritization, overdue detection, daily planning).
Sound right, or should I adjust?
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 706 lines · 92 tokens per session scan A 2aa6b6d11792
upjack-app-builder is a skill published in the GitHub repository NimbleBrainInc/upjack (9 stars, last pushed 4mo ago), licensed Apache-2.0. It adds 92 tokens to every session and 5,994 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
pr-to-video
Turn a GitHub pull request (a PR URL, owner/repo#N, or 'this PR' in a checked-out repo) into a code-change explainer video — changelog, feature reveal, fix, or refactor walkthrough built from the diff, commits, and files: the input is a code change, not a website. Not a product promo (/product-launch-video) or a no-PR…
general-video
Author or edit a custom HyperFrames composition when no specialized workflow fits, or when BRIEF.md sets flow: companion. Use for longer or multi-scene pieces, brand and sizzle reels, montages, static loops, static title cards, footage remixes, and freeform builds. Use motion-graphics instead for a short unnarrated…
motion-graphics
A short, design-led motion graphic where motion is the message — kinetic typography, stat count-up, chart/data-viz hit, logo sting / brand lockup, lower-third / callout / social overlay, animated map (highlight regions, connect places, zoom to a location), animated tweet / news-article / headline, webpage / UI…
implementation-final-review
Perform the repository's risk-tiered independent final review before implementation completion. Use only when explicitly invoked or when repository instructions require it after behavior-impacting implementation work; audit the complete task diff, supported contracts, lifecycle and security boundaries, complexity, and…
compiler-port
Port a compiler pass from TypeScript to Rust. Gathers context, plans the port, implements in a subagent with test-fix loop, then reviews.
flags
Use when you need to check feature flag states, compare channels, or debug why a feature behaves differently across release channels.