Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Nolpak14/getregdata --skill croatia-sudreggit clone --depth 1 https://github.com/Nolpak14/getregdataWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nolpak14/getregdata/croatia-sudreg)<a href="https://agentmods.dev/skills/nolpak14/getregdata/croatia-sudreg"><img src="https://agentmods.dev/badge/skills/nolpak14/getregdata/croatia-sudreg/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nolpak14/getregdata/croatia-sudreg"><img src="https://agentmods.dev/badge/skills/nolpak14/getregdata/croatia-sudreg.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00218 | $0.02725 |
| Opus 5.5 | $0.00087 | $0.01090 |
| Sonnet 5.5 | $0.00044 | $0.00545 |
| Haiku 4.5 | $0.00022 | $0.00272 |
Grade A, and why
croatia-sudreg scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 24d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -u "$SUDREG_ID:$SUDREG_SECRET" \ How it starts
The opening of the file, as written. The whole thing — 156 lines — stays where its author put it; the contents beside it link to each section on GitHub.
croatia-sudreg
Free, official Croatian company data from the Sudski registar OPEN API (sudreg-data.gov.hr), run by the Ministry of Justice. This skill needs no paid actor and no Apify token - just a free sudski registar credential you register once. Use it as the front door for Croatian entity verification, and route to the paid regdata actors when you need a jurisdiction that has no free API.
Persona
You are a KYB / due-diligence analyst verifying Croatian companies against the official court register. You resolve a company to its OIB and MBS, confirm it is active, identify its board and authorized persons (osobe), and read its registered details for signals - all from the authoritative source, the Sudski registar, not a commercial aggregator.
What this gives you (for free)
- Company profile - tvrtka (full legal name) and skracena_tvrtka (short name), OIB (11-digit tax ID), MBS (9-digit court register number), pravni oblik (legal form, e.g. d.o.o. / d.d. / j.d.o.o.), and status.
- Registered seat - sjediste (street, number, settlement), the address of record.
- Founding and capital - datum osnivanja (founding date) and temeljni kapital (share capital).
- People - osobe, the board and authorized persons behind the company.
Data is published under Otvorena dozvola (the Croatian open-data licence) and is updated daily. Read-only.
Authentication (free, one-time)
The OPEN API is free but not keyless - it requires a free registration, then an OAuth token per session:
- Register a free account at https://sudreg-data.gov.hr and, on approval, you receive a Client ID and Client Secret.
- Exchange the credential for a bearer token (valid 6 hours), then call the public data endpoints with it:
export SUDREG_ID=your_client_id
export SUDREG_SECRET=your_client_secret
# 1) Fetch an OAuth bearer token (valid 6h)
curl -s -u "$SUDREG_ID:$SUDREG_SECRET" \
-d "grant_type=client_credentials" \
"https://sudreg-data.gov.hr/api/oauth/token"
# -> {"access_token":"...","expires_in":21600,...}
# 2) Call the public data root with the token
curl -s -H "Authorization: Bearer $ACCESS_TOKEN" \
"https://sudreg-data.gov.hr/api/OpenAPIs/OpenAPIJavni/detalji_subjekta?tip_identifikatora=oib&identifikator=<OIB>&expand_relations=true"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 24d ago Changed · +4 lines 15ccca69ad4e
- 1mo ago First seen · 152 lines · 218 tokens per session scan A cc698450a489
croatia-sudreg is a skill published in the GitHub repository Nolpak14/getregdata (6 stars, last pushed today), licensed MIT. It adds 218 tokens to every session and 2,725 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
web-scraping
This skill activates for web scraping and Actor development. It proactively discovers APIs via traffic interception, recommends optimal strategy (traffic interception/sitemap/API/DOM scraping/hybrid), and implements iteratively. For production, it guides TypeScript Actor creation via Apify CLI.
anti-bot-scraping
Use when a site blocks your scraper and you need to get past it — 403 Forbidden on the first request, JS challenges, CAPTCHAs, Cloudflare Turnstile, DataDome, Akamai, PerimeterX, "Just a moment...", access denied, IP bans, or an empty/skeleton page where data should be. Covers diagnosing transient failures vs real…
apify-actor-builder
Use when you want to package a web scraper as a deployable, monetizable Apify Actor in Python — set up the directory structure, choose a runtime pattern (HTTP / impit / Playwright / Camoufox), write the input/output/dataset schemas, deploy with the apify CLI, and configure pay-per-event pricing. Triggers on "build an…
job-market-scraping
Use when scraping the job market — job listings, salaries, company ratings, or candidate/profile sourcing — from LinkedIn, Indeed, Glassdoor, Naukri, Google Jobs, RemoteOK, Wellfound, Monster, ZipRecruiter, Reed, Adzuna, Upwork, CutShort, or AmbitionBox. Covers building a job aggregator, salary benchmarking…
social-media-content-scraping
Use when you need to scrape social media or content platforms — posts, engagement metrics, profiles, videos, ads, or transcripts — from Twitter/X, Instagram, TikTok, Reddit, LinkedIn, Pinterest, YouTube, Facebook Ad Library, or IMDb. Covers social listening, influencer research, content and trend analysis, ad-creative…
web-scraping-playbook
Use when starting any web scraping or structured-data-extraction task and you need to decide HOW to get the data — whether to call an API, run a ready-made scraper, or build a custom one. Covers the cost-first technique ladder (plain HTTP → TLS fingerprint spoof → stealth browser → full browser), the build-vs-buy…