Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add notque/vexjoy-agent --skill deploygit clone --depth 1 https://github.com/notque/vexjoy-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/notque/vexjoy-agent/deploy)<a href="https://agentmods.dev/skills/notque/vexjoy-agent/deploy"><img src="https://agentmods.dev/badge/skills/notque/vexjoy-agent/deploy/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/notque/vexjoy-agent/deploy"><img src="https://agentmods.dev/badge/skills/notque/vexjoy-agent/deploy.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.02517 |
| Opus 5.5 | $0.00007 | $0.01007 |
| Sonnet 5.5 | $0.00003 | $0.00503 |
| Haiku 4.5 | $0.00002 | $0.00252 |
Grade A, and why
deploy scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
3. **HTTPS**: `certbot --nginx -d <fqdn>`. Verify renewal: `certbot renew --dry-run`. Verify redirect: `curl -sI http://<fqdn> | grep -iE '301|308'`. How it starts
The opening of the file, as written. The whole thing — 220 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Deploy Skill
Six modes. Match the request to a section.
| Signal | Section |
|---|---|
| Deploy site, HTTPS, nginx, go live, public site | A. Public Web Deploy |
| Cron job, scheduled task, audit cron script | C. Cron Automation |
| Headless agent, wrapper script, recurring Claude task | D. Headless Cron Creator |
| Install toolkit, verify setup, health check | E. Toolkit Install |
| Fish shell, Zsh, shell config, migration | F. Shell Configuration |
| Background process, nohup, trap, PID, signals | G. Process Management |
When the request spans modes, compose the relevant sections.
A. Public Web Deploy
Serve public sites through nginx/Caddy/Apache -- never a raw dev server. Local preview binds 127.0.0.1; public sites require HTTPS + hardened nginx.
5-phase workflow: DNS -> Web Server -> HTTPS -> Hardening -> Verify.
- DNS: Create A/AAAA record. Verify:
dig +short A <fqdn>. Gate: resolves to intended IP. - Web Server: nginx server block with explicit docroot. Backend proxied to
127.0.0.1. Test:nginx -t && systemctl reload nginx. - HTTPS:
certbot --nginx -d <fqdn>. Verify renewal:certbot renew --dry-run. Verify redirect:curl -sI http://<fqdn> | grep -iE '301|308'. - Hardening: Firewall (ufw allow 80/443/SSH only), nginx deny rules (
location ~ /\. { deny all; }), security headers (HSTS, X-Content-Type-Options, CSP in Report-Only), rate limiting (limit_req), fail2ban. - Verify: Run the 13-item security checklist. Spot-check:
curl -s https://<fqdn>/.env -w '%{http_code}\n'(expect 403/404),ss -tlnp(no app ports public).
Load references/public-web-deploy.md for the full 13-item checklist, nginx config blocks, and error handling.
C. Cron Automation
Static analysis of cron scripts against a 9-point reliability checklist. Read-only -- never execute scripts.
- DISCOVER: Locate scripts in
scripts/*.sh,cron/*.sh,jobs/*.sh. Verify shell shebang. - AUDIT: Run all 9 checks via regex (verify matches not in comments):
What ships with it
23 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/cleanup-verification.md 7.5 KB
- references/concurrency-and-locks.md 7.1 KB
- references/cron-automation.md 7.7 KB
- references/fish-bash-migration.md 3.6 KB
- references/fish-preferred-patterns.md 8.7 KB
- references/fish-quick-reference.md 5.9 KB
- references/fish-shell-config.md 9.0 KB
- references/fish-tool-integrations.md 9.4 KB
- references/headless-cron-creator.md 5.8 KB
- references/install.md 6.7 KB
- references/logging-and-rotation.md 7.9 KB
- references/pid-resolution.md 6.1 KB
- references/preferred-patterns.md 11 KB
- references/public-web-deploy.md 14 KB
- references/shell-error-handling.md 7.2 KB
- references/shell-process-patterns.md 15 KB
- references/signals-and-traps.md 7.2 KB
- references/starting-processes.md 6.1 KB
- references/zsh-bash-migration.md 7.1 KB
- references/zsh-preferred-patterns.md 11 KB
- references/zsh-quick-reference.md 8.7 KB
- references/zsh-shell-config.md 12 KB
- references/zsh-tool-integrations.md 11 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +183 lines · -12 tokens per session 39a8f49ccc38
- 26d ago Changed · -201 lines · +9 tokens per session ee7830d6d494
- 27d ago First seen · 238 lines · 20 tokens per session scan A 6a3d2bc5fe37
deploy is a skill published in the GitHub repository notque/vexjoy-agent (442 stars, last pushed today), licensed MIT. It adds 17 tokens to every session and 2,517 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-20.
Other skills, from other repositories
docker-devops
Docker/K8s: Dockerfile, multi-stage, compose, manifests, Helm. Triggers: Docker, Dockerfile, container, Kubernetes, k8s, compose, Helm, pod.
rollback
Rolls back git commit, DB migration, or deploy to known-good with safety + health checks. Triggers: rollback, revert deploy, revert migration, rollback commit, git revert.
health
Service/infra health via liveness/readiness checks, resource usage, quick diagnostics. Triggers: health check, services up, system status, infra health, degraded service.
arkcli-deploy
A deployment workflow for creating an online inference endpoint from an AI model. Creating one is a real account change that can create a billable resource.
orca-config-origin
Traces any Orca alert back to who deployed it, what tool was used, what introduced the issue, and a full timeline of events. Use when user asks about origin, deployment, or ownership of an alert (e.g., "who created this", "where did this come from", "trace back orca-3380725", "who deployed", "what tool was used").
orca-k8s-connector-troubleshoot
Diagnoses Kubernetes Connector (K8s Tunnel Client / Helm chart orca-tunnel) install and connectivity failures from raw customer input — error text, helm status, kubectl describe, or pod logs — and walks through step-by-step remediation. Use when a user reports the K8s Connector won't install, won't connect, keeps…