Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add objectstack-ai/objectstack --skill objectstack-datagit clone --depth 1 https://github.com/objectstack-ai/objectstackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/objectstack-ai/objectstack/objectstack-data)<a href="https://agentmods.dev/skills/objectstack-ai/objectstack/objectstack-data"><img src="https://agentmods.dev/badge/skills/objectstack-ai/objectstack/objectstack-data/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/objectstack-ai/objectstack/objectstack-data"><img src="https://agentmods.dev/badge/skills/objectstack-ai/objectstack/objectstack-data.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Prompt Injection · line 201 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00151 | $0.06107 |
| Opus 5.5 | $0.00060 | $0.02443 |
| Sonnet 5.5 | $0.00030 | $0.01221 |
| Haiku 4.5 | $0.00015 | $0.00611 |
Grade A, and why
objectstack-data scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 470 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Data Modeling — ObjectStack Data Protocol
Skill Boundaries
| Need | Use instead |
|---|---|
| Query, filter, or aggregate records | objectstack-query |
| Define REST API endpoints or auth | objectstack-api |
| Build views, dashboards, or apps | objectstack-ui |
| Create a plugin or register services | objectstack-platform |
Quick Reference — Detailed Rules
For comprehensive documentation with incorrect/correct examples:
- Naming Conventions — snake_case rules, option values, config properties
- Field Types — All 49 field types and configs
- Relationships — lookup vs master_detail, junction patterns, delete behaviors
- Validation Rules — All validation types, script inversion, severity levels
- Index Strategy — btree/gin/gist/fulltext, composite indexes, partial indexes
- Data Lifecycle & Retention —
lifecycleclasses (record/audit/telemetry/transient/event), retention/TTL/rotation/archive policies; ❗ append-only objects must declare one (distinct from lifecycle hooks below) - Lifecycle Hooks — the 8 lifecycle events,
handlervs sandboxedbody(ctx + capability contract), registration, canonical patterns - Datasources & Federation —
defineDatasource, external/federated objects (remoteName/columnMap), auto-connect gating, credentials; ❌ nofield.columnNameon external objects - Security & Access Control — permission sets, assignment rows, RLS policies,
secret/requiredPermissions,tenancy, platform-global posture
Core Concepts
Object Definition
An Object is the fundamental data entity in ObjectStack. It maps to a database table and exposes automatic CRUD APIs.
Required properties:
| Property | Type | Convention | Description |
|---|---|---|---|
name |
string | snake_case |
Immutable machine identifier (/^[a-z_][a-z0-9_]*$/) |
fields |
map | keys in snake_case |
Field definitions |
sharingModel |
enum | one of the four below | Org-wide default record visibility (OWD). Zod marks it optional, but a publish with no authored sharingModel is refused with the 422 lint envelope security-owd-unset — absence is not a decision (maintainer ruling 2026-08-13). Author it on every object |
What ships with it
16 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- evals/hooks-security-seeds-datasources.json 3.5 KB
- evals/objects-fields-relationships.json 3.7 KB
- evals/README.md 566 B
- references/_index.md 6.8 KB
- references/data-hooks.md 39 KB
- references/examples-objects.md 6.9 KB
- references/lint-rules.md 3.7 KB
- references/seeds.md 5.1 KB
- rules/datasources.md 3.5 KB
- rules/field-types.md 12 KB
- rules/indexing.md 8.6 KB
- rules/lifecycle.md 6.2 KB
- rules/naming.md 990 B
- rules/relationships.md 14 KB
- rules/security.md 9.8 KB
- rules/validation.md 11 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 296a63389c79
- 2d ago Changed ffa2d5fdb62a
- 3d ago Changed 20ff3281d6ae
- 5d ago Changed 581e77216954
- 8d ago Changed ec2ee0e18872
- 23d ago Changed · -385 lines · -62 tokens per session 0ef9c960bd4a
- 1mo ago Changed · +3 lines 75c23f90cd40
- 1mo ago Changed 9bdaf9110b2d
- 1mo ago Changed · -359 lines · +42 tokens per session f5da7acee926
- 1mo ago First seen · 1,211 lines · 171 tokens per session scan A f4c5ce61d54d
objectstack-data is a skill published in the GitHub repository objectstack-ai/objectstack (72 stars, last pushed today), licensed Apache-2.0. It adds 151 tokens to every session and 6,107 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ontotect
Systematic ontology engineering for designing, constructing, reviewing, repairing, optimizing, refactoring, validating, documenting, and governing ontologies, vocabularies, taxonomies, knowledge graphs, semantic models, and mappings. Use for RDF/RDFS, OWL 2, SKOS, SHACL, SPARQL, OBO, Turtle, JSON-LD, RDF/XML…
mykg
Run mykg knowledge-graph commands inside Claude Code from one slash command /mykg. The user describes intent in natural language (extract, append, sync, resume, approve, walkthrough, parse-docs, fetch-web, query); the skill parses intent, builds the right mykg CLI command from the live --help output, confirms, runs…
exchange-recovery
A recovery workflow for Exchange servers, which are systems used for organisational email and calendars. It covers planning a restoration from backups, creating a recovery job, and checking whether the service works afterward.
data-to-ontology-mapping-and-instantiation
A mapping process that connects records and fields from confirmed data sources to classes, properties, relationships, and instances in an approved ontology. An instance is a concrete example of a modeled thing, such as one customer or order.
demand-deliverability-assessment
Use when a user asks whether a product demand (an existing forecast or a new order) can be delivered on knowledge network supply942verify: locate the forecast, read the inventory metric, run the kitting / net-demand function, and, only after explicit user confirmation, raise the simulated replenishment action.
supplychain-hd
A knowledge guide for tracing a product supply process from demand estimates through suppliers.