Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ogasurfproject-jpg/horizon-shield --skill find-contractorgit clone --depth 1 https://github.com/ogasurfproject-jpg/horizon-shieldWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ogasurfproject-jpg/horizon-shield/find-contractor)<a href="https://agentmods.dev/skills/ogasurfproject-jpg/horizon-shield/find-contractor"><img src="https://agentmods.dev/badge/skills/ogasurfproject-jpg/horizon-shield/find-contractor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ogasurfproject-jpg/horizon-shield/find-contractor"><img src="https://agentmods.dev/badge/skills/ogasurfproject-jpg/horizon-shield/find-contractor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00105 | $0.00427 |
| Opus 5.5 | $0.00042 | $0.00171 |
| Sonnet 5.5 | $0.00021 | $0.00085 |
| Haiku 4.5 | $0.00011 | $0.00043 |
Grade A, and why
find-contractor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
YAKUMO verified contractors
You have the yakumo-contractors MCP server. YAKUMO lists only contractors that passed the independent KIRA fair-price check against JCCDB. Stores still in review are shown separately. It takes no referral or listing fee, shows no prices (score and tier only), and is fail-closed.
For a homeowner:
- Free text request ("roof repair in Hiratsuka"):
find_contractor. By area and work type:list_verified_stores. One store:get_contractor_profile. - The user names a contractor:
check_named_contractor. If that contractor is not a member, the tool does not judge it; pass on the public places to check and the verified stores for the same work and area. - How the check works:
how_verification_works. What YAKUMO is, in one call:mall_overview.
For a contractor who wants to be listed: the only condition is passing the KIRA check, the same instrument every listed row passed. Point them to https://shield.the-horizons-innovation.com/yakumo/apply/ and say a person replies.
Rules:
- The directory is small and says so. Report the count the tool returns; zero results is zero, not a failure.
- Never say a store is the best or recommend one over another. Present what passed and let the homeowner decide.
- Never quote a price for a store. Price questions go to the
horizon-shieldtools.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 17d ago First seen · 21 lines · 105 tokens per session scan A e7e37a48d51c
find-contractor is a skill published in the GitHub repository ogasurfproject-jpg/horizon-shield (2 stars, last pushed yesterday), licensed MIT. It adds 105 tokens to every session and 427 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-30.
Other skills, from other repositories
anyapi
Get live data from LinkedIn, Instagram, TikTok, YouTube, X/Twitter, Reddit, Facebook, Google Search, Google Maps, and Amazon, plus clean JSON from any web page that blocks bots - one key, USD pay-per-request, free trial built in. Use whenever a task needs third-party data that a direct fetch or a general web search…
maqami-travel-booking
Search and compare hotels and flights with the MAQAMI Travel MCP server (https://mcp.maqami.co/) and send the customer a secure checkout link on book.maqami.co. Use when the user asks to find hotels or flights for specific dates, compare rates, read hotel details or reviews, look up airports, book a hotel room or…
vectorize
Convert a raster image (PNG, JPG, WebP) to a clean, scalable SVG vector with svg.new. Triggers on: vectorize, convert to svg, trace image, image to svg, make svg, png to svg, jpg to svg.
batch
Batch vectorize multiple images to SVG at once. Triggers on: batch vectorize, convert all images, bulk svg, vectorize folder, batch convert.
alexandria
Reach for this when a research question needs cited sources across academic papers, public domain books, legal records, government archives, security advisories, news, or developer documentation. Alexandria is an MCP server backed by 152 public digital libraries; use it whenever an answer should point at real…
devcdp
How to debug a running web app with the DevCDP tools - connect to a tab, reload to capture, drive the page with the ui tools, set breakpoints that bind, and hand off to the user. Use whenever DevCDP tools are available and the task involves a web page, the browser, console or network output, or a front-end bug.