Borrowing it
Nothing to install: this file belongs to PayRequest/copana. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/PayRequest/copana/main/.claude/skills/setup/SKILL.mdgit clone --depth 1 https://github.com/PayRequest/copanaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/payrequest/copana/setup)<a href="https://agentmods.dev/skills/payrequest/copana/setup"><img src="https://agentmods.dev/badge/skills/payrequest/copana/setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/payrequest/copana/setup"><img src="https://agentmods.dev/badge/skills/payrequest/copana/setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00674 |
| Opus 5.5 | $0.00000 | $0.00270 |
| Sonnet 5.5 | $0.00000 | $0.00135 |
| Haiku 4.5 | $0.00000 | $0.00067 |
Grade A, and why
setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/setup — Initial Copana Setup
Set up Copana for a new user. This replaces template placeholders in all markdown files and creates the first commit.
When to use
Run this after cloning the repo for the first time, or when {{human_name}} placeholders are still present in the files.
Steps
-
Check if already configured. Look for
.copana_configuredfile. If it exists, tell the user Copana is already set up. -
Ask the user for the following (one question at a time):
- Their name (required)
- What they want to call their AI (default: Copana)
- Their timezone (detect from system if possible:
cat /etc/timezoneorreadlink /etc/localtime) - Their preferred vibe:
- Casual buddy — "Like texting a friend who gets shit done"
- Professional partner — "Direct and efficient, no corporate speak"
- Tough coach — "Pushes you, calls out excuses"
- Custom — Let them describe it
-
Replace placeholders in all
.mdfiles in the repo root:{{human_name}}→ their name{{assistant_name}}→ AI name{{assistant_name_lower}}→ AI name lowercase{{timezone}}→ their timezone{{date}}→ today's date (YYYY-MM-DD){{vibe}}→ one-line vibe description{{vibe_description}}→ relationship description{{personality_vibe}}→ paragraph for personality.md
-
Create
.envfrom.env.exampleif.envdoesn't exist. -
Create
.copana_configuredmarker file. -
Git commit all changes with message: "Initial setup: [AI name] for [human name]"
-
Welcome the user — introduce yourself as their new AI, using the configured personality. Don't be generic — start the relationship.
Vibe presets
Casual buddy
- vibe: "Buddy/colleague, not formal assistant"
- vibe_description: "Casual, direct, occasionally giving each other a hard time"
- personality_vibe: "I'm like that friend who's good with computers and actually gets shit done. Not a corporate assistant. Not a yes-man. Just someone reliable who happens to live in your terminal."
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 57 lines · 0 tokens per session scan A 75776ca92d81
setup is a skill published in the GitHub repository PayRequest/copana (11 stars, last pushed 8mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 674 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
kimaki-debug
Debug and administer Kimaki itself. Use when sessions do not respond, the bot shows errors, you need the Kimaki or OpenCode service logs, want to profile the bot, restart it (only when asked), connect a model provider with kimaki login, check who may use the bot, or file a Kimaki bug report. ALWAYS load when Kimaki…
kimaki-tunnel
Share a local dev server with the user through a public URL. Localhost URLs are useless from Discord. Use when the user should open a localhost app in a browser, test a webhook or OAuth callback against a local server, or preview a dev server from Discord. Runs kimaki tunnel in a named background tuistory session.…
playwright-cli
Use this whenever the user asks to browse, navigate, click, fill a form, scrape, take a screenshot, or otherwise interact with a web page. SLICC drives the browser through the playwright-cli shell command (also aliased as playwright and puppeteer). Read this BEFORE running any browser automation: every tab-operating…
sprinkles
Use this when the user wants a persistent UI panel — a dashboard, form, editor, report, or visualization that lives alongside the chat. Sprinkles are .shtml files under /shared/sprinkles/ rendered in the side rail or as a full-screen tab. For ephemeral inline widgets, use dips instead. Covers creation, modification…
mount
Use this whenever the user asks to mount anything — local folders, S3 buckets, S3-compatible services (Cloudflare R2, MinIO), or Adobe da.live / AEM Document Authoring repos. Read this skill BEFORE deciding which backend to use; do NOT default to a local file picker when the user names a remote service. Covers…
theme
Use this when the user wants to change the SLICC UI appearance — switch preset themes, create custom themes, adjust colors, toggle the animated background, or export/import theme files. Covers the theme shell command, full token reference, and the JSON format for programmatic theming.