Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add piyushverma0/android-agent-skills --skill retrofitgit clone --depth 1 https://github.com/piyushverma0/android-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/piyushverma0/android-agent-skills/retrofit)<a href="https://agentmods.dev/skills/piyushverma0/android-agent-skills/retrofit"><img src="https://agentmods.dev/badge/skills/piyushverma0/android-agent-skills/retrofit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/piyushverma0/android-agent-skills/retrofit"><img src="https://agentmods.dev/badge/skills/piyushverma0/android-agent-skills/retrofit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00122 | $0.02171 |
| Opus 5 | $0.00061 | $0.01086 |
| Sonnet 5 | $0.00024 | $0.00434 |
| Haiku 4.5 | $0.00012 | $0.00217 |
Grade A, and why
retrofit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 281 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Retrofit HTTP Networking
These rules cover the complete Retrofit setup — from interface definition to error handling.
Setup
[versions]
retrofit = "2.11.0"
okhttp = "4.12.0"
kotlinxSerialization = "1.7.3"
[libraries]
retrofit-core = { group = "com.squareup.retrofit2", name = "retrofit", version.ref = "retrofit" }
retrofit-kotlin-serialization = { group = "com.squareup.retrofit2", name = "converter-kotlinx-serialization", version.ref = "retrofit" }
okhttp = { group = "com.squareup.okhttp3", name = "okhttp", version.ref = "okhttp" }
okhttp-logging = { group = "com.squareup.okhttp3", name = "logging-interceptor", version.ref = "okhttp" }
kotlinx-serialization-json = { group = "org.jetbrains.kotlinx", name = "kotlinx-serialization-json", version.ref = "kotlinxSerialization" }
[plugins]
kotlin-serialization = { id = "org.jetbrains.kotlin.plugin.serialization", version.ref = "kotlin" }
Rule 1: Service interface — correct annotations
// ✅ Complete service interface
interface ItemApiService {
// GET with path parameter
@GET("items/{id}")
suspend fun getItem(@Path("id") id: String): ItemDto
// GET with query parameters
@GET("items")
suspend fun getItems(
@Query("page") page: Int = 1,
@Query("limit") limit: Int = 20,
@Query("sort") sort: String = "created_at",
@Query("order") order: String = "desc"
): PagedResponse<ItemDto>
// POST with JSON body
@POST("items")
suspend fun createItem(@Body request: CreateItemRequest): ItemDto
// PUT for full update
@PUT("items/{id}")
suspend fun updateItem(@Path("id") id: String, @Body request: UpdateItemRequest): ItemDto
// PATCH for partial update
@PATCH("items/{id}")
suspend fun patchItem(
@Path("id") id: String,
@Body fields: Map<String, @JvmSuppressWildcards Any>
): ItemDto
// DELETE
@DELETE("items/{id}")
suspend fun deleteItem(@Path("id") id: String): Unit
// File upload
@Multipart
@POST("items/{id}/image")
suspend fun uploadImage(
@Path("id") id: String,
@Part image: MultipartBody.Part
): ImageDto
// Dynamic header
@GET("user/profile")
suspend fun getProfile(@Header("Authorization") token: String): UserDto
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 281 lines · 122 tokens per session scan A 3a85280899dd
retrofit is a skill published in the GitHub repository piyushverma0/android-agent-skills (15 stars, last pushed 4mo ago), licensed MIT. It adds 122 tokens to every session and 2,171 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
android-ui-journey-testing
XML-specified Android UI journey testing, interactive step execution, assertion verification, and JSON outcome reporting.
Debroid CLI Debugger
Orchestrate headless Android debugging via JDWP. ACTIVATE this skill whenever asked to debug an Android application, set line or exception breakpoints, inspect runtime variables or Jetpack Compose state, step through execution, evaluate live expressions, watch fields, or diagnose runtime crashes.
maui-networking-offline-data
Build MAUI networking and offline data. USE FOR: typed HttpClient, JSON serialization, Android 10.0.2.2, iOS simulator localhost, LAN/dev-tunnel fallback, debug cleartext, offline-first screens, SQLite/EF Core sync metadata, queues, encryption decisions, retries, cancellation. DO NOT USE FOR: auth redirects, Aspire…
maui-aspire-client
Connect MAUI apps to Aspire-hosted APIs. USE FOR: AddServiceDiscovery, typed HttpClient, https+http://apiservice, missing AppHost config on devices, Android emulator 10.0.2.2, iOS simulator localhost, physical-device LAN/dev-tunnel fallbacks, dev certs, Bearer handlers, debug-only cleartext. DO NOT USE FOR: offline…
network-tracing
Instrument API requests with spans and distributed tracing. Use when tracking request latency, correlating client-backend traces, or debugging API issues.
state-sync
When implementing offline-first features, handling optimistic updates, or building sync queues.