Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add pledgeandgrow/pledge-skills --skill nginxgit clone --depth 1 https://github.com/pledgeandgrow/pledge-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pledgeandgrow/pledge-skills/nginx)<a href="https://agentmods.dev/skills/pledgeandgrow/pledge-skills/nginx"><img src="https://agentmods.dev/badge/skills/pledgeandgrow/pledge-skills/nginx/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/pledgeandgrow/pledge-skills/nginx"><img src="https://agentmods.dev/badge/skills/pledgeandgrow/pledge-skills/nginx.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.04486 |
| Opus 5 | $0.00019 | $0.02243 |
| Sonnet 5 | $0.00008 | $0.00897 |
| Haiku 4.5 | $0.00004 | $0.00449 |
Grade A, and why
nginx-docs scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 243 lines — stays where its author put it; the contents beside it link to each section on GitHub.
NGINX
Version: Latest (1.29.x) | Source: nginx.org/en/docs
Overview
NGINX is a high-performance HTTP web server, reverse proxy, IMAP/POP3 mail proxy, and TCP/UDP load balancer. It uses an event-driven, asynchronous architecture with a master-worker process model, delivering high concurrency with low memory footprint. NGINX powers a significant portion of the web as a front-end proxy, load balancer, and content delivery server.
Quick Reference
| Topic | File | Key Content |
|---|---|---|
| Getting Started | getting-started.md |
What is NGINX, architecture (master-worker, event-driven), installation (Linux, FreeBSD, Windows, building from sources, Win32 Visual C build), beginner's guide (configuration structure, directives, contexts, serving static content, proxy, FastCGI), how NGINX processes a request, server names (exact, wildcard, regex, IDN), controlling NGINX (signals, binary upgrade), command-line parameters, connection processing methods (epoll, kqueue, select, poll), configuration units, debugging (debug log, DTrace), setting up hashes, njs scripting, contributing |
| HTTP Modules | http-modules.md |
Core module (server, listen, location matching, root, alias, try_files, error_page, client handling, file processing, WebSocket proxying), proxy module (proxy_pass, headers, buffering, caching, timeouts, SSL), upstream module (round robin, least_conn, ip_hash, hash, random, server parameters, keepalive, health checks, state, zone), rewrite module (rewrite, return, if, set), FastCGI module, access control, auth basic, auth request, auth JWT, auth require, gzip, headers, limit conn, limit req, logging, map, num map, geo, geoip, real IP, referer, SSI, sub filter, browser, charset, slice, split clients, mirror, secure link, addition, autoindex, DAV, image filter, XSLT, Perl, JavaScript, user ID, HTTP/2, HTTP/3, API, keyval, OIDC, gRPC, SCGI, uWSGI, memcached, gunzip, gzip static, stub status, status, session log, ACME, OpenTelemetry, empty GIF, F4F, FLV, HLS, MP4, random index, internal redirect, tunnel, upstream conf, proxy protocol vendor, management |
| Stream & Mail Modules | stream-mail-modules.md |
Stream core (TCP/UDP proxy, listen, proxy_pass, preread, resolver), stream proxy (all proxy directives, UDP, rate limiting), stream upstream (load balancing methods, health checks), stream SSL, stream SSL preread (SNI without termination), stream access, geo, geoip, map, num map, limit conn, log, return, set, pass, split clients, JS, keyval, upstream HC, zone sync, MQTT preread/filter, proxy protocol vendor, real IP; Mail core (IMAP/POP3/SMTP proxy, protocol auto-detection), mail auth HTTP (authentication delegation, headers, response), mail proxy, mail SSL, mail real IP, mail IMAP/POP3/SMTP modules |
| Advanced Topics | advanced.md |
SSL/TLS (HTTPS setup, all ssl_ directives, certificate chains, SNI, OCSP stapling, client verification, SSL variables), HTTP/2 (enabling, directives, server push), HTTP/3 and QUIC (enabling, directives, building, 0-RTT, troubleshooting), load balancing (all methods, weighted, health checks, session persistence, dynamic reconfiguration), reverse proxy patterns, security (rate limiting, connection limiting, access control, auth, DDoS protection, security headers), performance tuning (workers, sendfile, keepalive, compression, caching, open file cache, thread pools, buffers), logging (access log formats, error log, log rotation), variables reference (core HTTP, upstream), converting rewrite rules from Apache, full configuration example |
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 243 lines · 39 tokens per session scan A 2ac9542dcd4a
nginx-docs is a skill published in the GitHub repository pledgeandgrow/pledge-skills (10 stars, last pushed 1mo ago), licensed MIT. It adds 39 tokens to every session and 4,486 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
nginx-expert
Expert-level Nginx configuration, reverse proxy, load balancing, SSL/TLS, caching, and performance tuning. Use when the user mentions web server, reverse proxy, load balancer, or SSL, or when the task involves Basic Configuration, SSL/TLS, Caching, or Performance Optimization.
ssl-tls
TLS certificate lifecycle — Let's Encrypt HTTP-01 and DNS-01 issuance, renewal automation, mTLS, HSTS, OCSP stapling, certificate inspection, and Nginx TLS hardening.
nginx
Nginx configuration and optimization.
caddy-serve
Automatic HTTPS web server with Caddy.
caddy
Caddy web server reference with automatic HTTPS. Covers Caddyfile configuration, reverse proxy, load balancing, static files, automatic Let's Encrypt certificates, wildcard and on-demand TLS, JSON API, plugins via xcaddy, and deployment.
performing-ssl-certificate-lifecycle-management
SSL/TLS certificate lifecycle management encompasses the full process of requesting, issuing, deploying, monitoring, renewing, and revoking X.509 certificates. Poor certificate management is a leading.