Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Postman-Devrel/postman-claude-code-plugin --skill collection-schema-v3git clone --depth 1 https://github.com/Postman-Devrel/postman-claude-code-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/postman-devrel/postman-claude-code-plugin/collection-schema-v3)<a href="https://agentmods.dev/skills/postman-devrel/postman-claude-code-plugin/collection-schema-v3"><img src="https://agentmods.dev/badge/skills/postman-devrel/postman-claude-code-plugin/collection-schema-v3/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/postman-devrel/postman-claude-code-plugin/collection-schema-v3"><img src="https://agentmods.dev/badge/skills/postman-devrel/postman-claude-code-plugin/collection-schema-v3.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00131 | $0.02107 |
| Opus 5.5 | $0.00052 | $0.00843 |
| Sonnet 5.5 | $0.00026 | $0.00421 |
| Haiku 4.5 | $0.00013 | $0.00211 |
Grade A, and why
collection-schema-v3 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 209 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Collection Schema (v3, Git-Native)
Overview
A v3 collection is a directory tree under postman/collections/, one file
per entity — every request, every folder's metadata, every saved example is
its own file. There is no single collection.json to open and edit; the
directory structure itself is the collection.
postman/collections/
bookstore api/
.resources/
definition.yaml (optional)
get all books.resources/
examples/
200 OK.example.yaml
400 Bad Request.example.yaml
500 Internal Server Error.example.yaml
get all books.request.yaml
get-book-by-id.request.yaml
add new book.request.yaml
authentication/
.resources/
definition.yaml (optional)
signup.request.yaml
login.request.yaml
- Every folder under
postman/collections/is a collection; it can contain subfolders and requests. - A folder or collection can have a
.resources/directory — an optional metadata directory for that scope..resources/definition.yamlholds the collection/folder's own metadata; request examples live under.resources/<request-name>.resources/examples/. - Never place a request file inside a
.resources/directory — those are metadata-only.
Definition file (.resources/definition.yaml)
Optional metadata for a collection or folder:
$kind: "collection"— required, even for a folder's definition.name— optional, defaults to the filesystem folder name.description— optional.variables— array of{key, value, description?, disabled?}.valuemust be a string;disableda boolean.auth— a single auth object{type, credentials: [{key, value}, ...]}, or an array for multiAuth:[{id, name, type, credentials, rules?}, ...].scripts— array of{type, code, language: "text/javascript"}.typeis one ofhttp:beforeRequest,http:afterResponse,graphql:beforeQuery,graphql:afterResponse,grpc:beforeInvoke,grpc:onIncomingMessage,grpc:afterResponse.order— number, used for folder ordering.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 209 lines · 131 tokens per session scan A 5e0f4b4b8a78
collection-schema-v3 is a skill published in the GitHub repository Postman-Devrel/postman-claude-code-plugin (41 stars, last pushed 21d ago), licensed Apache-2.0. It adds 131 tokens to every session and 2,107 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-20.
Other skills, from other repositories
re0-git
Rewrite a finished commit's message into a clean, handoff-ready form in your own log style, so git log alone tells the story. User-invoked: run it after a commit.
maestro-improve
Turn filed lessons into the smallest doctrine edit. Use when a Lead assigns improvement work for one target: group pending lessons, make one evidence-linked commit per target, return it for independent challenge, and process each accepted or rejected lesson without deleting history.
git-commit-push-pr
Commit, push, and open a PR with an adaptive, value-first description. Use when the user says "commit and PR", "push and open a PR", "ship this", "create a PR", "open a pull request", "commit push PR", or wants to go from working changes to an open pull request in one step. Also use when the user says "update the PR…
git-commit
Create a git commit with a clear, value-communicating message. Use when the user says "commit", "commit this", "save my changes", "create a commit", or wants to commit staged or unstaged work. Produces well-structured commit messages that follow repo conventions when they exist, and defaults to conventional commit…
setup-git-hooks
Configure two-stage git hooks (pre-commit + pre-push) for quality automation, with either pre-commit or lefthook as the hook manager. Use after bootstrap-project and setup-adrs, when adding quality gates to an existing project, or when standardizing quality automation.
git-commit-validator
MUST be used for ANY git workflow that involves committing code. This includes explicit commit requests AND implicit ones like 'ship it', 'wrap it up', or finishing implementation work. Handles staging, message generation, validation, and commit execution with conventional commit format.