Borrowing it
Nothing to install: this file belongs to ProfSynapse/nexus. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/ProfSynapse/nexus/main/.claude/skills/nexus-mobile-compat/SKILL.mdgit clone --depth 1 https://github.com/ProfSynapse/nexusWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/profsynapse/nexus/nexus-mobile-compat)<a href="https://agentmods.dev/skills/profsynapse/nexus/nexus-mobile-compat"><img src="https://agentmods.dev/badge/skills/profsynapse/nexus/nexus-mobile-compat/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/profsynapse/nexus/nexus-mobile-compat"><img src="https://agentmods.dev/badge/skills/profsynapse/nexus/nexus-mobile-compat.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00099 | $0.01174 |
| Opus 5.5 | $0.00040 | $0.00470 |
| Sonnet 5.5 | $0.00020 | $0.00235 |
| Haiku 4.5 | $0.00010 | $0.00117 |
Grade A, and why
nexus-mobile-compat scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Nexus mobile & plugin-store safety
Nexus ships isDesktopOnly: false, so main.js runs on phones with no Node.js.
The defect this skill exists to prevent has no compiler and no type behind it: a
static import executes during module init, before any Platform.isDesktop
check, so one import on the startup path takes the plugin down at launch on every
phone — from a diff that looks unrelated.
The reachability checker below is now wired into the repo's own gate: npm run lint runs lint:obsidian (ESLint) then lint:mobile (this checker), and npm run build runs npm run lint first. A violation fails the build. Run the
checker directly anyway while you work — the gate is the floor, not the loop.
Workflow
Pick the row that matches the job and follow that protocol. Do not improvise from this page; each protocol carries the steps and the checks.
| Situation | Protocol |
|---|---|
| Adding or upgrading an npm package | protocols/vet-a-dependency.md |
| Need a Node built-in, a heavy module, or a desktop-only feature | protocols/import-without-crashing.md |
| Writing, reading or deleting at a caller-supplied vault path | protocols/confine-a-vault-path.md |
| About to ship a change that touched imports or the startup path | protocols/verify-mobile-safety.md |
| "It won't load on my phone" / a mobile-only failure | protocols/diagnose-mobile-crash.md |
| Session that used this skill is ending | protocols/self-refine.md |
- Read the protocol the table names, in full, before editing anything.
- Whatever the protocol, you MUST run the reachability checker before calling
the change done — it is the only guard for this defect class:
node scripts/check-mobile-imports.mjs . # identical, the way the build invokes it: npm run lint:mobilescripts/check-mobile-imports.mjsin the repo IS the checker — one implementation, edit it there. It was a Python script behind a launcher until 2026-08-15, when Obsidian's community scorecard failed build verification on a clean container that has Node but no Python. A build gate may only depend on what the build already needs.
What ships with it
10 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- protocols/confine-a-vault-path.md 3.8 KB
- protocols/diagnose-mobile-crash.md 3.8 KB
- protocols/import-without-crashing.md 3.4 KB
- protocols/self-refine.md 2.2 KB
- protocols/verify-mobile-safety.md 3.7 KB
- protocols/vet-a-dependency.md 3.4 KB
- references/init-order.md 3.5 KB
- references/pdfjs-in-electron.md 1.6 KB
- references/plugin-store-rules.md 3.4 KB
- refinement-log.md 7.5 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 85 lines · 99 tokens per session scan A 140511b9c8cd
nexus-mobile-compat is a skill published in the GitHub repository ProfSynapse/nexus (158 stars, last pushed 5d ago), licensed MIT. It adds 99 tokens to every session and 1,174 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
android_ui_verification
Automated end-to-end UI testing and verification on an Android Emulator using ADB.
solopi-ai
A command-line framework for testing Android apps and devices with SoloPi, including on-device or cloud AI decision models. It manages devices, test cases, recorded interactions, replays, performance history, and evidence.
eas-simulator
Run and control a user's app on a remote iOS/Android simulator hosted on EAS cloud. Read before running any eas simulator: commands - it has the current syntax for this experimental API. Use whenever the user needs a simulator they can't run locally - 'run my app on a cloud simulator', 'use eas simulator to…
dogfood
Systematically explore and test a mobile app on iOS/Android with agent-device to find bugs, UX issues, and other problems. Use when asked to dogfood, QA, exploratory test, find issues, bug hunt, or test this app on mobile.
ios-simulator
Verify and debug native, React Native, Expo, or Flutter apps on an iOS Simulator with agent-device. Use when an agent needs to launch an app, inspect its live UI, tap, type, scroll, validate a code change, collect failure evidence, or reproduce a workflow on an iPhone or iPad Simulator.
test-native-extension
Validate a third-party control repo across four automated layers plus one printed manual recipe. Layer 1 asserts native-source structure (Android getName() and iOS +moduleName to manifest nativeModule; @ReactMethod / RCTEXPORTMETHOD to methods; no @ReactModule) plus load/init readiness (ReactPackage public no-arg…