Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add reatlat/fullstory-claude-plugin --skill api-monitorgit clone --depth 1 https://github.com/reatlat/fullstory-claude-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/reatlat/fullstory-claude-plugin/api-monitor)<a href="https://agentmods.dev/skills/reatlat/fullstory-claude-plugin/api-monitor"><img src="https://agentmods.dev/badge/skills/reatlat/fullstory-claude-plugin/api-monitor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/reatlat/fullstory-claude-plugin/api-monitor"><img src="https://agentmods.dev/badge/skills/reatlat/fullstory-claude-plugin/api-monitor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00045 | $0.01246 |
| Opus 5 | $0.00023 | $0.00623 |
| Sonnet 5 | $0.00009 | $0.00249 |
| Haiku 4.5 | $0.00005 | $0.00125 |
Grade A, and why
api-monitor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 131 lines — stays where its author put it; the contents beside it link to each section on GitHub.
API Monitor
Monitor API calls that affect user experience — which endpoints are slow, which are erroring, and how API failures manifest in the UI.
When to Use
- "Are our API calls causing user-facing slowness?"
- "Which endpoints are returning the most errors?"
- "Did the backend deploy slow down the checkout API?"
- "Show me sessions where /api/orders failed"
- "What's the slowest API call users experience on /dashboard?"
- "Compare API error rates before and after the backend deploy"
Mental Model
Fullstory captures network requests made by the browser — XHR and Fetch calls. You can see which endpoints users hit, how long they took, and which ones failed. This gives you the user's perspective on API performance, which is different from server-side metrics.
A slow API is invisible server-side but very visible to users: spinners, blank pages, rage clicks on submit buttons.
Workflow
Step 1: Identify API-heavy pages
Which pages make the most API calls?
fullstory:build_metric(
query="sessions with network activity on /dashboard",
output_type="trend"
)
Or build segments for pages known to be API-heavy: /checkout, /dashboard, /search, /reports.
Step 2: Find API errors from user sessions
fullstory:build_metric(
query="network errors (4xx or 5xx responses) on /checkout",
output_type="top_n"
)
→ group by endpoint to see which API is failing
Present: "504 on /api/orders: 156 users affected (85% of all checkout API errors). 429 on /api/search: 42 users (rate limited)."
Step 3: Investigate error sessions
For the worst endpoint:
fullstory:build_segment("users who received 504 from /api/orders in last 7 days")
fullstory:get_sessions(segment_id, limit=5)
→ session-context agent: "What happened after the 504 error? Did the user retry? See an error message? Abandon the page?"
Step 4: Measure API latency impact
Slow APIs (not errors, but >2s response time) cause UX friction:
fullstory:build_metric(
query="sessions with network request >2000ms on /checkout",
output_type="single_number"
)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 131 lines · 45 tokens per session scan A a7894d752ee2
api-monitor is a skill published in the GitHub repository reatlat/fullstory-claude-plugin (62 stars, last pushed 1mo ago), licensed MIT. It adds 45 tokens to every session and 1,246 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
n8n-architect
Use when the user explicitly wants to create, edit, validate, sync, or troubleshoot n8n workflows, asks about n8n nodes or automation, or wants to use n8n-as-code in the current context root.
roblox-cloud
Use for Roblox Open Cloud APIs, API keys, OAuth 2.0, webhooks, scopes, token lifecycle, or in-experience HttpService calls.
networking
Modern Swift networking with URLSession and async/await — typed requests, Codable decoding, HTTP status & error handling, retry with backoff, offline/connectivity handling, and a Sendable API client. Use when calling a REST/JSON API, building an API client/service layer, decoding responses, handling network errors or…
cloudkit-sync
Sync SwiftData / Core Data across a user's devices with CloudKit, plus CKShare collaboration and conflict handling. Use when adding iCloud sync, "sync across devices", SwiftData + CloudKit, NSPersistentCloudKitContainer, sharing records between users, or debugging why data isn't syncing. Trigger on "CloudKit", "iCloud…
add-request-protection
Deprecated: use the arcjet skill instead. Adds security protection to a server-side route or endpoint — rate limiting, bot detection, email validation, and abuse prevention.
bitrix-sale
Covers Sale module — API choice (D7 object model vs ORM vs CSale), FUSER, Basket, Order create/update, properties, statuses and events, payments, delivery/shipments, discounts and coupons, reservation/deduction, permissions, buyer accounts. Applied for cart/checkout, order lifecycle, pay/ship integration, and order…