Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rishapgandhi/python-skills --skill flaskgit clone --depth 1 https://github.com/rishapgandhi/python-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rishapgandhi/python-skills/flask)<a href="https://agentmods.dev/skills/rishapgandhi/python-skills/flask"><img src="https://agentmods.dev/badge/skills/rishapgandhi/python-skills/flask/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rishapgandhi/python-skills/flask"><img src="https://agentmods.dev/badge/skills/rishapgandhi/python-skills/flask.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.06070 |
| Opus 5.5 | $0.00000 | $0.02428 |
| Sonnet 5.5 | $0.00000 | $0.01214 |
| Haiku 4.5 | $0.00000 | $0.00607 |
Grade A, and why
flask scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 852 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Flask Skill
Load when working on a Flask project. Use alongside all
skills/common/files.
Stack
| Layer | Library |
|---|---|
| Framework | Flask 3.x |
| ORM | SQLAlchemy 2.x + Flask-SQLAlchemy |
| Migrations | Flask-Migrate (Alembic) |
| Validation | marshmallow or pydantic v2 |
| Auth | Flask-JWT-Extended |
| Settings | python-decouple / pydantic-settings |
| CLI | Click (built into Flask) |
Project Structure
myapp/
├── app/
│ ├── __init__.py ← App factory: create_app()
│ ├── extensions.py ← Flask extension instances
│ ├── config.py
│ ├── models/
│ ├── schemas/ ← Marshmallow schemas
│ ├── repositories/
│ ├── services/
│ ├── blueprints/
│ │ ├── users/
│ │ │ ├── __init__.py
│ │ │ ├── routes.py
│ │ │ └── tests/
│ │ └── auth/
│ │ ├── __init__.py
│ │ └── routes.py
│ └── errors.py ← Error handlers
├── migrations/
├── tests/
├── .env.example
└── pyproject.toml
App Factory
# app/__init__.py
from flask import Flask
from app.extensions import db, migrate, jwt
from app.config import Config
from app.errors import register_error_handlers
from app.blueprints.users import users_bp
from app.blueprints.auth import auth_bp
def create_app(config_class: type = Config) -> Flask:
"""Application factory."""
app = Flask(__name__)
app.config.from_object(config_class)
# Initialize extensions
db.init_app(app)
migrate.init_app(app, db)
jwt.init_app(app)
# Register blueprints
app.register_blueprint(users_bp, url_prefix="/api/v1/users")
app.register_blueprint(auth_bp, url_prefix="/api/v1/auth")
register_error_handlers(app)
return app
Extensions (Singleton Pattern)
# app/extensions.py
from flask_sqlalchemy import SQLAlchemy
from flask_migrate import Migrate
from flask_jwt_extended import JWTManager
db = SQLAlchemy()
migrate = Migrate()
jwt = JWTManager()
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 852 lines · 0 tokens per session scan A 67bfc828fd93
flask is a skill published in the GitHub repository rishapgandhi/python-skills (4 stars, last pushed 5mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 6,070 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
supabase-python
FastAPI with Supabase and SQLAlchemy/SQLModel.
fastapi
Use when building, reviewing, testing, securing or shipping a FastAPI / async Python service — routers, Pydantic v2 schemas, dependency injection, async SQLAlchemy 2.0, OAuth2/JWT, ASGITransport tests, production wiring. NOT language-level Python or packaging (that is python), NOT engine-level SQL (that is…
django
Use when building, reviewing, securing, testing or shipping a Django app — models, migrations, QuerySets/managers, FBV/CBV views, forms, the admin, settings split, and Django REST Framework (serializers, ModelViewSet, permissions). NOT async FastAPI/Pydantic services (that is fastapi), NOT Postgres schema/index work…
beautifulsoup-parsing
Expert guidance for HTML/XML parsing using BeautifulSoup in Python with best practices for DOM navigation, data extraction, and efficient scraping workflows.
odoo-development
Expert guidance for Odoo ERP development including Python ORM, XML views, and module architecture.
rest-api-django
Comprehensive guidelines for Django REST API development covering project structure, views, models, serializers, authentication, performance, and error handling.