jasper-deploy

jasper-deploy is a skill for Claude Code from robertgorsuch/AI-JasperReports-Generator. It costs 152 tokens per session (5,300 once invoked), scanned B, original, Apache-2.0.

A workflow for creating, compiling, and publishing JasperReports, which are formatted business reports, to JasperReports Server. It works with PostgreSQL databases and the JasperReports 7 report format through the server's REST API.

In plain words
What is it for?
Use it to build reports from SQL, edit JRXML report files, publish and verify them, and manage related JasperReports Server items such as data sources and dashboards.
Why use it?
It brings report design, compilation, deployment, and checking into one process instead of handling each stage manually.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the jasper-deploy plugin — 1 skill, 4 commands shipped together

Good fit Use it to build reports from SQL, edit JRXML report files, publish and verify them, and manage related JasperReports Server items such as data sources and dashboards.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/robertgorsuch/ai-jasperreports-generator/jasper-deploy
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add robertgorsuch/AI-JasperReports-Generator --skill jasper-deploy
Clone the repo
git clone --depth 1 https://github.com/robertgorsuch/AI-JasperReports-Generator

Made for: Claude Code.

Or install jasper-deploy, the plugin that ships this one along with the rest of its 1 skill, 4 commands.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for jasper-deploy

README.md
[![agentmods](https://agentmods.dev/badge/skills/robertgorsuch/ai-jasperreports-generator/jasper-deploy/github.svg)](https://agentmods.dev/skills/robertgorsuch/ai-jasperreports-generator/jasper-deploy)
Your own site
<a href="https://agentmods.dev/skills/robertgorsuch/ai-jasperreports-generator/jasper-deploy"><img src="https://agentmods.dev/badge/skills/robertgorsuch/ai-jasperreports-generator/jasper-deploy/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for jasper-deploy

Your own site · 80×15
<a href="https://agentmods.dev/skills/robertgorsuch/ai-jasperreports-generator/jasper-deploy"><img src="https://agentmods.dev/badge/skills/robertgorsuch/ai-jasperreports-generator/jasper-deploy.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 152 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,300 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00152 $0.05300
Opus 5 $0.00076 $0.02650
Sonnet 5 $0.00030 $0.01060
Haiku 4.5 $0.00015 $0.00530

Measured 9d ago against content hash 39fe555e4061, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade B, and why

jasper-deploy scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

The scan reads SKILL.md. This mod also ships 19 executable files (scripts/_jrs_common.ps1, scripts/build_dashlets.ps1, scripts/check_docs.ps1, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Sends data to an external URLmediumData exfiltration

A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.

braces); pass JSON bodies to curl from a **file** (`--data "@req.json"`), not

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

JDK, psql, curl, Python, JR7 jars, server reachability) and tells you what
plugins/jasper-deploy/skills/jasper-deploy/SKILL.md · 263 lines

How it starts

The opening of the file, as written. The whole thing — 263 lines — stays where its author put it; the contents beside it link to each section on GitHub.

JasperReports design / compile / deploy

Automates the design → compile → deploy pipeline for JasperReports against a PostgreSQL database and a JasperReports Server 10.x REST v2 endpoint. Everything is JasperReports 7.0.6 native — the jrxml schema is NOT 6.x compatible (see references/jr7-schema.md).

This file is a lean index: each capability lists its script, the minimal invocation, and a pointer to the reference file holding the full flags, verified notes, and gotchas. Read the linked reference before doing non-trivial work in that area — the deep detail lives there, not here.

New environment? Start here

  1. If a LOCAL.md file exists next to this SKILL.md (gitignored, machine-specific), read it first — it overrides anything here with the facts of the local install (server URL/port, install paths, local doc corpus, quirks).
  2. Copy jrs.config.example.jsonjrs.config.json in the skill root and fill in the server URL, user, password (or passwordCommand), and jrLibDir.
  3. Run doctor.ps1 — it preflight-checks the whole toolchain (PowerShell, JDK, psql, curl, Python, JR7 jars, server reachability) and tells you what is missing.

Conventions (apply everywhere)

  • $skill = the scripts/ subdirectory of this skill. Set it from the base directory given at the top of this skill's context: $skill = "<skill-base-dir>/scripts" (or, from this repo's root, ./plugins/jasper-deploy/skills/jasper-deploy/scripts). Forward slashes work on Windows and macOS/Linux alike, so all examples here use /.
  • Server: resolved from config (below), REST v2, HTTP Basic. Never hardcode the URL or credentials in docs or scripts — read them from jrs.config.json (the repo is public). Examples below use $cfg for exactly this reason.
  • Credentials resolve in order: script params → env vars JRS_URL/JRS_USER/JRS_PASSjrs.config.json in the skill root (copy jrs.config.example.json, fill in, gitignored).
  • DB: PostgreSQL, defaults localhost:5432 / postgis_34_sample / postgres (the sample DB the examples use — substitute your own); $env:PGPASSWORD must be set before any scaffold_*.py (they introspect via psql).

Read the full file on GitHub · 263 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 263 lines · 152 tokens per session scan B 39fe555e4061

Subscribe to this mod's changes

jasper-deploy is a skill published in the GitHub repository robertgorsuch/AI-JasperReports-Generator (1 stars, last pushed 12d ago), licensed Apache-2.0. It adds 152 tokens to every session and 5,300 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it B with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.