Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add romshark/datapages --skill datapages-servergit clone --depth 1 https://github.com/romshark/datapagesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/romshark/datapages/datapages-server)<a href="https://agentmods.dev/skills/romshark/datapages/datapages-server"><img src="https://agentmods.dev/badge/skills/romshark/datapages/datapages-server/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/romshark/datapages/datapages-server"><img src="https://agentmods.dev/badge/skills/romshark/datapages/datapages-server.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.02377 |
| Opus 5.5 | $0.00014 | $0.00951 |
| Sonnet 5.5 | $0.00007 | $0.00475 |
| Haiku 4.5 | $0.00003 | $0.00238 |
Grade A, and why
datapages-server scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Server entry point
Read datapages first for the build loop, hard rules and naming conventions.
On its first run, datapages gen writes the server command's main.go. It does not regenerate that file on later runs.
NewServer
datapages gen reads the type arguments to find the app package and output directory.
s, err := datapages.NewServer[
app.App, // App
app.SessionData, // or datapages.DisableSessions
datapages.DisablePrometheus, // or datapages.EnablePrometheus
datapagesgen.Server, // the datapagesgen of that app package
](&a, broker, opts...) // the app is passed by pointer
Keep the call inside the module. Import datapages with a package name because the scanner rejects dot imports. Generated code is always in datapagesgen directly below its app package. 1 module can contain several apps. Run one with datapages watch --app app/frontend, the directory of its app package.
datapages.EnablePrometheus requires WithPrometheus, DisablePrometheus rejects it.
Broker
A broker is always required. It sends events between server instances and to SSE subscribers. Use modules/messaging/natscore for multiple instances. Use modules/messaging/inmem only for 1 instance. The generated server uses NATS. Start it with make up before starting the server.
Options
var opts []datapages.ServerOption
opts = append(opts,
datapages.WithLogger(slog.Default()),
datapages.WithMiddleware(mw),
datapages.WithSessions(datapages.SessionsConfig{}),
datapages.WithSessionManager[app.SessionData](mgr),
datapages.WithAssets(app.StaticFS, false),
datapages.WithHTTPServer(&http.Server{ReadHeaderTimeout: 10 * time.Second}),
datapages.WithDatastarJS("https://cdn.example.com/datastar.js"),
datapages.WithShutdownTimeout(30*time.Second),
datapages.WithFileSendTimeout(time.Minute),
datapages.WithAssetsCache(datapages.AssetsCacheConfig{}),
datapages.WithBodySizeLimit(1<<20),
datapages.WithLogSampling(datapages.LogSamplingConfig{Interval: time.Minute}),
datapages.WithSSECompression(datapages.SSECompressionConfig{}),
datapages.WithPrometheus(datapages.PrometheusConfig{Host: ":9091"}),
)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +1 lines ddb6c1d0f1de
- 3d ago Changed 9201c7b1de4d
- 4d ago Changed 0a8cc73393ad
- 5d ago Changed · +1 lines cddf83337989
- 8d ago Changed 3cdd40bfc860
- 12d ago Changed d12e80c99aa6
- 14d ago Changed · +2 lines 63e4ab47aecd
- 20d ago Changed · +2 lines 8c3a018dc0e2
- 24d ago Changed · +4 lines 09d9723416d7
- 25d ago First seen · 110 lines · 35 tokens per session scan A 95e609a66cdd
datapages-server is a skill published in the GitHub repository romshark/datapages (114 stars, last pushed yesterday), licensed MIT. It adds 35 tokens to every session and 2,377 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-20.
Other skills, from other repositories
structpages
Guide for building Go web applications with the structpages framework (struct-based routing + gsx + HTMX). Use when writing routes, pages, page groups, Props methods, handler methods (ServeHTTP), page components, partials, HTMX partial rendering and nested swap levels, URL and element-id generation (the gsx…
kora-s3
S3 object storage in Kora (AWS S3, MinIO) — declarative @S3.Client (@S3.Get/List/Put/Delete), imperative S3KoraClient, multipart uploads, key templates. Use when storing files, images, or binary data.
principle-resiliency
Resiliency principles — fault tolerance, partial failure, failure domains, bulkheads, fail-fast vs fail-soft, health checks, liveness vs readiness probes, idempotency keys, safe retry, deduplication, exactly-once effects, token and leaky buckets, synchronized retries, and 429 responses. Auto-load when isolating…
django-storages-s3
Use when configuring Django to store static and media files on AWS S3 with django-storages. Invoke when working with the STORAGES setting, S3 buckets, presigned URLs, CloudFront, or boto3-backed file storage in settings.py. Configures the Django 4.2+ STORAGES dict, public/private custom backends, presigned GET/POST…
wikipedia
Search and read Wikipedia via x wkp — MediaWiki API, no API key, zero install; query, extract, suggest, and DDG route in one module. Load for wiki, wikipedia, encyclopedia lookup, article summary.
cve
Look up CVE records via x cve — cached, zero-API-key, daily xz TSV. Load for cve, vulnerability id, kev, epss, nvd, cvelist, or security advisory.