Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add roynertr/cobie-mcp --skill applying-updatesgit clone --depth 1 https://github.com/roynertr/cobie-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/roynertr/cobie-mcp/applying-updates)<a href="https://agentmods.dev/skills/roynertr/cobie-mcp/applying-updates"><img src="https://agentmods.dev/badge/skills/roynertr/cobie-mcp/applying-updates/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/roynertr/cobie-mcp/applying-updates"><img src="https://agentmods.dev/badge/skills/roynertr/cobie-mcp/applying-updates.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00016 | $0.00333 |
| Opus 5.5 | $0.00006 | $0.00133 |
| Sonnet 5.5 | $0.00003 | $0.00067 |
| Haiku 4.5 | $0.00002 | $0.00033 |
Grade A, and why
applying-updates scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Applying Updates
Inputs assumed
- pending_preview_id (required; apply blocked if none)
- active_project (excel_path resolved from project)
- pending_operation.draft (the draft to commit)
Tool sequence
- Verify pending_preview_id exists
- Verify confirm_token === "CONFIRM_APPLY" or user typed "CONFIRM APPLY"
- commit_changes (update_cobie or capture_installation with dry_run=false)
Output template
- Summary: "Applied N changes."
- Bullets: summary of changes (max 5)
- CTA: "Validation complete. Type 'validate' to re-check."
- Optional: "Type 'show details' to see full diffs"
Forbidden actions
- Never call update_cobie without confirm_token CONFIRM_APPLY
- Never apply when pending_preview_id is missing
- Never skip the confirmation gate
Tool usage rules
- Require pending_preview_id; reject apply if missing
- Require confirm_token "CONFIRM_APPLY" from UI or "CONFIRM APPLY" from user message
- Call commit_changes with draft from pending_operation
Confirmation gates
- Require explicit confirm token before any write
- UI button sends confirm_token: "CONFIRM_APPLY"
- Or user must type "CONFIRM APPLY" (case-insensitive)
Output formatting
Return human summary + bullet list (max 5) + CTA. Do not output raw JSON unless asked.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 42 lines · 16 tokens per session scan A 0f5cd1832504
applying-updates is a skill published in the GitHub repository roynertr/cobie-mcp (1 stars, last pushed 2mo ago), licensed MIT. It adds 16 tokens to every session and 333 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
opik-diagnose
Surface the Opik traces worth a developer's attention, ranked by signal — Diagnostics issues first, then errors, failed tool calls, latency, regressions, and low online-eval scores. With the Opik MCP connected it lists the project's agentinsightsissue entities, offers to turn Diagnostics on when the project has it…
bim-validation-pipeline
Build automated BIM validation pipelines for IFC/Revit data. Continuous validation against IDS, LOD requirements, COBie, and project-specific BEP standards.
dcc-blender-assembly-pitfalls
Read this BEFORE writing any Blender geometry code through MCP, whenever you are about to (1) create or size mesh primitives - bpy.ops.mesh.primitivecubeadd, primitivecylinderadd, primitiveuvsphereadd, primitiveconeadd - or set scale / dimensions on a part; (2) orient a part with rotationeuler or rotationquaternion…
progress-photo-analyzer
Analyze construction site photos to track progress, detect safety issues, and compare against BIM models using computer vision.
ifc-to-excel
Convert IFC files (2x3, 4x1, 4x3) to Excel databases using IfcExporter CLI. Extract BIM data, properties, and geometry without proprietary software.
cwicr-material-procurement
Generate material procurement lists from CWICR data. Calculate quantities with waste factors, group by supplier categories, and create purchase orders.