Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/secondlifes/delphi-expert/delphi-http-clientnpx skills add SecondLifes/delphi-expert --skill delphi-http-clientgit clone --depth 1 https://github.com/SecondLifes/delphi-expertWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00088 | $0.01608 |
| Opus 5 | $0.00044 | $0.00804 |
| Sonnet 5 | $0.00018 | $0.00322 |
| Haiku 4.5 | $0.00009 | $0.00161 |
Grade A, and why
delphi-http-client scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 128 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Delphi HTTP Client — Consuming REST APIs
This kit's framework skills teach serving HTTP (Horse, DMVC, Dext). This skill covers the other direction: calling external HTTP/REST APIs from Delphi code — the gap between them was a verified finding of this kit's own system analysis.
Usage
| You say | What happens |
|---|---|
| "Call this REST API from Delphi" / "bu API'yi Delphi'den tüket" | Client choice (table below), then a timeout-safe, try..finally-correct implementation with parsed JSON. |
| "Add authentication to the API call" | CustomHeaders bearer/token pattern, or TRESTClient authenticator classes. |
| "The API call freezes my UI" | Moves the call off the main thread (TTask + TThread.Queue — see the threading skill), never a synchronous call in an event handler. |
A .pas file consuming an API is reviewed |
Checklist at the bottom applied: timeouts set, response freed, status checked, JSON parsed safely, no main-thread blocking. |
Choosing the client — three options, one decision table
THTTPClient |
TNetHTTPClient |
TRESTClient stack |
|
|---|---|---|---|
| Unit | System.Net.HttpClient |
System.Net.HttpClientComponent |
REST.Client |
| Style | Code-first class | Drop-on-form component wrapper of THTTPClient (design-time props, events) | Component trio: TRESTClient + TRESTRequest + TRESTResponse |
| Best for | Services/infrastructure code, console, anything non-visual | Quick form-based apps wanting design-time config | JSON REST APIs — built-in param handling, serialization helpers, authenticators |
| JSON | Manual (System.JSON) |
Manual (System.JSON) |
Response.JSONValue, TJson helpers |
| Auth | CustomHeaders yourself |
CustomHeaders yourself |
TRESTHttpBasicAuthenticator, OAuth authenticator components |
Default recommendation: THTTPClient in infrastructure/service
classes (fits this kit's layering — the HTTP call belongs behind an
interface in Infrastructure, never in a form event); TRESTClient
stack when the API is JSON-heavy and you want request/response
plumbing handled for you.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 128 lines · 88 tokens per session scan A 04001e86ae8c
delphi-http-client is a skill published in the GitHub repository SecondLifes/delphi-expert (3 stars, last pushed 22d ago), licensed MIT. It adds 88 tokens to every session and 1,608 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
wxjava-module-selector
根据微信公众号、小程序、微信支付、企业微信、开放平台、视频号或微信小店、腾讯企点和微信智能对话等业务场景，为用户选择合适的 WxJava Maven 模块、BOM 和示例入口。适用于用户询问“该用哪个模块”、依赖坐标、产品边界或单/多账号 Starter 选择时。.
cpp-pro
Writes, optimizes, and debugs C++ applications using modern C++20/23 features, template metaprogramming, and high-performance systems techniques. Use when building or refactoring C++ code requiring concepts, ranges, coroutines, SIMD optimization, or careful memory management — or when addressing performance…
golang-observability
Golang everyday observability — the always-on signals in production. Covers structured logging with slog, Prometheus metrics, OpenTelemetry distributed tracing, continuous profiling with pprof/Pyroscope, server-side RUM event tracking, alerting, and Grafana dashboards. Apply when instrumenting Go services for…
rust-pro
Master modern Rust (2024 edition) with async patterns, advanced type system features, and production-ready systems programming. Expert in the current Rust ecosystem including Tokio, axum, and modern crates. Use PROACTIVELY for Rust development, performance optimization, or systems programming.
ax-python-agent
Use when writing Python code with axllm for agents, child delegation, tools, MCP, citations, persistent playbook learning, stage instructions, runtime state, final typed responses, and direct-respond executor skipping.
mps-aspect-actions
Use when defining or editing MPS node factories (the "actions" aspect) — NodeFactories roots, per-concept NodeFactory setup functions that initialize a freshly created node and optionally copy data from a replaced sampleNode, plus the actions aspect's CopyPasteHandlers and PasteWrappers roots. Reach for this skill…