Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add skwashd/ccodolo --skill pypi-version-lookupgit clone --depth 1 https://github.com/skwashd/ccodoloWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/skwashd/ccodolo/pypi-version-lookup)<a href="https://agentmods.dev/skills/skwashd/ccodolo/pypi-version-lookup"><img src="https://agentmods.dev/badge/skills/skwashd/ccodolo/pypi-version-lookup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/skwashd/ccodolo/pypi-version-lookup"><img src="https://agentmods.dev/badge/skills/skwashd/ccodolo/pypi-version-lookup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00115 | $0.01112 |
| Opus 5.5 | $0.00046 | $0.00445 |
| Sonnet 5.5 | $0.00023 | $0.00222 |
| Haiku 4.5 | $0.00012 | $0.00111 |
Grade A, and why
pypi-version-lookup scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
description: Look up the latest version of any Python package on PyPI. Use this skill whenever you need to check a package's current version — for example, when writing or updating requirements.txt, pyproject.toml, setup How it starts
The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PyPI Version Lookup
Look up the latest published version of a Python package from the PyPI JSON API using curl and jq.
When to use this
- The user asks for the current/latest version of a Python package
- You need to pin or update a dependency version in any config file
- You're generating a requirements file and want accurate, up-to-date versions
- You want to verify whether a specific version exists
How it works
Query the PyPI JSON API for a package and extract the info.version field, which always reflects the latest stable release.
curl -sf --max-time 5 "https://pypi.org/pypi/<package>/json" | jq -r '.info.version'
Replace <package> with the exact PyPI package name (e.g., requests, numpy, flask).
Flags explained
-s— Silent mode; suppresses progress output.-f— Fail silently on HTTP errors (returns a non-zero exit code instead of HTML error pages). This makes it easy to detect failures via$?.--max-time 5— Abort if the entire request takes longer than 5 seconds.
Handling multiple packages
When looking up several packages at once, run the lookups in a loop:
for pkg in requests flask numpy; do
version=$(curl -sf --max-time 5 "https://pypi.org/pypi/${pkg}/json" | jq -r '.info.version')
if [ $? -eq 0 ] && [ -n "$version" ] && [ "$version" != "null" ]; then
echo "${pkg}==${version}"
else
echo "${pkg}: lookup failed" >&2
fi
done
Error handling and retries
Network blips happen. If a lookup fails (non-zero exit code, empty result, or the string "null"), retry up to 3 times with exponential backoff before giving up:
lookup_version() {
local pkg="$1"
local attempt=0
local max_retries=3
local version=""
while [ $attempt -lt $max_retries ]; do
version=$(curl -sf --max-time 5 "https://pypi.org/pypi/${pkg}/json" | jq -r '.info.version')
if [ $? -eq 0 ] && [ -n "$version" ] && [ "$version" != "null" ]; then
echo "$version"
return 0
fi
attempt=$((attempt + 1))
sleep $((2 ** attempt)) # 2s, 4s, 8s backoff
done
echo "Failed to fetch version for '${pkg}' after ${max_retries} attempts." >&2
return 1
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 113 lines · 115 tokens per session scan A 3bc44410766a
pypi-version-lookup is a skill published in the GitHub repository skwashd/ccodolo (24 stars, last pushed today), licensed MIT. It adds 115 tokens to every session and 1,112 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
pypi-version-lookup compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| pypi-version-lookupskwashd/ccodolo | Skill | 24 | today | MIT | A | 115 | Claude Code |
| matlabK-Dense-AI/scientific-agent-skills | Skill | 56k | 5d ago | MIT | A | 44 | Claude Code |
| pennylaneK-Dense-AI/scientific-agent-skills | Skill | 56k | 5d ago | MIT | A | 74 | Claude Code |
| holoscan-install-wheelNVIDIA/skills | Skill | 3.9k | today | Apache-2.0 | A | 34 | Claude Code, Codex |
| future-self-liteTHU-MAIC/OpenMAIC | Skill | 43k | yesterday | MIT | A | 20 | Claude Code, Codex |
| rocm-kernelshuggingface/kernels | Skill | 783 | yesterday | Apache-2.0 | A | 93 | Claude Code |
| typing-exclusion-workergetsentry/skills | Skill | 1.1k | yesterday | Apache-2.0 | A | 57 | Claude Code |