Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add skwashd/ccodolo --skill pypi-version-lookupgit clone --depth 1 https://github.com/skwashd/ccodoloWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/skwashd/ccodolo/pypi-version-lookup)<a href="https://agentmods.dev/skills/skwashd/ccodolo/pypi-version-lookup"><img src="https://agentmods.dev/badge/skills/skwashd/ccodolo/pypi-version-lookup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/skwashd/ccodolo/pypi-version-lookup"><img src="https://agentmods.dev/badge/skills/skwashd/ccodolo/pypi-version-lookup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00115 | $0.01112 |
| Opus 5 | $0.00057 | $0.00556 |
| Sonnet 5 | $0.00023 | $0.00222 |
| Haiku 4.5 | $0.00012 | $0.00111 |
Grade A, and why
pypi-version-lookup scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
description: Look up the latest version of any Python package on PyPI. Use this skill whenever you need to check a package's current version — for example, when writing or updating requirements.txt, pyproject.toml, setup How it starts
The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PyPI Version Lookup
Look up the latest published version of a Python package from the PyPI JSON API using curl and jq.
When to use this
- The user asks for the current/latest version of a Python package
- You need to pin or update a dependency version in any config file
- You're generating a requirements file and want accurate, up-to-date versions
- You want to verify whether a specific version exists
How it works
Query the PyPI JSON API for a package and extract the info.version field, which always reflects the latest stable release.
curl -sf --max-time 5 "https://pypi.org/pypi/<package>/json" | jq -r '.info.version'
Replace <package> with the exact PyPI package name (e.g., requests, numpy, flask).
Flags explained
-s— Silent mode; suppresses progress output.-f— Fail silently on HTTP errors (returns a non-zero exit code instead of HTML error pages). This makes it easy to detect failures via$?.--max-time 5— Abort if the entire request takes longer than 5 seconds.
Handling multiple packages
When looking up several packages at once, run the lookups in a loop:
for pkg in requests flask numpy; do
version=$(curl -sf --max-time 5 "https://pypi.org/pypi/${pkg}/json" | jq -r '.info.version')
if [ $? -eq 0 ] && [ -n "$version" ] && [ "$version" != "null" ]; then
echo "${pkg}==${version}"
else
echo "${pkg}: lookup failed" >&2
fi
done
Error handling and retries
Network blips happen. If a lookup fails (non-zero exit code, empty result, or the string "null"), retry up to 3 times with exponential backoff before giving up:
lookup_version() {
local pkg="$1"
local attempt=0
local max_retries=3
local version=""
while [ $attempt -lt $max_retries ]; do
version=$(curl -sf --max-time 5 "https://pypi.org/pypi/${pkg}/json" | jq -r '.info.version')
if [ $? -eq 0 ] && [ -n "$version" ] && [ "$version" != "null" ]; then
echo "$version"
return 0
fi
attempt=$((attempt + 1))
sleep $((2 ** attempt)) # 2s, 4s, 8s backoff
done
echo "Failed to fetch version for '${pkg}' after ${max_retries} attempts." >&2
return 1
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 113 lines · 115 tokens per session scan A 3bc44410766a
pypi-version-lookup is a skill published in the GitHub repository skwashd/ccodolo (20 stars, last pushed today), licensed MIT. It adds 115 tokens to every session and 1,112 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
matlab
Build, review, migrate, and safely plan MATLAB or GNU Octave numerical workflows, including arrays, tabular/time data, tests, projects, graphics, MAT files, and explicit Python interoperability.
pennylane
Hardware-agnostic quantum ML framework with automatic differentiation. Use when training quantum circuits via gradients, building hybrid quantum-classical models, or needing device portability across IBM/Google/Rigetti/IonQ. Best for variational algorithms (VQE, QAOA), quantum neural networks, and integration with…
dd-code-generation
Use pup CLI for immediate Datadog operations or generate code for integration into applications.
rocm-kernels
Provides guidance for writing and benchmarking optimized Triton kernels for AMD GPUs (MI355X, R9700) on ROCm, targeting HuggingFace diffusers (LTX-Video, SD3, FLUX) and transformers. Core kernels: RMSNorm, RoPE 3D, GEGLU, AdaLN. Includes XCD swizzle, autotune, diffusers integration patterns, and LTX-Video pipeline…
holoscan-install-wheel
Install Holoscan SDK Python wheel via pip into a venv. Use for Python installs; not for native C++/apt or Conda installs.
typing-exclusion-worker
Python typing exclusion worker: remove assigned mypy exclusion modules in small scoped batches, fix typing issues, run validation, and produce a structured completion summary. Use when running parallel typing-debt workers or when asked to remove modules from pyproject mypy exclusion overrides.