Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add smorinlabs/py-launch-blueprint --skill new-python-projectgit clone --depth 1 https://github.com/smorinlabs/py-launch-blueprintWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/smorinlabs/py-launch-blueprint/new-python-project)<a href="https://agentmods.dev/skills/smorinlabs/py-launch-blueprint/new-python-project"><img src="https://agentmods.dev/badge/skills/smorinlabs/py-launch-blueprint/new-python-project/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/smorinlabs/py-launch-blueprint/new-python-project"><img src="https://agentmods.dev/badge/skills/smorinlabs/py-launch-blueprint/new-python-project.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 170 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00049 | $0.03481 |
| Opus 5.5 | $0.00020 | $0.01392 |
| Sonnet 5.5 | $0.00010 | $0.00696 |
| Haiku 4.5 | $0.00005 | $0.00348 |
Grade A, and why
new-python-project scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
from urllib.request import urlopen How it starts
The opening of the file, as written. The whole thing — 369 lines — stays where its author put it; the contents beside it link to each section on GitHub.
new-python-project
Create a fresh Python project from smorinlabs/py-launch-blueprint, validate
its CLI and web application, and deliver the initialization as a pull request.
The generated project starts at version 0.1.0 and requires Python 3.13+.
Use this runbook from the original blueprint checkout throughout the
bootstrap. Rebranding removes the generated copy of SKILL.md and retires its
companion documentation. The generated project's ongoing setup checklist is
docs/PROJECT_SETUP.md; docs/POST_INIT.md is a template/provenance pointer.
Scope and authorization
Use this skill for a new project derived from the blueprint. An existing
project with press/press-receipt.toml, the record of a completed rebrand, is
not a fresh bootstrap target.
If the user has already selected the blueprint or approved this bootstrap, continue without asking them to choose it again. For a generic Python project request where that choice is unresolved, ask whether they want the blueprint's full toolchain or a minimal setup. If they decline the template, leave this skill and follow their chosen approach.
Resolve the GitHub owner, repository name, visibility, and target directory before creating resources. Summarize the identity, local setup, and intended initialization pull request. Ask for approval only if those actions are not already authorized. An approved full bootstrap includes the preview, declared cleanup, rebrand, local toolchain setup, validation, and initialization PR. Publishing packages, merging the PR, and configuring external services require their own requested scope.
Runbook
Run commands from the stated directory and stop at a failed command. Replace
angle-bracket placeholders with the collected values. The shell examples use
Bash; keep the bootstrap_* variables available between steps. Record their
resolved values when the execution tool starts a separate shell for each call.
1. Check prerequisites and collect missing identity
From the original blueprint checkout, verify the command-line tools and GitHub login before creating the new repository:
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -7 lines bc4116a4b4bd
- 1mo ago First seen · 376 lines · 49 tokens per session scan A 8b358c94fcaa
new-python-project is a skill published in the GitHub repository smorinlabs/py-launch-blueprint (24 stars, last pushed 2d ago), licensed MIT. It adds 49 tokens to every session and 3,481 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
django-seedkit
Bootstrap a new Django project, or add components — auth (allauth, magic-link, axes, 2FA), payments (Stripe, dj-stripe), REST (django-modern-rest, django-bolt), Celery / Django Tasks, async views & WebSockets (ASGI, uvicorn worker, django-channels, channels-redis), Tailwind+DaisyUI, favicon, SEO meta tags + sitemap…
validate-python-stack
Validate the Python Template repository or a project generated from it. Use before committing, publishing, deploying, or reviewing a stack to check catalog compilation, rendering, dependencies, formatting, tests, security workflows, skills, and representative runtime behavior.
heaven-style
Use when coding, designing, reviewing, or writing documentation in TypeScript or Python projects.
matlab
Builds, reviews, migrates, and plans MATLAB or GNU Octave numerical workflows. Use for arrays, tabular/time data, tests, projects, graphics, MAT files, and explicit Python interoperability.
pennylane
Builds and differentiates PennyLane quantum circuits, hybrid PyTorch or JAX models, molecular VQE and QAOA workflows. Use for variational quantum algorithms, quantum machine learning, simulator validation, and moving validated circuits to provider plugins. For hardware-specific compilation use qiskit or cirq; for…
holoscan-install-wheel
Install Holoscan SDK 5.x CUDA 13 Python wheels in an isolated environment, choosing the full stack or version-matched components.