Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/Sounio-lang/sounionpx agentmods add skills/sounio-lang/sounio/sounio-bootstrapWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sounio-lang/sounio/sounio-bootstrap)<a href="https://agentmods.dev/skills/sounio-lang/sounio/sounio-bootstrap"><img src="https://agentmods.dev/badge/skills/sounio-lang/sounio/sounio-bootstrap/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sounio-lang/sounio/sounio-bootstrap"><img src="https://agentmods.dev/badge/skills/sounio-lang/sounio/sounio-bootstrap.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00054 | $0.01105 |
| Opus 5 | $0.00027 | $0.00553 |
| Sonnet 5 | $0.00011 | $0.00221 |
| Haiku 4.5 | $0.00005 | $0.00111 |
Grade A, and why
sounio-bootstrap scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sounio Self-hosted Bootstrap
Overview
self-hosted/main.sio is the entry point for the self-hosted Sounio compiler. It runs the full pipeline — lex → parse → resolve → check → lower → native compile — as a pure .sio program executed by the native souc wrapper.
The self-hosted pipeline is separate from the Rust compiler/ pipeline. Changes here affect the self-hosted path only.
Workflow
1) Use the right mode for your investigation
Invoke as: $SOUC run self-hosted/main.sio -- <mode> <args>
| Mode | Output | Use for |
|---|---|---|
--lex <file> |
Token stream | Lexer bugs, new keyword support |
--parse <file> |
"Parse OK: N nodes" | Parser coverage |
--resolve <file> |
Resolution log | Symbol resolution bugs |
--check <file> |
"Check OK: 0 errors" or errors | Type-check gaps |
--ir-dump <file> |
"ir-dump: SOIR v2 binary, N bytes, M functions, K strings" | IR lowering |
--ir-roundtrip <file> |
"ir-roundtrip: OK" | IR serialize/deserialize fidelity |
--disasm <file> |
Human-readable IR | Lowering correctness |
--compile <file> |
SOIR bytecode | Bytecode output |
--native-compile <file> -o <out> |
ELF binary | Full pipeline → runnable binary |
SOUC=./bin/souc
$SOUC run self-hosted/main.sio -- --check examples/render/triangle_basic.sio
# Expected: "Check OK: 0 errors"
2) Fix frontend gaps conservatively
When a corpus file fails --check, find the minimal fix in the appropriate module:
- Type-check failures: fix in
self-hosted/check/— never change language semantics, only fill missing dispatch cases - Resolve failures: fix in
self-hosted/resolve/— add missing symbol table lookups - Lower failures: fix in
self-hosted/ir/lower.sio— add missing AST node → IR instruction mappings - Codegen failures: fix in
self-hosted/native/codegen.sio— add missing IR opcode handling
One fix per commit. Run the corpus gate after each fix to confirm no regression.
3) Validate against the render corpus
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 96 lines · 54 tokens per session scan A 459ae4c04e7c
sounio-bootstrap is a skill published in the GitHub repository Sounio-lang/sounio (6 stars, last pushed today), licensed Apache-2.0. It adds 54 tokens to every session and 1,105 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
vera-language
Write programs in the Vera programming language. Use when asked to write, edit, debug, or review Vera code (.vera files). Vera is a statically typed, purely functional language with algebraic effects, mandatory contracts, and typed slot references (@T.n) instead of variable names.
vera-language
Write programs in the Vera programming language. Use when asked to write, edit, debug, or review Vera code (.vera files). Vera is a statically typed, purely functional language with algebraic effects, mandatory contracts, and typed slot references (@T.n) instead of variable names.
migrate-oxfmt
Guide for migrating a project from Prettier or Biome to Oxfmt. Use when asked to migrate, convert, or switch a JavaScript/TypeScript project's formatter from Prettier or Biome to Oxfmt.
insta-snapshots
Guide for working with and updating insta snapshot tests in Oxc without terminal interaction.
EMILIA Trust Verification
Verify the authenticity of AI-agent authorization receipts and human-device signoffs. Use this whenever a user shares a "trust receipt", an "authorization receipt", a "signoff", or WebAuthn/passkey approval evidence and asks whether it is valid, genuine, or tampered with. Pairs with the public EMILIA Protocol MCP…
dev-self-merge
Merge self-check for a green PR. Reads the PR's required-check status from the checks API (the committed ci-status feed is RETIRED), outputs MERGE (mark task completed, stand down — server-side auto-enqueue enqueues.