Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add splunk/splunk-agent-skills --skill splunk-setup-page-buildergit clone --depth 1 https://github.com/splunk/splunk-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/splunk/splunk-agent-skills/splunk-setup-page-builder)<a href="https://agentmods.dev/skills/splunk/splunk-agent-skills/splunk-setup-page-builder"><img src="https://agentmods.dev/badge/skills/splunk/splunk-agent-skills/splunk-setup-page-builder/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/splunk/splunk-agent-skills/splunk-setup-page-builder"><img src="https://agentmods.dev/badge/skills/splunk/splunk-agent-skills/splunk-setup-page-builder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00143 | $0.05731 |
| Opus 5.5 | $0.00057 | $0.02292 |
| Sonnet 5.5 | $0.00029 | $0.01146 |
| Haiku 4.5 | $0.00014 | $0.00573 |
Grade A, and why
splunk-setup-page-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 513 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Splunk Setup Page Builder
Build a first-run setup page for a Splunk app or add-on: a screen that
appears the first time a user launches the app, collects whatever
configuration it needs (an endpoint URL, an API token, feature toggles,
etc.), and completes without using the deprecated setup.xml mechanism.
This is proven, not theoretical: the workflow below was built end-to-end
against a real Splunk Enterprise 10.4 instance, validated with
splunk-appinspect in both test and precert mode, and revised after
two real bugs were found during manual testing (see
Known pitfalls — do not
reintroduce either one). It was independently re-validated twice more by
fresh agent sessions with no prior context, each building a different toy
app from the instructions alone.
Prerequisites
- A Splunk app directory to add the setup page to (existing app, or a
fresh one you scaffold with
default/app.conf,default/data/ui/, andmetadata/default.meta). - Target: Splunk Enterprise 9.x+ or Splunk Cloud Platform (equivalent release). No local Splunk instance is required to write the files, but installing into a real instance is required to verify them — see Verification.
splunk-appinspectinstalled locally for static validation (pip install splunk-appinspect; on macOS you may also needbrew install libmagicfor it to import cleanly).
When to Use
Use this skill when a user is building a Splunk app/add-on for Splunkbase
(or an internal TA) that needs the user to provide configuration before it
can run — most commonly an API endpoint, credentials/token, or a small set
of feature settings — and wants a proper "Set up your app" experience
instead of hand-editing .conf files after install.
Do not use default/setup.xml for this. It is deprecated, unsupported on
Splunk Cloud Platform and search head clusters, and fails Splunk
AppInspect's cloud check (check_setup_xml_in_default) outright. Every
app that needs first-run configuration and wants to be Cloud-compatible
must use a setup view (Simple XML or React) instead, wired through
app.conf's [install] is_configured / [ui] setup_view.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 513 lines · 143 tokens per session scan A b2483ee0bbf9
splunk-setup-page-builder is a skill published in the GitHub repository splunk/splunk-agent-skills (62 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 143 tokens to every session and 5,731 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.
Other skills, from other repositories
anti-slop-design
Autonomous Principal Design Technologist. Cures vibe-coded software from AI frontend slop using curated token archetypes and 7-axis quality gating.
chakra-ui-builder
Build responsive, accessible UI components and layouts using Chakra UI v3, install or configure Chakra UI in new and existing projects, and design scalable themes using tokens, semantic tokens, recipes, and slot recipes. Use this skill whenever a user asks to build, create, or generate any UI component, page, form…
visual-ralph
Visual Ralph orchestration for frontend UI from generated references, static references, or live URL targets, using $ultragoal with built-in visual verdict and pixel-diff evidence until the implementation matches and leaves a reproducible design system.
open-design-setup
Prepare or repair a project's prototyping environment so open-design can build prototypes with the project's own component library and render them through the project's toolchain. Use when the library target is needed and docs/design/prototyping.md is missing, stale, or failing; excludes HTML-only design work and…
frontend-visual-qa
Audits rendered UI and specific task/object-link handoffs; excludes ordinary source citations alone. Audits already-rendered UI and Markdown/Obsidian image layout — web app, deck/slide, dashboard, design-system, or Electron/native app — via real-browser/native-app journeys and a Playwright sweep. Use after UI…
prototype-web
A clickable, high-fidelity web product prototype with navigation, a hero section, feature cards, steps, social proof, and optional pricing. It is designed to resemble a finished landing page while remaining a prototype.