Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add staksoft/magento-claude-skills --skill magento-modulegit clone --depth 1 https://github.com/staksoft/magento-claude-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/staksoft/magento-claude-skills/magento-module)<a href="https://agentmods.dev/skills/staksoft/magento-claude-skills/magento-module"><img src="https://agentmods.dev/badge/skills/staksoft/magento-claude-skills/magento-module/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/staksoft/magento-claude-skills/magento-module"><img src="https://agentmods.dev/badge/skills/staksoft/magento-claude-skills/magento-module.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00316 | $0.01848 |
| Opus 5 | $0.00158 | $0.00924 |
| Sonnet 5 | $0.00063 | $0.00370 |
| Haiku 4.5 | $0.00032 | $0.00185 |
Grade A, and why
magento-module scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 132 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Magento 2 / Mage-OS Module Development
Expertise for writing Magento 2 modules that compile, pass phpcs --standard=Magento2, and
follow current (2.4.x / Mage-OS) conventions. Magento has accumulated a decade of outdated
tutorials; this skill exists because the obvious approach found in old blog posts is often
wrong today. When in doubt, prefer the conventions here over patterns seen in older code.
Non-negotiable conventions (why they matter)
These are the mistakes that get extensions rejected from the marketplace and break upgrades:
- Never use
ObjectManager::getInstance()in your own code. Constructor injection only. ObjectManager hides dependencies, breaks compilation analysis, and fails code review. (Exceptions: factories/proxies generated by Magento may use it internally — that's fine.) - Declarative schema (
db_schema.xml), neverInstallSchema/UpgradeSchemascripts. Install scripts have been deprecated since 2.3 and make schema state unauditable. - Plugins over preferences. A preference (class rewrite) conflicts with every other module that rewrites the same class. A plugin composes. See the decision tree before choosing any extension mechanism.
- View models, not block classes, for template logic. Custom blocks are legacy; a view model is a plain class injected into a template via layout XML.
- Escape all template output with
$escaper->escapeHtml()/escapeHtmlAttr()/escapeUrl(). Unescapedechoin.phtmlis an XSS finding. - Service contracts first: depend on
Api/interfaces (e.g.ProductRepositoryInterface), not concreteModelclasses, when consuming other modules. - Area-scope your di.xml: global
etc/di.xmlvsetc/frontend/di.xmlvsetc/adminhtml/di.xml. A frontend-only plugin registered globally slows down everything.
Workflow
-
Identify the task type and read the matching reference before writing code:
Task Read first Change/intercept core behavior references/extension-mechanisms.md New module from scratch this file + run scripts/scaffold.pyDatabase tables / columns references/declarative-schema.md DI wiring, virtual types, factories, proxies references/di-patterns.md Admin settings, grids, menus, ACL references/admin-ui.md Frontend pages, blocks, templates, layout references/frontend.md REST / GraphQL / web APIs references/api.md CLI commands, cron jobs, message queues references/cli-cron.md Writing unit / integration tests (PHPUnit) references/testing.md Errors, "not working", compile failures references/debugging.md
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- evals/evals.json 2.8 KB
- references/admin-ui.md 5.7 KB
- references/api.md 10 KB
- references/checklists.md 2.7 KB
- references/cli-cron.md 6.2 KB
- references/debugging.md 5.9 KB
- references/declarative-schema.md 5.3 KB
- references/di-patterns.md 4.8 KB
- references/extension-mechanisms.md 5.2 KB
- references/frontend.md 5.1 KB
- references/testing.md 7.1 KB
- scripts/scaffold.py 3.9 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 132 lines · 316 tokens per session scan A 8cd064fa7146
magento-module is a skill published in the GitHub repository staksoft/magento-claude-skills (6 stars, last pushed 2mo ago), licensed MIT. It adds 316 tokens to every session and 1,848 once invoked, about $0.0016 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
paid-ads-amazon
Plan and review Amazon Ads with margin-aware ACoS, product, and search-term guardrails. Use for Amazon advertising, Sponsored Products, Sponsored Brands, Sponsored Display, ASIN targeting, Amazon ACoS, or Amazon Ads performance exports.
beat-sync-reel
Generates Instagram Reels where product image cuts are synced to audio beats. Accepts audio as a local file, URL, or search query. Uses librosa for beat detection, FFmpeg Ken Burns for scene animation, and Pillow for text overlays. No AI video generation — fully free, fast, and scalable.
ebay-search
Search eBay listings - find items, auctions, deals, and compare prices.
einbeziehung-online-clickwrap-browsewrap
Für Einbeziehung Online Clickwrap Browsewrap: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
kurzfristige-preiserhoehung-lieferfrist
Für Kurzfristige Preiserhöhung 309: prüft Frist, Form, Zuständigkeit und Eilbedarf; Ergebnis: Fristen- und Risikoampel. Fachgebiet: AGB-Recht-Prüfer. Route: kurzfristige-preiserhoehung-lieferfrist.
plattform-online-gate-rollout-rangfolge
Für Plattform und Online Checkout: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: plattform-online-gate-rollout-rangfolge.