sumi-docs: Skill for Codex

.agents/skills/sumi-docs-use/SKILL.md

sumi-docs-use is a skill for Codex from starSumi/sumi-docs. It costs 55 tokens per session (623 once invoked), scanned A, a copy of sumi-docs-use, MIT.

A guide for installing and running Sumi Docs, a documentation system in this repository, and connecting it to coding-agent hosts such as Codex, Claude Code, or VS Code.

In plain words
What is it for?
Use it to install the workspace, select a documentation source, run health checks, start the Web site or MCP service, and configure an agent host.
Why use it?
It removes guesswork when choosing between local and published documentation, starting the documentation site, or running Sumi Docs through a local process or web connection.

Skill for Codex

Written for Codex: agents/openai.yaml present. Also seen: mentions Claude Code; installed under .agents/ (shared by several agents); mentions Codex.

This is starSumi/sumi-docs's own configuration. It tells Codex how to work on sumi-docs itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything sumi-docs configures →

Reuse

Borrowing it

Nothing to install: this file belongs to starSumi/sumi-docs. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/starSumi/sumi-docs/main/.agents/skills/sumi-docs-use/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/starSumi/sumi-docs

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sumi-docs-use

README.md
[![agentmods](https://agentmods.dev/badge/skills/starsumi/sumi-docs/sumi-docs-use/github.svg)](https://agentmods.dev/skills/starsumi/sumi-docs/sumi-docs-use)
Your own site
<a href="https://agentmods.dev/skills/starsumi/sumi-docs/sumi-docs-use"><img src="https://agentmods.dev/badge/skills/starsumi/sumi-docs/sumi-docs-use/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sumi-docs-use

Your own site · 80×15
<a href="https://agentmods.dev/skills/starsumi/sumi-docs/sumi-docs-use"><img src="https://agentmods.dev/badge/skills/starsumi/sumi-docs/sumi-docs-use.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 55 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 623 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 95% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00055 $0.00623
Opus 5 $0.00028 $0.00311
Sonnet 5 $0.00011 $0.00125
Haiku 4.5 $0.00006 $0.00062

Measured 3d ago against content hash 96dac087b59e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

sumi-docs-use scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

95% identical to sumi-docs-use — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.agents/skills/sumi-docs-use/SKILL.md · 57 lines

How it starts

The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Use Sumi Docs

Work from the repository root and read README.md plus the relevant page under docs/ before running commands. Use Node.js 25.5.0 or newer and the pinned pnpm version; do not substitute npm.

Select the workflow

  • First checkout: run pnpm install --frozen-lockfile, pnpm run build, then node packages/mcp/dist/index.js doctor --json.
  • Default corpus: run node packages/mcp/dist/index.js serve; repository discovery selects the reviewed root docs/ corpus.
  • Another local corpus: pass its root-relative directory to serve and add --openapi <relative-json-path> only when needed.
  • Published corpus: pass its HTTPS _mcp/ manifest URL and the human site URL through --base-url.
  • Remote MCP service: use --transport streamable-http; keep the default loopback bind for development and apply the documented Host, Origin, TLS, and public-network gates before deployment.
  • Web development: run pnpm --filter @sumi-labs/docs-web dev and use the URL printed by Astro.
  • Agent host setup: read docs/agent-hosts.md, build first, then use the checked-in project adapter for the active host.

Choose stdio for a local child process or Streamable HTTP for a remote MCP endpoint. Do not confuse either transport with the HTTPS corpus locator or the human page URL. Restart the server after source or configuration changes because a process keeps one read-only corpus snapshot.

Diagnose before changing configuration

Run doctor --json and inspect stderr separately from stdout. Prefer repository-relative arguments and host project-root variables; do not commit machine-specific absolute paths. Use --show-paths only for local diagnosis and do not paste its output into public reports.

Confirm the active source with list_docs, then use search_docs and fetch_doc with paths returned by the server. Do not claim semantic search, live reload, source mutation, arbitrary Web crawling, or private-corpus authorization.

For product usage, architecture, operations, and stable decision questions, query the active MCP projection before searching documentation files directly. For implementation changes, regressions, or current behavior, inspect source and tests because a process-local documentation snapshot can be stale. MCP constrains only its own read-only tool surface; host sandboxing and filesystem authorization remain the agent host's responsibility.

Read the full file on GitHub · 57 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago Changed 96dac087b59e
  2. 11d ago First seen · 57 lines · 55 tokens per session scan A 35d6645dbc4c

Subscribe to this mod's changes

sumi-docs-use is a skill published in the GitHub repository starSumi/sumi-docs (1 stars, last pushed 2d ago), licensed MIT. It adds 55 tokens to every session and 623 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 95% identical to sumi-docs-use, differing in 0 lines, and is treated as a copy.

Related

Other skills, from other repositories

wordpress-plugin-to-emdash

Port a WordPress plugin to EmDash CMS. Use this skill when asked to migrate, convert, or port a WordPress plugin, theme functionality, or custom post type to EmDash. Provides concept mapping and implementation patterns.

emdash-cms/emdash · 52 tokens

review

Review one pull request for real bugs, regressions, and convention violations. Enumerate candidate issues across the whole diff, verify each against the code, then return structured line-anchored findings and a verdict. Read-only on GitHub; the orchestrator posts the review.

emdash-cms/emdash · 57 tokens

emdash-cli

Use the EmDash CLI to manage content, schema, media, and more. Use this skill when you need to interact with a running EmDash instance from the command line — creating content, managing collections, uploading media, generating types, or scripting CMS operations.

emdash-cms/emdash · 56 tokens

writing-emdash-docs

Write, revise, and review EmDash documentation for technical accuracy, useful structure, house style, and natural prose. Use when working on user documentation, guides, API reference pages, migration or upgrade guides, READMEs, contributor documentation, technical specifications, or release notes in the EmDash…

emdash-cms/emdash · 85 tokens

building-emdash-site

Build and customize EmDash CMS sites on Astro. Use when creating pages, defining collections, writing seed files, querying content, rendering Portable Text, setting up menus/taxonomies/widgets, configuring deployment, or any task involving an EmDash-powered Astro site. Assumes basic Astro knowledge but provides all…

emdash-cms/emdash · 70 tokens

adversarial-reviewer

Adversarial code review that assumes bugs exist and hunts for them. Use when asked to review code, find bugs, audit for correctness, stress-test a PR, or when someone says "tear this apart" or "what's wrong with this". Give no benefit of the doubt — every line is guilty until proven innocent.

emdash-cms/emdash · 71 tokens