Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add stranma/claude-code-python-template --skill landedgit clone --depth 1 https://github.com/stranma/claude-code-python-templateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/stranma/claude-code-python-template/landed)<a href="https://agentmods.dev/skills/stranma/claude-code-python-template/landed"><img src="https://agentmods.dev/badge/skills/stranma/claude-code-python-template/landed/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/stranma/claude-code-python-template/landed"><img src="https://agentmods.dev/badge/skills/stranma/claude-code-python-template/landed.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.01126 |
| Opus 5.5 | $0.00010 | $0.00450 |
| Sonnet 5.5 | $0.00005 | $0.00225 |
| Haiku 4.5 | $0.00003 | $0.00113 |
Grade A, and why
landed scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 117 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Landed
Post-merge lifecycle command. Run this after a PR is merged to verify CI, check deployments, clean up branches, and identify next steps.
Step 1: Detect Merged PR
Identify the PR that was just merged.
-
Run
git branch --show-currentto get the current branch -
If already on master:
- Check
git reflog --oneline -20for the previous branch name - If no branch found, ask the user for the PR number or branch name
- Check
-
Look up the merged PR:
gh pr list --state merged --head <branch> --json number,title,mergeCommit -L 1 -
If no PR found: ask the user for the PR number directly
-
Display: PR number, title, merge commit SHA
Pre-check: Run gh auth status early. If not authenticated, stop and instruct the user to run gh auth login.
Step 2: Verify Merge CI
Check that CI passed on the merge commit.
-
List recent runs on master:
gh run list --branch master -L 20 --json status,conclusion,databaseId,name,headSha -
Filter to runs whose
headShamatches the merge commit SHA -
Evaluate all matched runs:
- in_progress: watch still-running run(s) with
gh run watch <id> - success: all matched runs must be
completedwithconclusion=successto proceed - failure: show details via
gh run view <id> --log-failedfor each failing run- Ask: "Is this a recurring issue or specific to this PR?"
- If recurring: suggest adding to
/donevalidation or pre-merge CI - If specific: diagnose inline from the failed log output
- in_progress: watch still-running run(s) with
Step 3: Deployment Verification (Configurable)
Check for deployment status if configured.
- Check if
.claude/deploy.jsonexists - If it exists:
- Read the file and iterate over configured environments
- For each environment:
- Watch the deployment workflow:
gh run list --workflow <workflow> --commit <merge-commit-sha> --json status,conclusion,databaseId - If
health_checkURL is configured, fetch it and verify a 200 response
- Watch the deployment workflow:
- Report per-environment status (success/failure/in_progress)
- If no config file:
- Ask the user: "Is there a deployment to verify? (skip if none)"
- If user says no or skips: mark as "skipped"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 117 lines · 26 tokens per session scan A 4e7a39758495
landed is a skill published in the GitHub repository stranma/claude-code-python-template (2 stars, last pushed 6mo ago), licensed MIT. It adds 26 tokens to every session and 1,126 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
releasing-weaverse-sdks
Use when releasing @weaverse/ npm packages, bumping SDK versions, publishing to npm, or shipping the Weaverse SDKs. Triggers on "release sdk", "release weaverse", "publish packages", "release core", "release schema", "bump sdk version", "ship sdks".
npm
Publish and manage packages on the npm registry (npmjs.com), publish, dist-tags, deprecate, owners, download stats, private installs. Use when the user asks to publish, release or manage an npm package, or to inspect the registry.
dev-workflow
A workflow for GitHub collaboration and software releases, covering issues, pull requests, reviews, merges, and version publishing. It first determines the repository, permissions, branch, and correct remote before making changes.
cargo-release
PM-invocable protocol for Cargo publish and release operations in the trusty-tools Rust monorepo: semver rules, 10-step release sequence, macOS codesign safety, and cross-crate dependency ordering.
deliver
Release, deploy, or hand over a milestone in a disciplined, repeatable way. Use when shipping to users, deploying to an environment, tagging a release, or closing out a milestone. Nothing ships that verify hasn't passed.
oma-scm
Manage Git branches, merges, conflicts, commits, and release baselines. Use for repository history and change-management operations.