Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add tuanductran/nextdns-skills --skill nextdns-apigit clone --depth 1 https://github.com/tuanductran/nextdns-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tuanductran/nextdns-skills/nextdns-api)<a href="https://agentmods.dev/skills/tuanductran/nextdns-skills/nextdns-api"><img src="https://agentmods.dev/badge/skills/tuanductran/nextdns-skills/nextdns-api/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tuanductran/nextdns-skills/nextdns-api"><img src="https://agentmods.dev/badge/skills/tuanductran/nextdns-skills/nextdns-api.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.00906 |
| Opus 5 | $0.00036 | $0.00453 |
| Sonnet 5 | $0.00014 | $0.00181 |
| Haiku 4.5 | $0.00007 | $0.00091 |
Grade C, and why
nextdns-api scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
<!-- @case-police-ignore Api --> How it starts
The opening of the file, as written. The whole thing — 50 lines — stays where its author put it; the contents beside it link to each section on GitHub.
NextDNS API skills
Capability rules
| Rule | Keywords | Description |
|---|---|---|
| authentication | API key, X-Api-Key, authorization, authentication | Authenticate with NextDNS API |
| profile-management | create profile, update profile, delete profile, profile settings | Manage NextDNS profiles |
| security-settings | threat intelligence, cryptojacking, DNS rebinding, typosquatting | Configure security features |
| privacy-settings | blocklists, native tracking, disguised trackers, affiliate | Configure privacy features |
| parental-control | parental control, safe search, youtube restricted, block bypass | Configure parental controls |
| allowlist-denylist | allowlist, denylist, domain blocking, domain allowing | Manage allow/deny lists |
| analytics-queries | analytics, query parameters, date filtering, pagination | Query analytics data |
| analytics-endpoints | status, domains, reasons, devices, protocols | Access analytics endpoints |
| time-series-data | time series, charts, interval, alignment, timezone | Retrieve time series data |
| logs-management | logs, filtering, search, raw logs, deduplication | Query and filter logs |
| logs-streaming | SSE, real-time, streaming, Server-sent events | Stream logs in real-time |
| logs-clear | clear logs, delete logs, purge, gdpr | Permanently delete all logs |
| error-handling | error response, validation, 400 error, error format | Handle API errors |
| pagination | cursor, limit, next page, pagination | Paginate API responses |
| date-formats | ISO 8601, UNIX timestamp, relative dates, date parsing | Use correct date formats |
| nested-endpoints | nested objects, child endpoints, PATCH, DELETE | Work with nested endpoints |
| rewrites | rewrites, dns records, custom dns, hostname override, cname | Manage DNS rewrite records |
| settings | settings, logs, log retention, log location, cache boost, cname flattening | Manage profile settings |
| account-management | account, profiles list, profile enumeration, ownership, plan | Retrieve account info and all profiles |
| profile-copy | copy profile, clone profile, duplicate, backup, migration | Clone an existing profile to a new one |
What ships with it
24 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- AGENTS.md 61 KB
- rules/account-management.md 5.1 KB
- rules/allowlist-denylist.md 4.6 KB
- rules/analytics-endpoints.md 7.3 KB
- rules/analytics-queries.md 4.1 KB
- rules/authentication.md 1.8 KB
- rules/date-formats.md 6.7 KB
- rules/error-handling.md 7.8 KB
- rules/logs-clear.md 3.3 KB
- rules/logs-download.md 6.5 KB
- rules/logs-management.md 6.4 KB
- rules/logs-streaming.md 8.2 KB
- rules/nested-endpoints.md 9.0 KB
- rules/pagination.md 7.5 KB
- rules/parental-control.md 5.8 KB
- rules/privacy-settings.md 4.4 KB
- rules/profile-copy.md 9.0 KB
- rules/profile-management.md 3.3 KB
- rules/rate-limiting.md 7.4 KB
- rules/response-format.md 5.8 KB
- rules/rewrites.md 4.6 KB
- rules/security-settings.md 4.4 KB
- rules/settings.md 6.4 KB
- rules/time-series-data.md 6.2 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 50 lines · 71 tokens per session scan C 11f47804e41b
nextdns-api is a skill published in the GitHub repository tuanductran/nextdns-skills (4 stars, last pushed today), licensed MIT. It adds 71 tokens to every session and 906 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
voiden
Create and edit Voiden .void files for API testing. Covers the .void file format and all enabled extension block types.
lap
LAP CLI -- compile, search, and manage API specs for AI agents. Use when working with API specifications (OpenAPI, GraphQL, AsyncAPI, Protobuf, Postman), compiling specs to LAP format, searching the LAP registry, generating skills from API specs, or publishing APIs. Commands: init, compile, search, get, skill…
lap
LAP CLI -- compile, search, and manage API specs for AI agents. Use when working with API specifications (OpenAPI, GraphQL, AsyncAPI, Protobuf, Postman), compiling specs to LAP format, searching the LAP registry, generating skills from API specs, or publishing APIs. Commands: init, compile, search, get, skill…
binance-spot-openapi-skill
Operate Binance Spot market, account, and order APIs through UXC with a curated OpenAPI schema, Binance query signing, and separate mainnet/testnet link flows.
discord-openapi-skill
Operate Discord HTTP API through UXC with Discord OpenAPI schema. Bot token recommended for full API access including messages and server management. OAuth2 user authentication available for limited profile operations only.
feishu-openapi-skill
Operate Feishu or Lark IM APIs through UXC with a curated OpenAPI schema, tenant-token bearer auth, and chat/message guardrails.