Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ui5/plugins-coding-agents/modernize-ui5-appnpx skills add UI5/plugins-coding-agents --skill modernize-ui5-appgit clone --depth 1 https://github.com/UI5/plugins-coding-agentsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00134 | $0.04011 |
| Opus 5 | $0.00067 | $0.02005 |
| Sonnet 5 | $0.00027 | $0.00802 |
| Haiku 4.5 | $0.00013 | $0.00401 |
Grade A, and why
modernize-ui5-app scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 325 lines — stays where its author put it; the contents beside it link to each section on GitHub.
UI5 Modernization Workflow
This skill modernizes a UI5 application in five phases, each followed by a verification gate. The user picks the gate behavior once at the start — full autonomous, half autonomous, or manual — and the orchestrator applies that choice at every phase boundary.
The five phases
- Mechanical baseline — autofix + test starter restructure. Low-risk, unlocks test runs.
- Foundation —
manifest.jsonandComponent.js. Everything downstream reads the manifest. - Module system & globals — dependency graph (sap.ui.define arrays, lazy requires, no implicit globals). Cyclic-dep and blind-spot fixes belong here.
- Deprecated APIs — pure name-for-name replacement. Safe after phase 3 stabilizes the graph.
- CSP compliance — last, because it depends on every prior phase being CSP-clean.
A documentation pass writes MODERNIZATION-REPORT.md and MODERNIZATION-ISSUES.md after phase 5.
Rule ID to Skill Mapping
| Rule ID | Skill | Phase |
|---|---|---|
no-deprecated-theme |
fix-bootstrap-params |
4 |
no-outdated-manifest-version |
fix-manifest-json |
2 |
no-legacy-ui5-version-in-manifest |
fix-manifest-json |
2 |
no-deprecated-library |
fix-manifest-json (manifest) or fix-bootstrap-params (HTML) |
2 / 4 |
no-deprecated-component |
fix-manifest-json |
2 |
no-removed-manifest-property |
fix-manifest-json or fix-component-async |
2 |
async-component-flags |
fix-component-async |
2 |
no-globals |
fix-xml-globals (ALL XML) or fix-js-globals (JS — sap./jQuery.) |
3 |
no-ambiguous-event-handler |
fix-xml-globals |
3 |
no-deprecated-control-renderer-declaration |
fix-control-renderer |
4 |
ui5-class-declaration |
fix-control-renderer |
4 |
no-pseudo-modules |
fix-pseudo-modules |
3 |
no-implicit-globals |
fix-pseudo-modules |
3 |
unsupported-api-usage |
fix-partially-deprecated-apis |
4 |
prefer-test-starter |
modernize-test-starter |
1 |
csp-unsafe-inline-script |
fix-csp-compliance |
5 |
| (structural) | fix-cyclic-deps |
3 |
| (runtime) | fix-linter-blind-spots |
3 |
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 325 lines · 134 tokens per session scan A 775977fa1dce
modernize-ui5-app is a skill published in the GitHub repository UI5/plugins-coding-agents (34 stars, last pushed yesterday), licensed Apache-2.0. It adds 134 tokens to every session and 4,011 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
plugin-init
初始化 Zhin.js 插件项目。Use when asked to create a new plugin, scaffold plugin structure, or set up a plugin project. 引导生成符合 Plugin Runtime 规范的目录结构、package.json、plugin.ts、约定能力目录和 README。.
plugin-publish
发布 Zhin.js 插件到 npm 和 Zhin 插件市场。Use when asked to publish a plugin, prepare for release, check publish readiness, or submit to the Zhin plugin marketplace. 引导完成发布前检查、版本管理和提交流程。.
plugin-develop
Implement Zhin.js plugin features with Plugin Runtime: defineCommand, defineAgentTool, middleware, pages. Use when asked to add a command, register a tool, wire cron, extend middleware, or build a console page. Triggers: 插件开发, add command, 加命令, 写插件功能, defineCommand.
wordpress-plugin-fundamentals
Modern WordPress plugin development with PHP 8.3+, OOP architecture, hooks system, database interactions, and Settings API.
view-chain-layout
The layout rules for a z2ui5clui5viewbuilder chain - one call per line, four spaces per tree level, the end( ) column, which factory( ) shape goes with which chain shape, blank lines, and the linter rule that checks them. Identical in abap2UI5, abap2UI5/samples, abap2UI5/samples-controls and abap2UI5/samples-stack.…
agent-development
This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, or agent development…