Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xobotyi/cc-foundry --skill javascriptgit clone --depth 1 https://github.com/xobotyi/cc-foundryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xobotyi/cc-foundry/javascript)<a href="https://agentmods.dev/skills/xobotyi/cc-foundry/javascript"><img src="https://agentmods.dev/badge/skills/xobotyi/cc-foundry/javascript/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xobotyi/cc-foundry/javascript"><img src="https://agentmods.dev/badge/skills/xobotyi/cc-foundry/javascript.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.06388 |
| Opus 5.5 | $0.00020 | $0.02555 |
| Sonnet 5.5 | $0.00010 | $0.01278 |
| Haiku 4.5 | $0.00005 | $0.00639 |
Grade B, and why
javascript scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Strips warnings and disclaimersmediumAnti-refusal
Omitting safety caveats hides risk from the user and is a common jailbreak preamble.
When **reviewing** JavaScript, cite the violation and show the fix inline. Do not lecture. How it starts
The opening of the file, as written. The whole thing — 362 lines — stays where its author put it; the contents beside it link to each section on GitHub.
JavaScript fails by continuing. A mismatched type is coerced, a missing property is undefined, a rejected promise
nobody watched is a warning. None of it reports itself, so the discipline is to make a failure loud at the earliest
point it can be seen. Three biases decide most calls:
- Prefer the construct that refuses over the one that converts —
===over==,??over||,Number(s)overparseInt(s), a thrown error over a silentundefined. - The declared engine baseline decides what may be written, not the ECMAScript edition a feature belongs to.
- Reach for the built-in globals first. A dependency earns its place by doing what
Intl,URL,structuredClone,AbortController, and the iterator helpers do not.
Language Edition
Read the project's engine baseline before writing code: engines in package.json, browserslist, target and lib
in tsconfig.json or jsconfig.json, .nvmrc, and the CI matrix. Where a transpiler stands between source and
runtime, its target governs the output and the source may run ahead; where none does, the engine baseline's oldest
engine governs the source.
An edition number is not an availability claim. Engines ship features years before ratification and lag on others,
and the gap runs both ways inside a single edition: Array.fromAsync and Math.sumPrecise are both ES2026, yet the
first shipped in Chrome 121 and reached Baseline widely available on 2026-07-25, while the second reached Baseline newly
available on 2026-04-10 and is absent from Node.js 26. Check the feature, never the edition.
Floor edition per feature this skill's rules reference. Anything from ES2019 or earlier is available in every engine a project can realistically target.
- ES2020 —
?.,??,globalThis,BigInt,Promise.allSettled,String.prototype.matchAll, dynamicimport(),import.meta, specifiedfor...inorder - ES2021 —
??=,||=,&&=,String.prototype.replaceAll,Promise.any,AggregateError, numeric separators - ES2022 — class fields,
#privatefields and methods,#x in obj,static {}blocks, top-levelawait,Object.hasOwn,.at(),Errorcause, RegExpdflag - ES2023 —
toSorted,toReversed,toSpliced,with,findLast,findLastIndex - ES2024 —
Object.groupBy,Map.groupBy,Promise.withResolvers, RegExpvflag,String.prototype.isWellFormed - ES2025 — iterator helpers,
Setmethods (union,intersection,difference, …),Promise.try,RegExp.escape, RegExp modifiers(?i:), duplicate named capture groups, import attributes, JSON modules - ES2026 —
Map.prototype.getOrInsertandgetOrInsertComputed,Iterator.concat,Array.fromAsync,Error.isError,Math.sumPrecise,Uint8Arraybase64 and hex,JSON.rawJSON - Stage 4, unratified —
usingandawait usingwithSymbol.disposeandDisposableStack;Temporal;Iterator.zip. No Safari 26.x release implements any of them, so none is safe for an engine baseline that includes Safari 26.usingrequires Chrome 134, Firefox 141, or Node.js 24;Temporalrequires Chrome 144, Firefox 139, or Node.js 26.Atomics.pauseis the exception, reaching Chrome 133, Firefox 137, and Safari 18.4. - Not shippable — decorators are Stage 2.7 and no engine implements them. A project using them runs TypeScript or
Babel, and TypeScript's
experimentalDecoratorsis the older, incompatible design.
Read [${CLAUDE_SKILL_DIR}/references/versions/es20NN.md] — one file per ratified edition, es2020.md through
es2026.md, plus [${CLAUDE_SKILL_DIR}/references/versions/stage4-queue.md] for the unratified set — when writing
against a feature near the engine baseline, and whenever raising it. Each carries what its edition added, what behavior
it changed, and the traps it introduced.
What ships with it
17 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- .dev/reference-inventory.json 2.4 KB
- references/conventions/async.md 5.1 KB
- references/conventions/classes.md 4.3 KB
- references/conventions/coercion.md 6.0 KB
- references/conventions/intl.md 3.3 KB
- references/conventions/iteration.md 6.3 KB
- references/conventions/jsdoc.md 3.1 KB
- references/conventions/modules.md 4.7 KB
- references/conventions/regexp.md 3.5 KB
- references/versions/es2020.md 1.8 KB
- references/versions/es2021.md 1.3 KB
- references/versions/es2022.md 2.5 KB
- references/versions/es2023.md 1.2 KB
- references/versions/es2024.md 2.0 KB
- references/versions/es2025.md 2.0 KB
- references/versions/es2026.md 2.5 KB
- references/versions/stage4-queue.md 3.3 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +8 lines e78265aeceb7
- 1mo ago Changed · +74 lines · +4 tokens per session a317249c412e
- 1mo ago First seen · 280 lines · 47 tokens per session scan B a72f075621f1
javascript is a skill published in the GitHub repository xobotyi/cc-foundry (22 stars, last pushed 7d ago), licensed MIT. It adds 51 tokens to every session and 6,388 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 1 finding (strips warnings and disclaimers). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
erlang-otp-behaviors
Use when oTP behaviors including genserver for stateful processes, genstatem for state machines, supervisors for fault tolerance, genevent for event handling, and building robust, production-ready Erlang applications with proven patterns.
omh-rust
This is an OMH rust workflow skill, projected for Agent Skills hosts (Claude Code, Codex, Cursor, opencode, OpenClaw, pi).
axiom-concurrency
Use when writing ANY async code, actors, or threads in an Apple-platform app, or seeing ANY concurrency error. Covers Swift 6 concurrency, @MainActor, Sendable, data races, async/await patterns.
haskell-pro
Expert Haskell engineer specializing in advanced type systems, pure functional design, and high-reliability software. Use PROACTIVELY for type-level programming, concurrency, and architecture guidance.
migrate-better-result-3
Migrate a TypeScript codebase from better-result 2.x to 3.0. Use when upgrading better-result across the TaggedError syntax, removed Result serialization helpers, recovery inference, matching, or retry APIs.
advpl-tlpp-sdd
Plan and implement Protheus projects/features with 4 adaptive phases — Specify, Design, Tasks, Execute. Auto-sizes depth based on complexity. Creates atomic tasks with verification criteria, atomic commits, requirement traceability, and persistent memory across sessions. Specific to AdvPL/TLPP + Protheus. Use when…