Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/xprnetwork/xpr-network-dev-skill/skillnpx skills add XPRNetwork/xpr-network-dev-skill --skill skillgit clone --depth 1 https://github.com/XPRNetwork/xpr-network-dev-skillWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00030 | $0.02376 |
| Opus 5 | $0.00015 | $0.01188 |
| Sonnet 5 | $0.00006 | $0.00475 |
| Haiku 4.5 | $0.00003 | $0.00238 |
Grade A, and why
xpr-network-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 239 lines — stays where its author put it; the contents beside it link to each section on GitHub.
XPR Network Developer Skill
This skill provides comprehensive knowledge for developing on XPR Network, a fast, gas-free blockchain with WebAuthn wallet support.
Policy for AI agents (applies skill-wide): All chain writes documented in this skill use the
protonCLI keychain for signing — private keys stay in the CLI's encrypted on-disk keystore, never in the agent's process memory or context. Reads use direct RPC (get_table_rows,get_account, etc.) and the relevant project's REST API. Do not introduce signing patterns that pass raw private keys to the agent (e.g.new JsSignatureProvider(['PRIV_KEY']),wallet.import_key('...'),XPR_PRIVATE_KEYin environment). Seebackend-patterns.md→ Security: Key Isolation and../agent-bootstrap.mdfor the canonical signing path.
IMPORTANT DISCLAIMER: AI-Generated Smart Contract Code
Smart contracts handle real assets and are immutable once deployed. AI-generated code, including code produced with this skill, should always be reviewed by an experienced developer before deployment to mainnet.
- Test thoroughly on testnet before any mainnet deployment
- Have code reviewed by someone familiar with XPR Network/EOSIO smart contracts
- Audit critical contracts - consider professional security audits for contracts handling significant value
- Understand the code - don't deploy code you don't fully understand
Claude can accelerate development and help with patterns, but it does not replace proper code review, testing, and auditing practices.
XPR Network Overview
XPR Network is an EOS-based blockchain optimized for payments and identity:
| Feature | Description |
|---|---|
| Speed | 0.5 second block times, 4000+ TPS |
| Fees | Zero gas fees for end users |
| Accounts | Human-readable names (1-12 chars, a-z, 1-5) |
| Wallets | WebAuthn support (Face ID, fingerprint, security keys) |
| Contracts | AssemblyScript/TypeScript with proton-tsc |
| Storage | On-chain tables with RAM-based pricing |
What ships with it
24 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- accounts-permissions.md 11 KB
- alcor-dex.md 19 KB
- backend-patterns.md 28 KB
- cli-reference.md 9.2 KB
- defi-trading.md 35 KB
- examples.md 14 KB
- loan-protocol.md 15 KB
- metalx-dex.md 30 KB
- nfts-atomicassets.md 20 KB
- node-operation.md 12 KB
- oracles-randomness.md 18 KB
- payment-patterns.md 19 KB
- real-time-events.md 19 KB
- resources.md 14 KB
- rpc-queries.md 34 KB
- safety-guidelines.md 8.9 KB
- simpledex.md 15 KB
- smart-contracts.md 15 KB
- staking-governance.md 13 KB
- testing-debugging.md 12 KB
- token-creation.md 16 KB
- troubleshooting.md 12 KB
- web-sdk.md 16 KB
- webauth-identity.md 9.7 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 239 lines · 30 tokens per session scan A 37d33a8f1a2f
xpr-network-dev is a skill published in the GitHub repository XPRNetwork/xpr-network-dev-skill (9 stars, last pushed 1mo ago), licensed MIT. It adds 30 tokens to every session and 2,376 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
analyzing-ethereum-smart-contract-vulnerabilities
Perform static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect reentrancy, integer overflow, access control, and other vulnerability classes before deployment to Ethereum mainnet.
analyzing-ethereum-smart-contract-vulnerabilities
Perform static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect reentrancy, integer overflow, access control, and other vulnerability classes before deployment to Ethereum mainnet.
agent-uat
AI 에이전트가 마크다운 시나리오를 읽고 사용자와 인터랙티브하게 실행하여 WAIaaS 기능을 메인넷/테스트넷에서 검증하는 시스템이다.
chainaware-behavioral-prediction
Use this skill whenever a user asks about wallet safety, fraud risk, rug pull detection, wallet behavior analysis, DeFi personalization, on-chain reputation scoring, AML checks, token ranking by holder quality, airdrop screening, lending risk, token launch auditing, or AI agent trust scoring. Triggers on questions…
coinversaa-pulse
Read-only crypto intelligence for AI agents. 82 API-key-authenticated tools for Hyperliquid trader analytics, position lifecycles with MAE/MFE execution quality, trader archetype discovery, behavioral cohorts, HIP-4 outcome contracts, outcome/perp position context, syncer-backed risk data, live market data, builder…
alchemy-agentic-gateway
Use when accessing Alchemy APIs for RPC calls, token balances, NFT metadata, asset transfers, transaction simulation, or Alchemy-specific features. Also use when the user mentions "SIWE", "SIWS", "x402", "MPP", "mppx", or "agentic gateway" — this skill covers wallet-based auth flows for Alchemy's x402 and MPP…