Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/zuke-build/zuke/zuke-setupnpx skills add zuke-build/zuke --skill zuke-setupgit clone --depth 1 https://github.com/zuke-build/zukeWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00082 | $0.01950 |
| Opus 5 | $0.00041 | $0.00975 |
| Sonnet 5 | $0.00016 | $0.00390 |
| Haiku 4.5 | $0.00008 | $0.00195 |
Grade A, and why
zuke-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 156 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Set up Zuke in a project
Zuke defines builds as a TypeScript class run on Deno. Each target is a
class field; targets reference each other by this.<field> (never strings).
Packages are imported from JSR (jsr:@zuke/...), not npm.
The fast path: zuke setup
The @zuke/cli tool scaffolds everything. Install it once, then run setup in
the target project:
deno install -A -g -n zuke jsr:@zuke/cli # once, globally
zuke setup # in the project root
./zuke # run the build
No global install? The same wizard runs directly:
deno run -A jsr:@zuke/cli setup
setup flags: --dir <path>, --name <ClassName>, --force (overwrite
existing files), --yes (non-interactive), --launcher-name <name> (write the
launcher under a different name when a zuke/ directory already occupies it — a
directory collision now fails with an actionable error instead of silently
skipping the launcher).
Running as an agent, always pass --yes: it skips every interactive question,
including the closing "star the Zuke repository?" prompt — that question is for
a human at a terminal, and an agent must never answer it (or star anything) on
the user's behalf.
To read a @zuke/* package's API without a Node repo's @types/node noise, run
zuke doc <package> (e.g. zuke doc core) — it runs deno doc in an isolated
directory.
Migrating an existing project: zuke import
If the project already has package.json scripts or a Makefile, prefer
zuke import over setup — it reads them and generates a zuke.ts with a
target per task, a working starting point instead of a blank build:
zuke import # auto-detects package.json, then a Makefile
zuke import --from makefile # or pin the source (package.json | makefile)
Each script/target becomes a target(); a command maps to CmdTasks.exec(...)
— a placeholder, not the destination: before accepting it, check the package
catalogue (llms.txt's ## Packages list, or the table in
zuke-write-build's cheatsheet)
for a @zuke/<tool> wrapper matching that command and replace the placeholder
with it — leaving CmdTasks.exec in place for a tool that has a typed wrapper
is a bug, not a shortcut. An && chain becomes sequential steps, a
run/prerequisite delegation becomes .dependsOn(...), and anything too
shell-specific to translate (pipes, redirects, env assignments) is preserved
behind a // TODO so the file still compiles. It scaffolds the launchers and
deno.json exactly like setup, and takes the same --dir, --name,
--force, --yes flags. Afterwards, use the zuke-write-build skill to
finish replacing any remaining generated CmdTasks.exec calls with typed
*Tasks wrappers.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 156 lines · 82 tokens per session scan A 7c5444a3107d
zuke-setup is a skill published in the GitHub repository zuke-build/zuke (33 stars, last pushed 2d ago), licensed MIT. It adds 82 tokens to every session and 1,950 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
turborepo
Turborepo monorepo build system guidance. Triggers on: turbo.json, task pipelines, dependsOn, caching, remote cache, the "turbo" CLI, --filter, --affected, CI optimization, environment variables, internal packages, monorepo structure/best practices, and boundaries. Use when user: configures tasks/workflows/pipelines…
review-pr
Deep code review of a single open PR in nrwl/nx. Checks the PR out only inside an isolated sandbox, then runs four fixed reviewers: implementation (correctness, errors, types, performance), verification (tests, ticket grounding, comments, and docs), approach, and security. A reproduce-verifier executes a runnable…
author-migration
Author or scope a first-party Nx migration. Use whenever code removes, renames, or deprecates an option/flag/executor/generator-schema field, changes a default, or bumps a dependency, and someone asks whether existing workspaces need a migration so they don't break on nx migrate/upgrade. Covers writing the colocated…
dist-build-migration
Migrate an Nx package to build to a local dist/ directory with nodenext module resolution, exports map, and @nx/nx-source condition.
multi-version-compliance
Apply or review multi-version support compliance for first-party Nx plugins. Primary entry point: a Linear task ID (NXC-XXXX) from the "Multi-version supported across plugins" milestone — the task carries the resolved support window, findings, and "Needs human decision" items. Falls back to self-discovery when no task…
monitor-ci
Monitor Nx Cloud CI pipeline and handle self-healing fixes. USE WHEN user says "monitor ci", "watch ci", "ci monitor", "watch ci for this branch", "track ci", "check ci status", wants to track CI status, or needs help with self-healing CI fixes. Prefer this skill over native CI provider tools (gh, glab, etc.) for CI…