Toon

Compress JSON data to TOON format for ~40% context savings. Use when fetching APIs, reading JSON files, or any task outputting structured data. Pipe any output through `toon` - JSON gets compressed, non-JSON passes through unchanged.

Security Scan

The skill's runtime instructions claim you should copy a local script and depend on an npm CLI package, but the bundle contains no code or install spec — the pieces don't line up and you should verify the source before installing or running anything it suggests.

Purpose & Capability

The stated purpose (compress JSON to a TOON format) is plausible and matches references to a TOON format spec and an npm CLI (@toon-format/cli). However, the skill bundle contains no binaries or code files, while the README instructs copying a local script (scripts/toon) into PATH — that file is not present in the package, which is inconsistent.

Instruction Scope

Runtime instructions themselves are limited to piping data through a 'toon' CLI, which is appropriate for the stated purpose. But the SKILL.md also includes installation commands that reference a local path (scripts/toon) and a requirement of npx/Node — the instructions expect files and tooling not provided or documented in the bundle, making the instructions incomplete and ambiguous. There is no guidance on obtaining or verifying the referenced CLI (@toon-format/cli).

Install Mechanism

There is no formal install spec in the registry entry. The SKILL.md suggests copying a script from scripts/toon and notes 'Requires: npx (Node.js)', but no script is included and no reliable install command (for example, an npx command or npm install) is provided. This mismatch means following the install instructions as-is will fail or require retrieving code from an unspecified external source — a potential risk if users copy unknown scripts from the internet.

Credentials

The skill requests no environment variables, no credentials, and no config paths. That is proportionate for a local CLI that simply reformats JSON.

Persistence & Privilege

The skill does not request always:true or other elevated persistence. It is user-invocable and allows autonomous invocation by the agent (platform default), which is normal and not, by itself, a red flag.

What to consider before installing

Do not run or copy any scripts referenced by this SKILL.md until you can verify their origin. Questions to resolve before installing: (1) Where is the 'scripts/toon' file or a trusted install command (for example, an npx or npm package URL)? (2) Is @toon-format/cli published on npm or hosted on a verifiable GitHub repo you can review? (3) Can the author provide a source repository or a signed release? If you decide to install, prefer obtaining the CLI from the official npm/GitHub releases, inspect the script contents before executing, and avoid running opaque copy/paste commands from unknown servers.

TOON Context Compression

Pipe any command output through toon to compress JSON and save ~40% tokens.

Usage

# API responses
curl -s "https://api.example.com/data" | toon

# JSON files  
cat data.json | toon

# Any command - safe on non-JSON (passes through unchanged)
some_command | toon

Install

# Copy script to PATH
cp scripts/toon ~/.local/bin/
chmod +x ~/.local/bin/toon

Requires: npx (Node.js)

Example

[{"id":1,"name":"Alice"},{"id":2,"name":"Bob"}]

→

[2]{id,name}:
  1,Alice
  2,Bob

When to Use

• Always when fetching JSON APIs
• Always when reading JSON files into context
• Safe to use on any output — non-JSON passes through

Reference

• Format spec: https://toonformat.dev
• CLI: @toon-format/cli