Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/modelstudioai/cli/install-doc-changegit clone --depth 1 https://github.com/modelstudioai/cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00553 |
| Opus 5 | $0.00000 | $0.00277 |
| Sonnet 5 | $0.00000 | $0.00111 |
| Haiku 4.5 | $0.00000 | $0.00055 |
Grade A, and why
install-doc-change scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -L -s "https://bailian.aliyun.com/cli/install.md?verify=$(date +%s)" What it actually says
安装文档变更
触发条件
- 修改根目录
INSTALL.md的安装、鉴权或验证流程 - 修改发布包 Node.js 要求、全局 flag 或安装文档引用的命令
- 同步或发布
https://bailian.aliyun.com/cli/install.md
必查清单
A. CLI 契约
-
INSTALL.md中的bl命令路径存在于packages/cli/src/commands.ts - 示例 flag 属于
GLOBAL_FLAGS、命令鉴权域 flag 或命令自身flags - Node.js 用户安装要求与
packages/cli/package.json的engines.node一致，不使用根package.json的开发环境要求 - 鉴权流程与
packages/commands/src/commands/auth/的实际校验、保存和 Profile 激活行为一致
B. 静态副本
- 将
INSTALL.md同步到bailian-cli-static-resources/public/install.txt - 使用
cmp -s确认两份文档逐字节一致 - 静态资源仓库单独创建分支、提交和发布，不把跨仓库改动遗漏在 CLI PR 之外
C. 线上验证
- 发布后读取
https://bailian.aliyun.com/cli/install.md，确认内容来自最新静态副本 - 带随机 query 参数复查，区分 CDN 缓存与源站未更新
- 验证线上文档中的安装命令、Node.js 要求和配置验证段落，不只检查页面可访问
完成后自查
pnpm -F bailian-cli test -- tests/install-doc.test.ts
cmp -s INSTALL.md ../bailian-cli-static-resources/public/install.txt
curl -L -s "https://bailian.aliyun.com/cli/install.md?verify=$(date +%s)"
常见漏点
--non-interactive已从 CLI 移除，但旧安装文档和静态副本仍把它当作全局 flag- 根
package.json是开发工具链 Node.js 要求；用户安装要求以packages/cli/package.json为准 - 静态仓库文件名是
public/install.txt，线上稳定地址是/cli/install.md；只更新其中一侧不会自动证明发布成功
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 43 lines · 0 tokens per session scan A 31d40c93f2fc
install-doc-change is an agent published in the GitHub repository modelstudioai/cli (320 stars, last pushed 4d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 553 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
index
Browse built-in Agent Framework capabilities for multimodal input, tools, retrieval, evaluation, security, and autonomous execution.
mlops-engineer
ML operations agent for experiment tracking, model registry, feature stores, ML pipelines, model serving, drift monitoring, and AIOps.
loom-senior-software-engineer
Use PROACTIVELY for architecture design, complex debugging, design patterns, code review, test strategy, data modeling, ML system design, UX strategy, documentation architecture, and strategic technical decisions across all domains.
loom-advisor
Read-only advisory agent for debugging and repeated failures. Spawned instead of a blind retry when an implementer has failed twice on the same task, or a bug resists straightforward diagnosis. Returns a root-cause diagnosis plus one concrete next step.
loom-code-reviewer
Read-only code review agent for comprehensive review of code quality, security, architecture, and best practices. Cannot modify files.
integrity-check
Detect adversarial content in .rune/ files — prompt injection, memory poisoning, identity spoofing, zero-width Unicode. Verdict: CLEAN/SUSPICIOUS/TAINTED.