Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/agentmessaging/claude-plugin/amp-downloadgit clone --depth 1 https://github.com/agentmessaging/claude-pluginWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00521 |
| Opus 5 | $0.00000 | $0.00260 |
| Sonnet 5 | $0.00000 | $0.00104 |
| Haiku 4.5 | $0.00000 | $0.00052 |
Grade A, and why
amp-download scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/amp-download
Download attachments from a message.
Usage
/amp-download <message-id> [attachment-id|--all] [options]
Arguments
message-id- The message ID (from amp-inbox or amp-read)attachment-id- Specific attachment ID to download (optional if using --all)
Options
--all- Download all attachments from the message--dest, -d DIR- Destination directory (default: ~/.agent-messaging/attachments//)--sent, -s- Download from sent folder instead of inbox--help, -h- Show this help
Examples
Download all attachments
/amp-download msg_1706648400_abc123 --all
Download a specific attachment
/amp-download msg_1706648400_abc123 att_1706648400_def456
Download to a custom directory
/amp-download msg_1706648400_abc123 --all --dest ~/Downloads
Download from sent folder
/amp-download msg_1706648400_abc123 --all --sent
Implementation
When this command is invoked, execute:
scripts/amp-download.sh "$@"
Output
Downloading 2 attachment(s) from msg_1706648400_abc123...
✅ Saved: /path/to/attachments/design-mockups.pdf
✅ Saved: /path/to/attachments/meeting-notes.txt
Download directory: /path/to/attachments/
Security
- All downloads are verified against SHA-256 digests
- Files with
rejectedscan status are automatically skipped - Download directories are created with
0700permissions - Filenames are sanitized to prevent path traversal
Errors
No attachments:
No attachments found in message msg_1706648400_abc123
Attachment not found:
Error: Attachment 'att_xxx' not found in message msg_1706648400_abc123
Available attachments:
att_1706648400_def456 design-mockups.pdf
att_1706648400_ghi789 meeting-notes.txt
Digest mismatch:
Error: Digest mismatch! Expected sha256:abc..., got sha256:def...
The file may have been tampered with.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 96 lines · 0 tokens per session scan A cad9edabde22
amp-download is a command published in the GitHub repository agentmessaging/claude-plugin (5 stars, last pushed 15d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 521 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
delete-session
安全浏览、回收和恢复 Claude Code 历史会话.
init-preferences
Interactive wizard to configure user preferences for command defaults and behavior.
tmux-project
Open (or reuse) a project workspace session — server / agent / editor.
inbox
Разобрать входящие из workbot. ВАЖНО: только чтение — НЕ меняй inbox.log и файлы вложений, ничего не удаляй и не выполняй без явного указания.
go
Старт сессии. Опциональный аргумент — номер проекта. Аргумент: $ARGUMENTS.
sidebar
Sidebar for current conversation - fork the current conversation into a new tmux pane.