Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add aaronjmars/aeon-agent --skill send-emailgit clone --depth 1 https://github.com/aaronjmars/aeon-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aaronjmars/aeon-agent/send-email)<a href="https://agentmods.dev/skills/aaronjmars/aeon-agent/send-email"><img src="https://agentmods.dev/badge/skills/aaronjmars/aeon-agent/send-email/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aaronjmars/aeon-agent/send-email"><img src="https://agentmods.dev/badge/skills/aaronjmars/aeon-agent/send-email.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.03407 |
| Opus 5.5 | $0.00016 | $0.01363 |
| Sonnet 5.5 | $0.00008 | $0.00681 |
| Haiku 4.5 | $0.00004 | $0.00341 |
Grade A, and why
send-email scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to send-email — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 135 lines — stays where its author put it; the contents beside it link to each section on GitHub.
${var} — who to email and why, e.g.
[email protected] | subject=Intro | about=propose a 20-min call on X. Freeform also works ("email [email protected] to follow up on yesterday's demo").cc=is optional. The reply-shaperevise:<instruction>(Telegram force-reply, e.g.revise:make it warmer) refines the last composed draft for review only — it never sends.
Read soul/ (for voice) and memory/MEMORY.md (for context) before composing.
What this does
Composes a single, purposeful email and sends it in-run via Resend (./secretcurl), gated by the shared send caps + kill-switch and logged to the shared ledger memory/email-log.json. The send is irreversible, so it's the skill's final action, behind a set of fail-closed checks (see "Send (in-run)" below): a skipped or failed check means do not send, never send anyway. This is the general-purpose sibling of vuln-scanner's disclose arm (Arm C, var=disclose) — same caps + audit CC, any recipient and purpose instead of only vuln maintainers.
This is not a bulk or cold-outreach tool. One deliberate recipient per run, with a genuine reason to write. If the request reads as mass-mailing, list-blasting, or spam, refuse and log SEND_EMAIL_REFUSED: not a 1:1 purposeful email.
Steps
Revise intercept (Telegram force-reply — re-stage for review only, NEVER auto-send)
Before anything else, if ${var} starts with revise:, the operator replied to a "refine this email?" prompt. Handle it here and end the run — the normal compose/send flow below does NOT run, and nothing is ever sent:
- Strip the prefix. The instruction is
${var#revise:}(keep any inner colons), e.g.make it warmer,shorten to 3 lines,drop the meeting ask. - Load the last draft from
memory/drafts/send-email-latest.md(the review copy the normal run saves in step 4). If it's missing or empty, there's nothing to refine: send./notify "Nothing to revise yet — compose an email first, then reply here to refine it."and end the run. - Regenerate the email applying the instruction — re-read
soul/for voice; keep the same recipient / cc / subject unless the instruction changes them; keep the body as the exact send-ready text (operator-only notes stay out). - Re-stage for REVIEW ONLY. Overwrite
memory/drafts/send-email-latest.mdwith the revised draft. Do NOT run the Send step. Arevise:reply never sends — the operator confirms a real send by invoking send-email normally (which re-composes and sends in-run). - Notify the operator with the full revised draft for review — multi-line ⇒
./notify -f <file>:revised draft (not sent) → <to>: <subject> <body> - Re-offer a further revision (the operator is iterating — skip the daily dedup guard here):
./notify "Want another pass? Reply with a change and I'll revise the draft again (still won't send)." \ --force-reply --placeholder "e.g. make it warmer" \ --context "send-email::revise" - Log
- SEND_EMAIL_REVISED (draft re-staged for review, not sent)under a### send-emailheading inmemory/logs/${today}.md, then end the run.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 17d ago Changed f959fd69340f
- 18d ago Changed a70138d1a268
- 1mo ago Changed · +2 lines da2ac8b88d22
- 1mo ago First seen · 133 lines · 39 tokens per session scan A 67d4c34d7fcd
send-email is a skill published in the GitHub repository aaronjmars/aeon-agent (12 stars, last pushed 8d ago), licensed MIT. It adds 39 tokens to every session and 3,407 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 100% identical to send-email, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
strategy-spec
Generates a backtestable, regime-gated mean-reversion TRADING STRATEGY SPEC for a BSC / PancakeSwap token using CoinMarketCap x402 DEX data — and decides what data is even worth paying for first (honest free-vs-paid routing). Produces rules + parameters + a 180-day backtest with a buy-and-hold benchmark. A strategy…
agentpay-route
Find, judge, and pay for the best paid x402 tool/API for a need, within a budget. Use when the agent needs a capability behind a paid API and must choose a provider: "which x402 service / paid API for X", "find a tool for X under $Y", comparing providers, avoiding overpriced or fake/stub endpoints, or routing agent…
agentpay-session
Cap and receipt an AI agent's spending. Open a budget-capped AgentPay session so paid tool/API calls stay under a hard USDC limit and each produces a verifiable receipt + a running ledger. Use when enforcing a spend cap across calls, tracking what an agent spent, or producing an audit trail for autonomous payments.…
aawp
AAWP (AI Agent Wallet Protocol) — the only crypto wallet protocol built exclusively for AI Agents on EVM-compatible blockchains and Solana. Not for humans. The signer is the AI Agent itself, cryptographically bound at wallet creation. Supports wallet lifecycle management, token transfers, DEX swaps, cross-chain…
agent-user-tools
Agent skill for user-tools - invoke with $agent-user-tools.
agentmail
Use your assigned AgentMail inbox to read email tasks, explicitly send or reply, and check delivery. Provided automatically by your inbox assignment.