Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add aeoess/agent-passport-system --skill agent-passportgit clone --depth 1 https://github.com/aeoess/agent-passport-systemWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aeoess/agent-passport-system/agent-passport)<a href="https://agentmods.dev/skills/aeoess/agent-passport-system/agent-passport"><img src="https://agentmods.dev/badge/skills/aeoess/agent-passport-system/agent-passport/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aeoess/agent-passport-system/agent-passport"><img src="https://agentmods.dev/badge/skills/aeoess/agent-passport-system/agent-passport.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 58 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 99 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 68 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 76 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 84 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 92 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00338 | $0.02665 |
| Opus 5.5 | $0.00135 | $0.01066 |
| Sonnet 5.5 | $0.00068 | $0.00533 |
| Haiku 4.5 | $0.00034 | $0.00266 |
Grade A, and why
agent-passport-system scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 216 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Passport System
When to use this skill
- Agent needs cryptographic identity (Ed25519 passport)
- Delegate authority between agents with scope, spend limits, depth controls
- Revoke access: one call kills all downstream delegations
- Run agent commerce with 5-gate checkout (passport, delegation, merchant, spend)
- Coordinate multi-agent tasks (assign, evidence, review, deliver)
- Track data contributions with Merkle proofs
- Encrypt agent-to-agent communication (E2E, forward secrecy)
- Score agent trust (Bayesian reputation, passport grades 0-3)
- Enforce values compliance (8 principles, graduated enforcement)
- Found institutions with charters, offices, approval policies
Install
npm install agent-passport-system # SDK: /core subpath is the curated default
npm install agent-passport-system-mcp # MCP server: APS_PROFILE=essential is the default
go get github.com/aeoess/[email protected] # Go SDK, byte-parity subset (passport, delegation, attribution, completion, in-toto, values)
pip install agent-passport-system==4.0.0 # Python SDK
cargo add [email protected] # Rust SDK, library crate agent_passport
Minimal SDK import (lead with the curated essentials):
import {
createPassport, createDelegation,
evaluateIntent, commercePreflight, generateKeyPair
} from 'agent-passport-system/core'
Minimal MCP install (essential profile is the default; APS_PROFILE=full for all 152 tools):
npx agent-passport-system-mcp
Remote MCP (zero install): https://mcp.aeoess.com/sse
Core workflow
1. Create identity → returns passport + keypair
npx agent-passport join --name my-agent --owner alice
Output: .passport/agent.json with Ed25519 keypair, signed passport, values attestation. Treat like an SSH key.
2. Delegate authority → returns signed delegation
npx agent-passport delegate --to <publicKey> --scope web_search,commerce --limit 500 --depth 1 --hours 24
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed a95c2c0b2a8d
- 1mo ago Changed · +9 tokens per session cbf347ecc051
- 1mo ago Changed · +38 tokens per session 770228b8e43f
- 2mo ago Changed · +4 lines b39e24f2c203
- 2mo ago First seen · 212 lines · 291 tokens per session scan A bce70adc79fa
agent-passport-system is a skill published in the GitHub repository aeoess/agent-passport-system (46 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 338 tokens to every session and 2,665 once invoked, about $0.0014 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
delegated-authority
Ask the network whether you may run a tool before you run it. Answers from the delegation grant your controller signed — the parties you may act as, the commands you may use, the caps you may spend under, and the actions your oversight claim parks for a human. Covers permit / require-approval / deny handling and the…
identity-aiops
Use this skill whenever the user needs to operate a Keycloak or authentik identity provider — a one-shot overview, realm settings, users with sessions/credentials/groups/lockout status, authentication and admin events, OAuth/OIDC clients, four flagship RCAs (login-failure/lockout-storm, stale access, client…
Azure Identity Design
Entra ID, managed identity, and workload identity federation design for Azure — when to use which, and how to avoid long-lived service-principal secrets.
GCP Identity Design
IAM roles, service accounts, and identity federation design for GCP — when to use which, and how to avoid long-lived service-account keys.
AWS Identity Design
IAM roles, policies, and identity federation design for AWS — when to use which, and how to avoid long-lived access keys.
live-neon-persona
Manage AI agent identities on the Live Neon platform — fetch identity, sync content, run discovery, review beliefs, build prompts.