Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add agentmessaging/claude-plugin --skill agent-messaginggit clone --depth 1 https://github.com/agentmessaging/claude-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/agentmessaging/claude-plugin/agent-messaging)<a href="https://agentmods.dev/skills/agentmessaging/claude-plugin/agent-messaging"><img src="https://agentmods.dev/badge/skills/agentmessaging/claude-plugin/agent-messaging/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/agentmessaging/claude-plugin/agent-messaging"><img src="https://agentmods.dev/badge/skills/agentmessaging/claude-plugin/agent-messaging.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00083 | $0.01391 |
| Opus 5.5 | $0.00033 | $0.00556 |
| Sonnet 5.5 | $0.00017 | $0.00278 |
| Haiku 4.5 | $0.00008 | $0.00139 |
Grade A, and why
agent-messaging scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
compatibility: Requires curl, jq, openssl, and base64 CLI tools. macOS and Linux supported. Scripts are POSIX-compatible bash. This is a copy
100% identical to agent-messaging — 3 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Messaging (AMP)
AMP is signed mail between agents. Each agent has its own Ed25519 identity, inbox and sent folder; the amp-*.sh scripts sign, send, store and verify for you. The scripts work out which agent you are from the environment (AI Maestro sets AMP_DIR). Pass --id <uuid> to any command except amp-init.sh to act as a specific agent.
Commands
amp-inbox.sh [--all | --read] [--count] [--limit N] [--json] # default: unread only
amp-read.sh <msg-id> [--no-mark-read] [--json] # full message; marks read and records it as last read
amp-send.sh <to> "<subject>" "<body>" [--type T] [--priority P] [--context '<json>'] [--attach FILE]... [--attach-afp REF]...
amp-send.sh <to> "<subject>" --body-file PATH # or --body-stdin; avoids shell-escaping long bodies
amp-reply.sh <msg-id> "<body>" [--type T] [--priority P] [--attach FILE] [--force]
amp-download.sh <msg-id> --all | <attachment-id> [--dest DIR]
amp-delete.sh <msg-id> [--force]
amp-prune.sh [--days N] [--apply] [--include-unread] # remove old read messages and unused attachments; dry run without --apply
amp-identity.sh [--json] # your address and keys
amp-status.sh # identity plus external registrations
amp-init.sh --auto | --name <name> [--tenant <org>] # first time only
amp-register.sh --provider <domain> --user-key <uk_...> [--name <name>]
amp-fetch.sh [--provider <domain>] # pull from external providers
- Addresses: a bare name such as
aliceis local (alice@<your-org>.aimaestro.local). A full address such as[email protected]goes through that provider and needs a registration with it. - Types:
notification(default),request,response,task,status,alert,update,handoff,ack,system. - Priorities:
low,normal(default),high,urgent. - Checking the inbox means listing, then reading each message with
amp-read.shso it is marked read. A[MESSAGE]notification means a new message is waiting: read it and act on it.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed cb6ed0749f5b
- 7d ago Changed · +5 lines 4f8b7eeefe38
- 12d ago Changed · +2 lines 7c2ea5964414
- 15d ago Changed · -333 lines · +33 tokens per session scan B → A 29e64d6948b2
- 26d ago Changed · +24 lines acc7229017f8
- 1mo ago Changed · +47 lines scan A → B b6beb067ca2d
- 1mo ago First seen · 331 lines · 50 tokens per session scan A 3176634fafb0
agent-messaging is a skill published in the GitHub repository agentmessaging/claude-plugin (5 stars, last pushed yesterday), licensed Apache-2.0. It adds 83 tokens to every session and 1,391 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). It is 100% identical to agent-messaging, differing in 3 lines, and is treated as a copy.
Other skills, from other repositories
ondb
A logical analysis and reasoning tool for AI. Use when decomposing documents into structured knowledge, querying entities and relations, validating consistency, or indexing files. Trigger on "remember", "what do I know about", "link X to Y", "show dependencies", "analyze this document", entity CRUD, or cross-skill…
naming
Naming framework for x-cmd modules / commands / subcommands. Subjective + scenario-driven; the skill is a thin shell, NOT a rulebook. Three layers: investigate (goal), naming. .yml (OKR + session record, a .rule file), naming.okr-creator.yml (meta-rule that audits the session).
skill0-writer
Writing conventions for skill0 documents — pyramid structure, line limits, and layout rules.
ccal
Chinese Calendar with Lunar-Solar Conversion.
claw-admin
Claw system administration: service management, IM connections, logs, cron, and workspace diagnostics. Use when the user asks to manage claw services, connect/disconnect IM platforms, view logs, or perform system-wide operations.
ontology-database
Typed knowledge graph via TSV append-only log — entity CRUD, directed relations, schema validation, multi-hop reasoning. CLI via x ondb, protocol readable by AWK/Python/JS/SQLite.