Borrowing it
Nothing to install: this file belongs to agno-agi/agentos-docker. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/agno-agi/agentos-docker/main/.agents/skills/extend-agent/SKILL.mdgit clone --depth 1 https://github.com/agno-agi/agentos-dockerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/agno-agi/agentos-docker/extend-agent)<a href="https://agentmods.dev/skills/agno-agi/agentos-docker/extend-agent"><img src="https://agentmods.dev/badge/skills/agno-agi/agentos-docker/extend-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/agno-agi/agentos-docker/extend-agent"><img src="https://agentmods.dev/badge/skills/agno-agi/agentos-docker/extend-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00114 | $0.02475 |
| Opus 5.5 | $0.00046 | $0.00990 |
| Sonnet 5.5 | $0.00023 | $0.00495 |
| Haiku 4.5 | $0.00011 | $0.00248 |
Grade A, and why
extend-agent scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s http://localhost:8000/agents | jq -r '.[] | "\(.id)\tis_component=\(.is_component)"' Copies of this mod
2 near-identical copies found in the catalogue:
- extend-agent — 100% identical, 0 lines differ
- extend-agent — 100% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 145 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Extend an Agent
Coding-agent workflow: run as
/extend-agentor by describing the task.
Implement the concrete requested change and verify the affected behavior. Use improve for broader agent hardening when requested; a narrow change does not require a separate hardening campaign.
0. Select the development runtime
Read AGENTS.md and inspect git status. Use the runtime already serving this checkout;
do not switch modes or start a second API on port 8000.
- Compose API: confirm its bind mount points to this checkout. Run Python with
docker compose exec -T agentos-api python; inspectdocker compose logs agentos-api. If setup is needed, follow setup-platform. - Existing host API: reuse its startup command; local sandbox setup now uses Compose.
Confirm the process's working directory and startup environment. Run Python with
.venv/bin/pythonand the same.env/runtime/DB settings as that process; useuv run --no-project --env-file .env .venv/bin/pythonwhen loading the env file. Keep the API in a persistent terminal and inspect that process's log. No API container or container bind mount is required in this mode.
Check /health at the configured endpoint with its existing authentication. If unavailable,
diagnose the selected runtime rather than assuming Compose is required. Use a bounded startup
wait and inspect logs on failure. For MCP checks use scripts/mcp_check.sh with Compose or
MCP_CHECK_HOST=1 ./scripts/mcp_check.sh with the host API.
Infer the target from the request and registrations; ask for its ID only if ambiguous.
1. Read the agent
Confirm the slug is code, not a Studio-built component:
curl -s http://localhost:8000/agents | jq -r '.[] | "\(.id)\tis_component=\(.is_component)"'
is_component=true has no source file — route the change through OS Manager (edit_agent / edit_team / edit_workflow, then publish_component). Never create agents/<slug>.py under that id: code wins on resolution and silently shadows the built component.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed e17065a584b9
- 3d ago Changed · +5 lines · -3 tokens per session 7e91518c155f
- 6d ago Changed · +27 lines · +3 tokens per session scan B → A 3feec842db7c
- 2mo ago First seen · 113 lines · 114 tokens per session scan B 149dbec12b67
extend-agent is a skill published in the GitHub repository agno-agi/agentos-docker (14 stars, last pushed today), licensed Apache-2.0. It adds 114 tokens to every session and 2,475 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
pkf-writing
Author, update, convert, validate, persist, and render PKF (.pkf) content through message-inline, Library Asset, or Memory Page carriers. Use for structured reports, knowledge pages, delivery cards, or any .pkf body. NOT for recall, memory-graph placement, or curation decisions — those belong to the memory skill.
prismer-python-debugpy
Debug Python: pdb REPL + debugpy remote (DAP).
memory-import
Bulk-import an external knowledge base into Prismer memory via the three-layer import pipeline (07 §3.1). Use when the user asks to import/migrate documents, a knowledge base, or notes into workspace memory. Layer 1 lands raw documents (zero LLM, instantly searchable); Layer 2 is YOUR distillation work — you read the…
cli-creator
Build a composable CLI for Codex from API docs, an OpenAPI spec, existing curl examples, an SDK, a web app, an admin tool, or a local script. Use when the user wants Codex to create a command-line tool that can run from any repo, expose composable read/write commands, return stable JSON, manage auth, and pair with a…
sora-taira-testnet
Work against the SORA Taira testnet through its deployed Torii MCP endpoint for live account, asset, alias, contract, governance, Musubi package-registry, and transaction workflows. Use when Codex needs to inspect or mutate the Taira testnet, verify or add https://taira.sora.org/v1/mcp, prefer the curated iroha. tool…
conventions
Spring Boot project conventions and mandatory rules. Auto-loads when working with Spring Boot, Java, or Maven projects. Enforces No-Lombok, constructor injection, RestClient, Flyway for relational databases, Problem Details errors, and other standards; adds OpenAPI contract rules when the API is built for a UI.