Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ai-ecoverse/slicc --skill transcript-exportgit clone --depth 1 https://github.com/ai-ecoverse/sliccWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ai-ecoverse/slicc/transcript-export)<a href="https://agentmods.dev/skills/ai-ecoverse/slicc/transcript-export"><img src="https://agentmods.dev/badge/skills/ai-ecoverse/slicc/transcript-export/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ai-ecoverse/slicc/transcript-export"><img src="https://agentmods.dev/badge/skills/ai-ecoverse/slicc/transcript-export.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Prompt Injection · line 81 Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.Fix: Remove the large whitespace padding (blank-line blocks or long space runs) and review any content hidden below or to the right of it. Keep skill files compact and reviewable so no instructions can be
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00124 | $0.01875 |
| Opus 5.5 | $0.00050 | $0.00750 |
| Sonnet 5.5 | $0.00025 | $0.00375 |
| Haiku 4.5 | $0.00012 | $0.00187 |
Grade C, and why
transcript-export scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
- Credential-like files (`.env*`, `*.pem`, `.git-credentials`, `.npmrc`, How it starts
The opening of the file, as written. The whole thing — 188 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Transcript Export
The session export command packages the current (or a named archived)
session into a signed, redacted ZIP bundle and writes it to the VFS.
Syntax
# Export the active session (default output path):
session export
# Export to a specific VFS path:
session export --output /workspace/my-session.zip
# Export a frozen (archived) session by its ID:
session export --id <frozen-session-id>
# Export a frozen session to a custom path:
session export --id <session-id> --output /workspace/archive.zip
The default output path is /workspace/slicc-transcript-<session-id>.zip.
Moving to SLICC 7 — export-profile
SLICC 7 lives at seven.sliccy.ai. To move this whole profile there, run
export-profile, or point the user to Settings → Export for SLICC 7….
Both save slicc6-profile-<date>.zip to the browser's Downloads (a profile
over 2 GiB or 60,000 files becomes one zip per cone). The user then imports
it in SLICC 7's Freezer (Import from SLICC 6…).
export-profile --dry-run # what would move, nothing saved
export-profile # opens the export dialog; the user confirms, then it saves
export-profile never saves on its own: it opens the Export for SLICC 7
dialog in the SLICC tab, and the user has to click Export there. Tell
them to look at the tab. Afterwards, tell them the two notes it prints:
- API keys and logins do not move. They enter them again in SLICC 7's Settings, for the providers listed.
- Credential-like files (
.env*,*.pem,.git-credentials,.npmrc,.slicc/oauth/*) are in the zip in the clear, as listed.
secrets.env, the GitHub token, MCP tokens and /mnt mounts never move.
Each origin (sliccy.ai, the CLI, the extension) is its own profile, so the
export runs once in each.
Memory v2 — search then read (feature flag)
When the memory-v2 flag is on (Settings → Experimental, or a central
override), session also exposes keyword search over /sessions archives
and every scoop session snapshot (/scoops/<folder>/sessions/<jid>/), so a
dropped scoop's transcript is still findable. Prefer this over rg / cat
on archives: legacy markdown embeds the whole session JSON on one line, so
grep counts and line dumps are misleading.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +28 lines · +32 tokens per session scan A → C 2a7d7e612cd1
- 1mo ago Changed · +28 lines · +23 tokens per session cd7330ce868a
- 1mo ago First seen · 132 lines · 69 tokens per session scan A 3e9add2cb9b8
transcript-export is a skill published in the GitHub repository ai-ecoverse/slicc (34 stars, last pushed 2d ago), licensed Apache-2.0. It adds 124 tokens to every session and 1,875 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it C with 1 finding (reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
gog-workspace
Use the gog CLI for Google Workspace tasks across Gmail, Calendar, Drive, Docs, Sheets, Contacts, and related services. Use when the user asks to check email, search Gmail, inspect calendar events, find Drive files, read Docs or Sheets, or manage Google Workspace data through gog.
Manipulate PDF files — merge, split, extract pages/text, PDF↔images, OCR, info — via the qpdf / poppler / ocrmypdf CLIs. Use to combine, slice, convert, or OCR PDFs.
pandoc
Convert documents between formats (Markdown, DOCX, HTML, PDF, RST, EPUB, LaTeX) via the pandoc CLI. Use to transform a document from one format to another.
xlsx
Create and edit Excel .xlsx workbooks (sheets, cells, formulas, formatting) via Python openpyxl. Use to generate spreadsheets or write/update cells. Reading is via os.fs.readdocument.
article-exporter
Export any web article to a local Obsidian-ready Markdown directory. Fetches page content via actionbook CLI, downloads images locally, rewrites image references to relative paths, and optionally translates the article using AI. Produces a self-contained folder with README.md, images/, and an index.md navigation file.
excel-spreadsheets
Create, modify, and manage Excel spreadsheets.