Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Aicoo-Team/AICOO-Skills --skill compile-identitygit clone --depth 1 https://github.com/Aicoo-Team/AICOO-SkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aicoo-team/aicoo-skills/compile-identity)<a href="https://agentmods.dev/skills/aicoo-team/aicoo-skills/compile-identity"><img src="https://agentmods.dev/badge/skills/aicoo-team/aicoo-skills/compile-identity/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aicoo-team/aicoo-skills/compile-identity"><img src="https://agentmods.dev/badge/skills/aicoo-team/aicoo-skills/compile-identity.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Data Exfiltration · line 123 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Output Handling · line 165 Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing.Fix: Set explicit limits on output length, generation count, and rate. Use max_tokens and truncation to prevent unbounded output.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00118 | $0.02230 |
| Opus 5 | $0.00059 | $0.01115 |
| Sonnet 5 | $0.00024 | $0.00446 |
| Haiku 4.5 | $0.00012 | $0.00223 |
Grade A, and why
compile-identity scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -X POST https://www.aicoo.io/api/v1/accumulate \ How it starts
The opening of the file, as written. The whole thing — 180 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Compile Identity
Turn a working session into a folder another agent can read and act on.
When this is worth doing — read this first
Measured on a 63-hour session, 100 pre-registered questions, blind-graded:
| Reader | raw transcript only | + compiled layer | Δ |
|---|---|---|---|
| Opus 5 / Sonnet 5 / Fable 5 (fetches and parses the page itself) | 95–96 | 95–100 | +0 to +4 |
| Aicoo guest agent behind the share link | 16 | 59 | +43 |
A capable agent handed the raw transcript does not need this. It scores 96/100 without any compilation, and the compiled layer buys ~2 points that do not reach significance (19 divergences pooled across three models, 13–6, sign test p = 0.17).
Compile when the reader is weak, when the reader cannot hold the whole transcript, or when you need the positions to survive without the reasoning that produced them. Do not compile because it feels thorough. Export, share the link, and stop — that is the default.
Prerequisite: AICOO_API_KEY in the environment. Reference the variable — never
paste the literal key into a command, because tool inputs are exported verbatim.
Step 1 — Export the session
The exporter ships with this skill at assets/export/session-export.mjs. Resolve its
real path from wherever the pack is installed — do not hardcode a plugin directory.
node "$(dirname "$(find ~ -path '*aicoo*/assets/export/session-export.mjs' 2>/dev/null | head -1)")/session-export.mjs" \
--layout episodes --folder "Agents/<name>"
If you only want the transcript shared and nothing compiled, stop after this step — the export alone scores 96/100 with a capable reader, and steps 2–4 are what the remaining 4 points cost.
Episodes, not one note: one file per user turn plus a CHATS.md index. Tool inputs and
outputs go in whole — a reader that cannot see the actual command and its actual output
cannot verify anything the transcript claims. Nothing is redacted; the folder you put it
in is the access control. Keep secrets out of the transcript by referencing
$AICOO_API_KEY, never by pasting the literal.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 180 lines · 118 tokens per session scan A 9d306b2a7d92
compile-identity is a skill published in the GitHub repository Aicoo-Team/AICOO-Skills (35 stars, last pushed 1mo ago), licensed MIT. It adds 118 tokens to every session and 2,230 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
persistent-notes
Save notes locally to /mnt/workspace/notes.json file. Use when user wants to "save a note" or "remember something".
memmachine-memory
Use when an agent or model needs durable project, user, or session context from MemMachine, needs to save information to MemMachine memory, has requests involving mem-cli, memmachine, or memmachineclient, has insufficient conversation context, or is tempted to search local files for prior context that should come from…
update-setup
A one-time setup wizard for creating a personalised upgrade guide for a workspace. It checks for an existing guide, identifies the current version and installation clues, and requires confirmation of the installation method before writing a new guide.
skill-creator
Create, edit, improve, tidy, review, audit, or restructure memmy-agent skills and SKILL.md files.
memmy-memory
Use the shared Memmy memory service to retrieve relevant prior context and persist durable Agent turns, facts, decisions, preferences, procedures, and follow-ups.
session-summaries
What the chat right-panel session summary shows, what it costs, and how to make a session summarize well. Load when the user asks about the session summary panel, why a summary looks wrong or empty, or how to turn it on.