Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add airwallex/airwallex-marketplace --skill manage-cashflowgit clone --depth 1 https://github.com/airwallex/airwallex-marketplaceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/airwallex/airwallex-marketplace/manage-cashflow)<a href="https://agentmods.dev/skills/airwallex/airwallex-marketplace/manage-cashflow"><img src="https://agentmods.dev/badge/skills/airwallex/airwallex-marketplace/manage-cashflow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/airwallex/airwallex-marketplace/manage-cashflow"><img src="https://agentmods.dev/badge/skills/airwallex/airwallex-marketplace/manage-cashflow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00147 | $0.09486 |
| Opus 5 | $0.00073 | $0.04743 |
| Sonnet 5 | $0.00029 | $0.01897 |
| Haiku 4.5 | $0.00015 | $0.00949 |
Grade A, and why
manage-cashflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 390 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Manage Cashflow
HARD GATE — money movement requests (overrides everything below)
This gate fires BEFORE anything else — before reading attachments, before checking auth, before loading schemas, before any API call.
If the user's message contains money-movement intent — convert funds, wire money, transfer, pay a supplier, send money, move funds, lock a rate, execute an FX conversion — apply this gate immediately:
-
Your very first token must begin the refusal. No preamble, no softener. Banned openers (never start with any of these): "Sure", "I can help with that", "Let me look into this", "I understand", "Let me check", "I can help with transfers", "I can create a transfer", "I can lock the rate", "Let me help you lock them in", "I can execute the conversion", "I'd be happy to help with that." Template (conversions/transfers/payments):
I can't execute [FX conversions / wire transfers / payments] through this tool — that needs to be done in the Airwallex Dashboard.Template (rate locking):Rate locking isn't available — not through this tool and not on the Airwallex Dashboard. The Airwallex Dashboard supports executing conversions at the prevailing market rate, but there's no way to reserve or guarantee a rate. -
Before that refusal sentence, do NOT (zero tolerance — any of these before the refusal = failure):
- call the Read tool on any attachment or file
- call ANY tool at all (no Bash, no Read, no Search — nothing)
- ask clarifying questions
- check authentication or environment
- fetch balances, invoices, FX rates, or any data
- request beneficiary or bank-account details
- imply that execution would be possible if more information were provided Even if the user's message ALSO contains an attachment or an analytical ask, refuse first, then decide whether to proceed with the non-execution part.
-
After refusing, you may only:
- For conversions/transfers/payments: redirect the user to the Airwallex Dashboard for execution.
- For rate locking: do not redirect to the Airwallex Dashboard (locking doesn't exist there either). Instead, explain that the Airwallex Dashboard supports executing conversions at the prevailing market rate — no reservation or guarantee.
- Optionally provide non-execution help (indicative rate context, position impact) — but frame it as informational, not as a step toward execution. Say "I can show you the current indicative rate for reference" — NOT "I can help you understand what the conversion would look like" or "Want me to analyze the impact?" Phrasing that sounds like preparation for execution implies the action is feasible through this channel.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · -1 lines 6d32eebeef0f
- 12d ago First seen · 391 lines · 147 tokens per session scan A 628bf0e2b712
manage-cashflow is a skill published in the GitHub repository airwallex/airwallex-marketplace (5 stars, last pushed yesterday), licensed Apache-2.0. It adds 147 tokens to every session and 9,486 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
consult-startup
A step-by-step startup planning aid covering an idea, its market, business model, investor presentation, finances, and execution plan.
finance-investor-relations
An investor-relations tool for preparing pitch decks and three-year financial models for fundraising. An IR, or investor-relations, deck explains a company to potential investors, while the model covers sales, profit, cash flow, and valuation.
consult-gov-grant
A guide to Korean government and public-sector funding programmes for applicants such as founders, small businesses, companies, researchers, nonprofits, and individuals. It can help find suitable programmes and prepare application documents.
finance-tax-helper
A Korean tax guide for freelancers, employees, and businesses. It explains withholding tax, income tax, value-added tax, and filing steps through HomeTax, Korea’s online tax service.
finance-close-management
A guide for monthly, quarterly, and annual accounting close, meaning the work of finalizing records for a reporting period. It covers closing checklists, payroll and social-insurance reconciliation, tax dates, and K-IFRS closing entries.
finance-financial-statements
A financial-reporting assistant for preparing statements under K-IFRS, the Korean version of international financial reporting standards. It covers the balance sheet, income statement, cash-flow statement, statement of changes in equity, notes, and financial-ratio analysis.