Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/alibaba/anolisa/sysom-agentsightnpx skills add alibaba/anolisa --skill sysom-agentsightgit clone --depth 1 https://github.com/alibaba/anolisaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/alibaba/anolisa/sysom-agentsight)<a href="https://agentmods.dev/skills/alibaba/anolisa/sysom-agentsight"><img src="https://agentmods.dev/badge/skills/alibaba/anolisa/sysom-agentsight.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00103 | $0.01030 |
| Opus 5 | $0.00051 | $0.00515 |
| Sonnet 5 | $0.00021 | $0.00206 |
| Haiku 4.5 | $0.00010 | $0.00103 |
Grade B, and why
agentsight scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
sudo systemctl start agentsight How it starts
The opening of the file, as written. The whole thing — 124 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Dashboard(前端)
AgentSight 提供 Web Dashboard(前端) 用于可视化查看 token 消耗和会话历史。
访问方式:
- 远程访问:
http://<server-ip>:7396(需确保安全组已开放该端口) - 本地访问:
http://127.0.0.1:7396
功能:
- Token 消耗趋势图(按天/小时)
- 会话历史浏览
- LLM 调用详情查看
- 支持按时间范围、进程过滤
启动服务:
# 如果服务未运行,启动它
sudo systemctl start agentsight
# 查看服务状态
sudo systemctl status agentsight
Token 查询
常用命令
| 命令 | 说明 |
|---|---|
/usr/local/bin/agentsight token --period today |
今天消耗 |
/usr/local/bin/agentsight token --period yesterday |
昨天消耗 |
/usr/local/bin/agentsight token --hours 3 |
最近 3 小时 |
/usr/local/bin/agentsight token --period today --compare |
今天 vs 昨天对比 |
返回示例
今天共消耗 125,000 tokens,比昨天(98,000)增长 27%。
输入: 125,000 | 输出: 85,000
审计查询
常用命令
| 命令 | 说明 |
|---|---|
/usr/local/bin/agentsight audit |
最近 24 小时事件 |
/usr/local/bin/agentsight audit --last 48 |
最近 48 小时 |
/usr/local/bin/agentsight audit --pid 12345 |
指定进程 |
/usr/local/bin/agentsight audit --type llm |
仅 LLM 调用 |
/usr/local/bin/agentsight audit --type process |
仅进程行为 |
/usr/local/bin/agentsight audit --summary |
汇总统计 |
/usr/local/bin/agentsight audit --summary --last 72 |
最近 72 小时汇总 |
/usr/local/bin/agentsight audit --json |
JSON 格式 |
返回示例
汇总输出:
=== Audit Summary (last 24 hours) ===
LLM calls: 42
Process actions: 128
Providers:
OpenAI: 35 calls
Anthropic: 7 calls
Top commands:
python agent.py: 25 times
node server.js: 17 times
事件列表(JSON):
{"event_type":"llm_call","pid":1234,"comm":"python",
"extra":{"provider":"OpenAI","model":"gpt-4o","input_tokens":1500,"output_tokens":800}}
事件类型
| 类型 | 字段 |
|---|---|
llm_call |
provider, model, input_tokens, output_tokens, request_path, response_status, is_sse |
process_action |
filename, args, exit_code |
会话中断查询
数据库:/var/log/sysak/.agentsight/interruption_events.db
中断类型:llm_error、sse_truncated、context_overflow、agent_crash、token_limit
严重级别:critical > high > medium > low
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 124 lines · 103 tokens per session scan B 9aee00a5258a
agentsight is a skill published in the GitHub repository alibaba/anolisa (618 stars, last pushed today), licensed Apache-2.0. It adds 103 tokens to every session and 1,030 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
data-processor
Processes data records from a source file.
knowledge-base
Ingest URLs, documents, and transcripts into a searchable knowledge base. Query past research and curated documentation using full-text search. Trigger words: ingest, knowledge base, look up, search knowledge, what do we know about, research, index this, add to knowledge base.
model-scout
Find the best free cloud models and update models.json from OpenRouter leaderboard.
library
Sync agent memory files to a Cortex knowledge graph for enhanced retrieval, hybrid search (vector + keyword + graph), AI-powered Q&A with agentic deep research, and knowledge graph exploration.
review-pr
Review Forge pull requests from Codex with Forge-aware heuristics and the shared Forge verdict/merge model.
build-mcp-server
This skill should be used when the user asks to "build an MCP server", "create an MCP", "make an MCP integration", "wrap an API for Claude", "expose tools to Claude", "make an MCP app", or discusses building something with the Model Context Protocol. It is the entry point for MCP server development — it interrogates…