Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/anhnguyen0905/codex-mcp/exec-jvmnpx skills add anhnguyen0905/codex-mcp --skill exec-jvmgit clone --depth 1 https://github.com/anhnguyen0905/codex-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/anhnguyen0905/codex-mcp/exec-jvm)<a href="https://agentmods.dev/skills/anhnguyen0905/codex-mcp/exec-jvm"><img src="https://agentmods.dev/badge/skills/anhnguyen0905/codex-mcp/exec-jvm.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.00368 |
| Opus 5 | $0.00019 | $0.00184 |
| Sonnet 5 | $0.00008 | $0.00074 |
| Haiku 4.5 | $0.00004 | $0.00037 |
Grade A, and why
exec-jvm scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Java / Kotlin Idioms (embed when project is JVM)
JVM standards:
- Null safety: Kotlin — no !! in production code, use ?./?:/require; Java — Optional for
possibly-absent returns, @Nullable/@NonNull annotations if the project uses them, Objects.requireNonNull
at boundaries.
- Immutability: Kotlin — val + data class + immutable collections by default; Java — records
(or final fields + builders), List.copyOf/unmodifiable views for exposed collections.
- Errors: specific exceptions with messages that carry context; try-with-resources / use{} for
resources; never catch Exception/Throwable broadly except at top-level handlers that log.
- Follow the framework the repo uses (Spring Boot/Quarkus/Ktor/Android): its layering
(controller/service/repository), DI style (constructor injection, no field injection), config
binding, and transaction boundaries — do not hand-roll what the framework provides.
- Persistence: no N+1 queries (fetch joins/entity graphs); DTOs at API boundaries, entities stay
internal.
- Coroutines (Kotlin): structured concurrency — no GlobalScope; propagate cancellation; switch
dispatchers at the boundary, not deep inside logic.
- Style: match existing formatter (ktlint/spotless/google-java-format) and package structure.
- Tests: JUnit 5 + the repo's assertion/mocking libs (AssertJ/Kotest/MockK/Mockito); given-when-then
naming consistent with existing tests.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 28 lines · 39 tokens per session scan A 12211c102632
exec-jvm is a skill published in the GitHub repository anhnguyen0905/codex-mcp (3 stars, last pushed 3d ago), licensed MIT. It adds 39 tokens to every session and 368 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
mps-distribution-build
Use when bundling a new plain Java/Kotlin plugin into MPS distribution archives, debugging packaging/layout issues in build/mps.xml, tracing where per-plugin artefacts end up, or editing plugins/mps-build/solutions/mpsBuild/models/build.mps (the source of truth that generates every build/mps.xml). The skill covers the…
migrate-intellij-util
Optimize memory usage, consistency, and performance by migrating standard Java/Kotlin classes to IntelliJ's specialized com.intellij.util implementations.
authoring-java-sdk-tasks
Writes Airflow task logic in Java, Kotlin, or any JVM language using the Airflow Java SDK. Use when the user wants to implement Airflow tasks in Java/JVM, asks about @Builder.Dag/@Builder.Task/@Builder.XCom, the Task/BundleBuilder interfaces, reading connections/variables/XComs from Java, the JSON-to-Java type…
android-java-to-kotlin
Use when finishing a Java-to-Kotlin conversion in an Android project, when the user mentions "java to kotlin", "j2k", "convert java", "migrate java to kotlin", "finish the conversion", "make it idiomatic", or when a freshly IDE-converted .kt file needs to be turned into clean, modern, idiomatic Kotlin. The developer…
null-safety
Use when annotating nullability in Spring Boot 3 / Spring Framework 6 code, integrating Kotlin, or adding static nullability checks without assuming Spring Framework 7 JSpecify defaults.
jackson-3-migration
Migrer Jackson 2.x til Jackson 3.x (tools.jackson) i Kotlin/Java-prosjekter — automatisert OpenRewrite-pass pluss manuell Kotlin-spesifikk opprydding og verifisering.