Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add anlostsheep/grokodex --skill grokodex-setupgit clone --depth 1 https://github.com/anlostsheep/grokodexWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/anlostsheep/grokodex/grokodex-setup)<a href="https://agentmods.dev/skills/anlostsheep/grokodex/grokodex-setup"><img src="https://agentmods.dev/badge/skills/anlostsheep/grokodex/grokodex-setup.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00077 | $0.01067 |
| Opus 5 | $0.00039 | $0.00534 |
| Sonnet 5 | $0.00015 | $0.00213 |
| Haiku 4.5 | $0.00008 | $0.00107 |
Grade C, and why
grokodex-setup scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://x.ai/cli/install.sh | bash Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://x.ai/cli/install.sh | bash How it starts
The opening of the file, as written. The whole thing — 108 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Grokodex Setup
Check that the local Grok CLI is installed and logged in so other Grokodex tools can run.
When to use
- First time using Grokodex in a session or machine
- Any tool returns
GROK_NOT_FOUNDorGROK_NOT_LOGGED_IN - User asks to install / login / verify Grok for Grokodex (Codex, Claude Code, etc.)
- Before heavy
grok_run/grok_imagine/grok_x_searchwork if setup looks broken
Tool preference
- Always call the MCP tool
grok_setupfirst (logical name; Claude may show anmcp__…__grok_setupprefix — use/mcplist). - Do not use a terminal/shell tool to run
grokfor diagnostics whengrok_setupis available. - Exception: after
grok_setupfails or reports missing binary / bad auth, you may guide the user to run install andgrok loginin their own terminal (see below). That is the only case where shell/grokis appropriate, and only as user-facing install guidance—not as a bypass for other tools.
How to call
grok_setup
Optional (currently ignored by the bridge, reserved):
grok_setup fix=true
No other parameters are required.
Interpret the result
Envelope shape (text content is JSON):
ok: true→ reporttextand/ormeta:meta.grok_path— binary pathmeta.version— CLI version if knownmeta.auth_ok— whether login looks healthy
ok: false→ surfaceerror.code,error.message, anderror.hint- Common codes:
GROK_NOT_FOUND,GROK_EXIT_NONZERO
- Common codes:
If auth_ok is false (or message says login required):
- Tell the user to run in a local terminal:
grok login - After they finish, call
grok_setupagain. - Only then proceed to
grok_run/grok_imagine/grok_x_search.
If Grok is not installed (GROK_NOT_FOUND)
Give official install steps (macOS / Linux / WSL):
curl -fsSL https://x.ai/cli/install.sh | bash
Windows (PowerShell):
irm https://x.ai/cli/install.ps1 | iex
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 108 lines · 77 tokens per session scan C 483aacee2350
grokodex-setup is a skill published in the GitHub repository anlostsheep/grokodex (2 stars, last pushed 1mo ago), licensed MIT. It adds 77 tokens to every session and 1,067 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
plugin-publish
A release guide for publishing Zhin.js plugins to npm, the JavaScript package registry, and to the Zhin plugin marketplace. It covers package metadata, versioning, release checks, and submission requirements.
plugin-develop
A development guide for adding features to Zhin.js plugins, such as chat commands, AI tools, middleware, scheduled tasks, and console pages. Zhin.js is the plugin system it targets.
commands-create-slash-command
Create or update Agent Zero slash commands for the built-in Commands plugin. Use when the user asks to add, edit, duplicate, or refine a reusable /command backed by YAML config plus text/python content files.
deepseek-harness
Use when building AI agent applications with a plugin-based architecture — Web UI, CLI, Python SDK, Cordis plugin system, multi-model orchestration. DeepSeek Harness (dsh): open-source agent harness by DeepSeek AI where everything is a plugin, powered by Cordis for spatiotemporal composability.
grok-brand-media
Prompt recipes for Grok image/video generation from Codex (OG images, README banners, launch clips).
grok-workflows
When and how to run Grok Rhai multi-agent workflows from Codex.