Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add autonomous-ai/autonomous-os --skill connectorsgit clone --depth 1 https://github.com/autonomous-ai/autonomous-osWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/autonomous-ai/autonomous-os/connectors)<a href="https://agentmods.dev/skills/autonomous-ai/autonomous-os/connectors"><img src="https://agentmods.dev/badge/skills/autonomous-ai/autonomous-os/connectors/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/autonomous-ai/autonomous-os/connectors"><img src="https://agentmods.dev/badge/skills/autonomous-ai/autonomous-os/connectors.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 18 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 105 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Data Exfiltration · line 101 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 116 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 117 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Excessive Agency · line 180 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00145 | $0.10774 |
| Opus 5.5 | $0.00058 | $0.04310 |
| Sonnet 5.5 | $0.00029 | $0.02155 |
| Haiku 4.5 | $0.00015 | $0.01077 |
Grade A, and why
connectors scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 24d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **`curl -s` only.** Never `-v`, `-i`, `--trace*`, or anything that echoes request headers (that prints `Authorization`). Never paste the token into a literal command you show. How it starts
The opening of the file, as written. The whole thing — 589 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Connectors
⛔ Step −1: run Discover FIRST — never answer from memory
Every question that touches connection state — "is my gmail connected?", "what connectors do I have?", "check my email", "what's on my calendar", "my recent drive files" — requires running Discover (below) in this turn, before you write a single word about it.
Nothing on this device remembers what is linked. There is no cached connector state, no registry, no ambient list: the on-disk scan is the only source of truth, and it is only true at the moment it runs (the user may have linked or unlinked a service since the last turn). If you did not run it, you do not know.
Never do this:
- Claim a service is connected, not connected, or expired without the scan output present in this turn.
- Assume one Google service implies another.
gmail,google_calendarandgoogle_driveare three separate connectors with three separate files — one connected does not mean the others are. - Infer state from an earlier turn, from this skill's examples, or from the mere fact that the user named the service in their question.
- Invent subjects, senders, event titles, file names, dates, or counts. Every fact you report must come from a command you actually ran in this turn.
- Present a failed or empty call as a result. If the call failed, say it failed.
For a live service request, the next tool call after loading this skill is
Discover. Resolve any explicit history-only routing tag first; otherwise do
not insert another skill read (including input-branching for an ordinary voice
request), planning, or an API probe before checking config. Run the discovery
commands together in one terminal call.
If discovery succeeds and shows no connector for the requested service, give one short reply immediately: "Your email isn't connected yet. Link it in the Autonomous app so I can check it." Then stop this service task. Do not load another skill, repeat the scan, search for a client, or call the API to confirm the absence. For a compound request, continue only independent requested tasks. If config cannot be read or parsed, report that verification failed instead of claiming the service is unconnected; do not treat suppressed command errors as proof of absence.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 24d ago Changed · +138 lines 7350ebd9bff3
- 1mo ago Changed · +14 lines 20d2a4d0b82d
- 1mo ago Changed · +88 lines · +21 tokens per session be5f75f42e44
- 1mo ago Changed · +165 lines · +124 tokens per session 4ebba8ac3c49
- 1mo ago First seen · 184 lines · 0 tokens per session scan A 0c1c95559aaa
connectors is a skill published in the GitHub repository autonomous-ai/autonomous-os (378 stars, last pushed 18d ago), licensed Apache-2.0. It adds 145 tokens to every session and 10,774 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
rosclaw-embodied
A set of rules for completing robot tasks in ROSClaw, a system for running and checking robot work. It covers approved robot files, acceptance evidence, and separate rules for simulation and real hardware.
default
Skill "default" from ros-claw/rosclaw, covering skill.md, skill id, intent, preconditions and effects.
add-matrix
Add Matrix channel integration via Chat SDK. Works with any Matrix homeserver.
add-resend
Add Resend (email) channel integration via Chat SDK.
add-macos-statusbar
Add a macOS menu bar status indicator for NanoClaw. Shows a bolt icon with a green/red dot indicating whether NanoClaw is running, with Start, Stop, and Restart controls. macOS only.
sandbase
Access 2,000+ AI models and API tools through one MCP interface for inference, media generation, search, scraping, embeddings, social data, and structured retrieval. Use sandbasediscover before building custom integrations or declaring external data inaccessible; prefer an existing dedicated tool or API key when the…