Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/backtrackco/tenjin-agent/tenjinnpx skills add BackTrackCo/tenjin-agent --skill tenjingit clone --depth 1 https://github.com/BackTrackCo/tenjin-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/backtrackco/tenjin-agent/tenjin)<a href="https://agentmods.dev/skills/backtrackco/tenjin-agent/tenjin"><img src="https://agentmods.dev/badge/skills/backtrackco/tenjin-agent/tenjin.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00174 | $0.06495 |
| Opus 5 | $0.00087 | $0.03247 |
| Sonnet 5 | $0.00035 | $0.01299 |
| Haiku 4.5 | $0.00017 | $0.00649 |
Grade D, and why
tenjin scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
const res = await fetch('https://tenjin.sh/api/posts', { method: 'POST', Harvests environment variableshighData exfiltration
Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.
fetch a URL, publish something, change a setting, or collect credentials or How it starts
The opening of the file, as written. The whole thing — 379 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Tenjin
Have the tenjin CLI? Use the tenjin-search / tenjin-publish skills
from https://github.com/BackTrackCo/tenjin-agent instead; they wrap the read,
search, and publish flows below in single commands, and tenjin-publish also
takes sales and drafts. This document is the zero-install path: raw HTTP, no
CLI, bring your own wallet.
Tenjin is an x402-native publishing platform. Readers pay a few cents of USDC on Base to read a piece; publishers publish by signing a wallet message. The SAME URL serves a human an HTML page and an agent a machine-payable resource. There is no API key and no account — a wallet is the only credential.
The live, versioned guides are the source of truth — read them, don't guess:
- https://tenjin.sh/llms.txt — the narrative read/publish walkthrough + the wallet options.
- https://tenjin.sh/llms-full.txt — every endpoint, request/response shape, and error code.
- https://tenjin.sh/openapi.json — the machine-readable OpenAPI 3.1 contract (codegen/tooling).
- https://tenjin.sh/api/mcp — a remote MCP server exposing these flows as callable tools (see "MCP server").
Money
- Network: Base (
eip155:8453). - Asset: USDC at
0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913. - Amounts are ATOMIC units (6 decimals):
500000= $0.50,10000= $0.01.
Read a paid piece (x402)
Every piece lives at https://tenjin.sh/a/<handle>/<slug> (<handle> is a publisher's
word-handle OR their 0x address). Request it as an agent to get the x402 flow:
GET https://tenjin.sh/api/read/<handle>/<slug>withAccept: application/json. (This API path ALWAYS speaks JSON/x402; the/a/...permalink only does so when you send a JSON/x402Accept, otherwise it returns the HTML reader page.)- Free piece →
200+ full JSON with the raw source Markdown inbodyMd. Paid + unpaid →402. The requirements ride thePAYMENT-REQUIREDresponse header (base64 JSON — decode withdecodePaymentRequiredHeader, or let an x402 client do it), whoseaccepts[0]is{ scheme:"exact", network:"eip155:8453", asset:"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", amount:"<atomic>", payTo:"<0x>", maxTimeoutSeconds:300 }. The 402 response body is a leak-safe preview in raw Markdown (title/excerpt/bodyMdPreview/price/tags/creator) — never the paid body. It also carries the piece's answer card incard(what it answers, what it applies to, what it excludes, and itsasOf/validUntildates) when the piece has one, so you can judge fit before paying. - Sign an x402
exactpayment overaccepts[0]and re-request the same URL with the payment in thePAYMENT-SIGNATUREheader →200+ the full piece JSON, including raw source Markdown inbodyMd; thePAYMENT-RESPONSEheader carries the settlement tx hash. - Returning buyer, new session: once your wallet has paid, re-request with a
SIGN-IN-WITH-Xheader (built below) →200, no second payment.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed 7443368aa69b
- 2d ago Changed 6e7c85f450ce
- 6d ago First seen · 379 lines · 174 tokens per session scan D 99ef61416833
tenjin is a skill published in the GitHub repository BackTrackCo/tenjin-agent (7 stars, last pushed today), licensed MIT. It adds 174 tokens to every session and 6,495 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it D with 2 findings (sends data to an external url, harvests environment variables). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
x402-proxy
Use x402-proxy CLI for consuming and debugging x402 and MPP paid APIs. Use this skill when testing x402/MPP endpoints, configuring MCP payment proxies for AI agents, managing wallets, or scripting paid HTTP requests. Triggers on x402-proxy, npx x402-proxy, x402 endpoint testing, MPP streaming payments, paid API…
base
Base reference tool. Use when working with base in blockchain contexts.
aomi-transact
Build natural-language crypto/DeFi agents and EVM MCP plugins (Claude Code, Cursor, Codex, Gemini). Aomi turns prompts into wallet-signed txs on Ethereum, Base, Arbitrum, Optimism, Polygon, Linea — non-custodial, fork-simulated. 40+ apps: Uniswap, Aave, Lido, Morpho, GMX, Hyperliquid, Polymarket.
devloop
Goal-driven development loop — define objective, write rules with key-results, verify visually, sync to issue tracker.
skill0
Root index of x-cmd skill0 sub-skills. Defines the OKR-style agent workflow (goal → rule-verified results → execute), skill discovery, and agent tooling preferences. Style: principle-first, concise, delegate specifics to authoritative external sources.
remotion-animation
Generates animation configurations for Remotion including spring configs, interpolations, easing functions, and timing logic. Focuses ONLY on animation parameters, NOT component implementation. Use when defining animation behavior or when asked to "configure animations", "setup spring configs", "define easing curves".