Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bgauryy/octocode --skill octocode-mannequingit clone --depth 1 https://github.com/bgauryy/octocodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bgauryy/octocode/octocode-mannequin)<a href="https://agentmods.dev/skills/bgauryy/octocode/octocode-mannequin"><img src="https://agentmods.dev/badge/skills/bgauryy/octocode/octocode-mannequin/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bgauryy/octocode/octocode-mannequin"><img src="https://agentmods.dev/badge/skills/bgauryy/octocode/octocode-mannequin.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00094 | $0.01194 |
| Opus 5 | $0.00047 | $0.00597 |
| Sonnet 5 | $0.00019 | $0.00239 |
| Haiku 4.5 | $0.00009 | $0.00119 |
Grade A, and why
octocode-mannequin scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Octocode Mannequin
Anatomically-named 22-bone humanoid rig (arms-down neutral, bilaterally mirrored) plus a movement protocol that
clamps every joint to real range of motion, with a root 6-DOF channel (translate/pitch/yaw/roll) for travel,
turns, jumps and backflips — a Node CLI, a self-contained Three.js viewer (grounded, smooth Catmull-Rom
animation), and WebMCP tools an agent drives live. Flow: SCHEME → COMMAND → CLAMP+FK → RENDER → DRIVE.
Hard rules
scripts/skeleton.mjsis the single source of truth for bones/joints/ROM/movements; references and the viewer mirror it. The viewer re-implements the clamp/sideSign/FK math — any change must be made in BOTH files and re-verified (they must stay identical).- Movement commands use anatomical names valid for that joint, never raw signed degrees and never a movement
outside the joint's allowlist — read
references/movement-protocol.mdbefore composing one; the CLI and the tools reject those. - Treat ROM values as rig defaults, not medical fact — read
references/rom-table.mdbefore quoting a limit.
Gate
Writing a viewer file (viewer --out <file>.html) overwrites that path, and agent-driving needs a fresh
non-headless Chrome on a new port: confirm the output path and get the user's OK before the first write or
browser launch.
Workflow
- Run
node scripts/skeleton.mjs schemefirst to inspect bones + joint DOF/ROM/movements; for the hierarchy readreferences/anatomy-scheme.md, for the constraint model readreferences/joint-constraints.md, and for exact degrees readreferences/rom-table.md. - Compose a pose command using
references/movement-protocol.md, runnode scripts/skeleton.mjs pose --cmd '...', readwarnings/clamped; then validate an animation by runningskeleton.mjs sequence --file frames.json. - To render, run
node scripts/skeleton.mjs viewer --out <file>.html [--pose pose.json], open it, drag sliders or callwindow.applyPose/window.playSequencefrom the console — ready animations live inassets/(run-cycle.json,backflip.json,dance.json,idle.jsonfor alive breathing/sway); for the viewer's mechanics readreferences/viewer-guide.md. - To agent-drive it live, load
references/webmcp-agent.mdand serve the viewer's WebMCP tools over CDP — 11 tools incl. task-spacereach(put a hand/foot at a world point) andlook_at;get_scheme.guideis the frame/units contract. Discover, invoke, verify withget_poseor a screenshot.
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/backflip.json 3.1 KB
- assets/dance.json 2.7 KB
- assets/idle.json 968 B
- assets/run-cycle.json 2.5 KB
- assets/viewer.template.html 44 KB
- README.md 3.7 KB
- references/anatomy-scheme.md 2.9 KB
- references/joint-constraints.md 3.6 KB
- references/movement-protocol.md 3.6 KB
- references/references.md 3.0 KB
- references/rom-table.md 2.7 KB
- references/viewer-guide.md 3.3 KB
- references/webmcp-agent.md 3.7 KB
- scripts/skeleton.mjs 22 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 72 lines · 94 tokens per session scan A c34d986e3bd0
octocode-mannequin is a skill published in the GitHub repository bgauryy/octocode (932 stars, last pushed today), licensed MIT. It adds 94 tokens to every session and 1,194 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ar-vr-xr
AR/VR/XR development with Unity XR, WebXR, ARKit, ARCore, Meta Quest SDK, and spatial computing. Use when building augmented reality, virtual reality, mixed reality applications, or spatial experiences.
unity-ai-behavior
Use when implementing AI and NPC behavior — state machines, behavior trees, GOAP, NavMesh navigation, decision-making patterns, and when to use each approach.
unity-ecs
Use when considering ECS/DOTS architecture — when to use ECS vs MonoBehaviour, Burst compiler, Job System, hybrid approaches, and migration strategies from MonoBehaviour to ECS.
unity-performance
Use when analyzing or optimizing Unity performance — CPU/GPU/RAM profiling, object pooling, batching strategies, physics optimization, memory management, and platform-specific budgets.
unity-testing
Use when writing or structuring tests — EditMode vs PlayMode test decisions, test architecture, what to test in Unity, mocking strategies, and CI integration for Unity tests.
unity-vfx
Use when implementing visual effects — VFX Graph vs legacy Particle System decisions, performance budgets for particles, LOD strategies for effects, and common VFX patterns.