Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/Bilal140202/the-lord-of-the-skillsnpx agentmods add skills/bilal140202/the-lord-of-the-skills/wei-shaw__sub2apiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bilal140202/the-lord-of-the-skills/wei-shaw__sub2api)<a href="https://agentmods.dev/skills/bilal140202/the-lord-of-the-skills/wei-shaw__sub2api"><img src="https://agentmods.dev/badge/skills/bilal140202/the-lord-of-the-skills/wei-shaw__sub2api/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bilal140202/the-lord-of-the-skills/wei-shaw__sub2api"><img src="https://agentmods.dev/badge/skills/bilal140202/the-lord-of-the-skills/wei-shaw__sub2api.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00101 | $0.00610 |
| Opus 5.5 | $0.00040 | $0.00244 |
| Sonnet 5.5 | $0.00020 | $0.00122 |
| Haiku 4.5 | $0.00010 | $0.00061 |
Grade A, and why
sub2api-admin scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Use the bundled CLI instead of ad hoc `curl`. Run examples from this skill directory. How it starts
The opening of the file, as written. The whole thing — 48 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sub2API Admin
Use the bundled CLI instead of ad hoc curl. Run examples from this skill directory.
export SUB2API_BASE_URL='https://your-sub2api-host'
export SUB2API_ADMIN_API_KEY='<admin api key>'
node scripts/sub2api-admin.js accounts list
For all commands and payload examples, read references/admin-cli.md.
Workflow
- Reuse
SUB2API_BASE_URLandSUB2API_ADMIN_API_KEYfrom the environment. - Run read-only commands first:
accounts list,accounts get <id>,groups all, orproxies all. - Before destructive or bulk writes, print the target account names and IDs.
- Execute the write command only after the target set is clear.
- Run a follow-up read command to verify the result.
Common Commands
node scripts/sub2api-admin.js accounts list --page-size 20
node scripts/sub2api-admin.js accounts get 40
node scripts/sub2api-admin.js accounts usage 40
node scripts/sub2api-admin.js accounts set-schedulable 40 true
node scripts/sub2api-admin.js accounts bulk-update --ids 40,39 --json '{"concurrency":10}'
node scripts/sub2api-admin.js redeem-codes list --page-size 20
node scripts/sub2api-admin.js redeem-codes generate --json '{"count":1,"type":"balance","value":10}' --idempotency-key redeem-$(date +%s)
node scripts/sub2api-admin.js redeem-codes create-and-redeem --json '{"code":"order_123","type":"balance","value":10,"user_id":123}' --idempotency-key order-123
node scripts/sub2api-admin.js error-rules list
node scripts/sub2api-admin.js tls-profiles list
Safety Notes
- Authentication uses only
x-api-key. - If the API returns
INVALID_ADMIN_KEY, ask the user to regenerate the admin API key. accounts exportincludes credentials and tokens. Prefer--fileand avoid printing exports in chat.- Redeem code create/redeem commands should use
--idempotency-keyfor payment or recharge workflows. - For uncertain or newly added backend APIs, use
api <METHOD> <admin-path>after a read-only check.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 48 lines · 101 tokens per session scan A 5e1294a681c0
sub2api-admin is a skill published in the GitHub repository Bilal140202/the-lord-of-the-skills (6 stars, last pushed 1mo ago), licensed MIT. It adds 101 tokens to every session and 610 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
agentmail
Email infrastructure for AI agents. Create accounts, send/receive emails, manage webhooks, and check karma balance via the AgentMail API.
serpsmith
Publish SEO articles, verify unattended health, and gate source-to-runtime releases.
notion
Notion API for creating and managing pages, databases, and blocks.
microservices-patterns
Design microservices architectures with service boundaries, event-driven communication, and resilience patterns. Use when building distributed systems, decomposing monoliths, or implementing microservices.
notion-tool
A Notion integration tool. It performs page and database search, retrieval, creation, and updates via the API. Use when: Use when: you need to edit Notion pages, add database rows, or search and retrieve workspace content.
java-spring
Build and upgrade Java/Spring services with explicit transaction, concurrency and deployment contracts. Use when implementing Spring Boot APIs, data access or jobs; verify JDK/framework/build-tool compatibility and preserve the application architecture.