Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add blaxel-ai/agent-skills --skill blaxel-sdkgit clone --depth 1 https://github.com/blaxel-ai/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/blaxel-ai/agent-skills/blaxel-sdk)<a href="https://agentmods.dev/skills/blaxel-ai/agent-skills/blaxel-sdk"><img src="https://agentmods.dev/badge/skills/blaxel-ai/agent-skills/blaxel-sdk/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/blaxel-ai/agent-skills/blaxel-sdk"><img src="https://agentmods.dev/badge/skills/blaxel-ai/agent-skills/blaxel-sdk.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00089 | $0.07356 |
| Opus 5.5 | $0.00036 | $0.02942 |
| Sonnet 5.5 | $0.00018 | $0.01471 |
| Haiku 4.5 | $0.00009 | $0.00736 |
Grade B, and why
blaxel-sdk scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
# curl http://127.0.0.1:8080/process -X POST -d '{"workingDir":"/app","command":"npm run dev","waitForCompletion":false}' -H "Content-Type: application/json" Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
# curl http://127.0.0.1:8080/process -X POST -d '{"workingDir":"/app","command":"npm run dev","waitForCompletion":false}' -H "Content-Type: application/json" How it starts
The opening of the file, as written. The whole thing — 735 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Blaxel Skill Reference
What is Blaxel
Blaxel (https://blaxel.ai) is a cloud platform that gives AI agents their own compute environments. Its flagship product is perpetual sandboxes: instant-launching microVMs that resume from standby in under 25ms and scale to zero after a few seconds of inactivity.
You use Blaxel primarily to:
- Spin up a sandbox, install dependencies, run a dev server, and expose a live preview URL
- Build and deploy sandbox templates (custom Docker images) for reusable environments
- Deploy AI agents, MCP servers, and batch jobs as serverless endpoints
SDKs: TypeScript (@blaxel/core) and Python (blaxel)
CLI: bl (install from https://docs.blaxel.ai/cli-reference/introduction)
Docs: https://docs.blaxel.ai
Authentication
The SDK authenticates using these sources in priority order:
- Blaxel CLI, when logged in
- Environment variables in
.envfile (BL_WORKSPACE,BL_API_KEY) - System environment variables
- Blaxel configuration file (
~/.blaxel/config.yaml)
Log in locally (recommended for development):
bl login YOUR-WORKSPACE
Or set environment variables (for remote/CI environments):
export BL_WORKSPACE=your-workspace
export BL_API_KEY=your-api-key
When running on Blaxel itself, authentication is automatic.
Deleting resources
Deletes are permanent, and workspaces are often shared: code that deletes can remove other people's sandboxes or data. Before writing or running code that deletes, stops, kills, restores over or unshares anything, look up the call in references/destructive-operations.md and follow its tier:
- Data and account resources (volumes, volume templates, drives and drive files, images, snapshots, secrets, integration connections, policies, service accounts and API keys, workspaces): delete only after a person confirms each exact name.
fs.rmunder a volume or drive mount counts. - Compute (sandboxes, agents, functions and MCP servers, jobs, models, applications, previews, processes): delete only what this session created, one resource per call, by exact name. A matching prefix, label or creator does not make a resource yours.
- Never call
delete()in a loop overlist()results, whether filtered by name prefix, label, status, creation time, creator or a before/after diff of two listings, and never sweep a workspace.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +75 lines e2ad7f24ebe8
- 2mo ago First seen · 660 lines · 89 tokens per session scan B 2e8cb90dbc4e
blaxel-sdk is a skill published in the GitHub repository blaxel-ai/agent-skills (4 stars, last pushed today), licensed MIT. It adds 89 tokens to every session and 7,356 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it B with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
blaxel-sdk compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| blaxel-sdkblaxel-ai/agent-skills | Skill | 4 | today | MIT | B | 89 | Claude Code |
| gke-compute-classesgoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 83 | Claude Code, Codex |
| gke-workload-securitygoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 171 | Claude Code, Codex |
| gke-reliabilitygoogle/skills | Skill | 22k | yesterday | Apache-2.0 | A | 85 | Claude Code, Codex |
| cloud-architectJeffallan/claude-skills | Skill | 12k | 7d ago | MIT | A | 71 | Claude Code |
| nemo-automodel-launcher-configNVIDIA/skills | Skill | 3.9k | yesterday | Apache-2.0 | A | 30 | Claude Code |
| azure-mgmt-botservice-dotnetmicrosoft/skills | Skill | 3.2k | yesterday | MIT | A | 78 | Claude Code |