Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add burakgon/roamcode --skill cligit clone --depth 1 https://github.com/burakgon/roamcodeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/burakgon/roamcode/cli)<a href="https://agentmods.dev/skills/burakgon/roamcode/cli"><img src="https://agentmods.dev/badge/skills/burakgon/roamcode/cli/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/burakgon/roamcode/cli"><img src="https://agentmods.dev/badge/skills/burakgon/roamcode/cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.00426 |
| Opus 5.5 | $0.00008 | $0.00170 |
| Sonnet 5.5 | $0.00004 | $0.00085 |
| Haiku 4.5 | $0.00002 | $0.00043 |
Grade A, and why
roamcode-command-center scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
RoamCode command center
Use the installed roamcode api wrapper. Set ROAMCODE_API_URL to the Node origin and provide a revocable device or
host credential in ROAMCODE_API_TOKEN. Never put a credential in a URL, command argument, log, or response.
Start by running roamcode api capabilities. The supported read actions are sessions, agents, workspaces,
devices, presence, adapters, events, and openapi.
presence contains only short-lived viewing metadata and never terminal content, prompts, credentials, IP addresses,
or private filesystem paths. Manual starts open a neutral shell and never choose a provider. Start Claude Code, Codex,
or another terminal command explicitly after the Session exists.
Mutations:
roamcode api start --cwd /absolute/projectopens a neutral persistent shell.roamcode api send --session SESSION_ID --data 'text'writes to that terminal.roamcode api wait --agent AGENT_ID --after UPDATED_AT --timeout-ms 30000roamcode api focus --agent AGENT_IDemits a non-stealing request. Add--activateonly when the user explicitly asked to switch their visible context.
Pass --idempotency-key when retrying a mutation across processes. A key is actor-scoped for 24 hours; reusing it
with another request returns IDEMPOTENCY_CONFLICT. send writes only to the Session's native terminal and returns
focused:false. Use wait or the resumable event stream instead of tight polling.
Treat blocked as requiring a decision, working as in progress, done as completed but unseen, and ended as no
longer running. Do not infer success from a transport timeout: read the resource again using the same idempotency key.
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- package.json 932 B
- src/access-reset.ts 3.3 KB runs code
- src/api-command.ts 5.9 KB runs code
- src/args.ts 7.5 KB runs code
- src/index.ts 15 KB runs code
- src/install.ts 489 B runs code
- src/pair.ts 3.6 KB runs code
- src/status.ts 5.1 KB runs code
- test/access-reset.test.ts 2.3 KB runs code
- test/api-command.test.ts 4.6 KB runs code
- test/args.test.ts 5.6 KB runs code
- test/install-script-copy.test.ts 946 B runs code
- test/install.test.ts 9.8 KB runs code
- test/pair.test.ts 2.8 KB runs code
- test/run.test.ts 13 KB runs code
- test/status.test.ts 6.7 KB runs code
- tsconfig.build.json 112 B
- tsconfig.json 180 B
- tsup.config.ts 182 B runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 32 lines · 21 tokens per session scan A 7e2dbe8e1b6f
roamcode-command-center is a skill published in the GitHub repository burakgon/roamcode (19 stars, last pushed 9d ago), licensed MIT. It adds 21 tokens to every session and 426 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
sls-dashboard-builder
A tool for creating and modifying importable JSON dashboards for Alibaba Cloud SLS, a service for searching and monitoring logs. It maps checked queries and analysis needs to dashboard charts.
loongsuite-pilot-insight
A reporting workflow for turning LoongSuite Pilot and AI coding-agent logs into structured reports about events, teams, data quality, development efficiency, and AI use. It defines the meaning of the log fields and the measurements used in dashboards.
loongsuite-pilot-ops
Skill "loongsuite-pilot-ops" from alibaba/loongsuite-pilot, covering loongsuite-pilot-ops, quick start, todo: add quick start commands and usage.
loongsuite-pilot-ops
An installer and operations guide for LoongSuite Pilot, a tool that collects and reports AI coding activity for development teams.
browser-use
Control the user's Chrome through the existing persistent Node REPL and the Qwen Browser SDK.
memstack-business-gdpr
Use this skill when the user says 'GDPR', 'data protection', 'privacy compliance', 'DPA', 'DSAR', 'data subject request', 'cookie consent', 'privacy audit', 'CCPA', or asks 'do I need GDPR for this repo'. Scans the repository to detect what personal data is collected, classifies sensitivity, determines whether GDPR…