Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add calesthio/generative-media-skills --skill ideogram-imagegit clone --depth 1 https://github.com/calesthio/generative-media-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/calesthio/generative-media-skills/ideogram-image)<a href="https://agentmods.dev/skills/calesthio/generative-media-skills/ideogram-image"><img src="https://agentmods.dev/badge/skills/calesthio/generative-media-skills/ideogram-image/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/calesthio/generative-media-skills/ideogram-image"><img src="https://agentmods.dev/badge/skills/calesthio/generative-media-skills/ideogram-image.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Anti-Refusal · line 568 Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.Fix: Remove jailbreak framing that nullifies safety policies or restrictions. Skill content must not instruct the agent to ignore its guidelines or operate without guardrails.
- medium Data Exfiltration · line 452 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00093 | $0.10844 |
| Opus 5 | $0.00046 | $0.05422 |
| Sonnet 5 | $0.00019 | $0.02169 |
| Haiku 4.5 | $0.00009 | $0.01084 |
Grade A, and why
ideogram-image scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
response = requests.post( How it starts
The opening of the file, as written. The whole thing — 627 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Ideogram Image
Use the official Developer API directly and treat the checked date below as part of the contract.
Evidence labels and refresh rule
- Documented: stated by an Ideogram first-party page or the official OpenAPI document.
- Inference: a conclusion not guaranteed by the published contract.
- Production heuristic: operational advice, not an Ideogram promise.
- Treat model availability, endpoint lifecycle, prices, limits, policy, and ephemeral URL lifetime as volatile. Re-check the documentation index, OpenAPI 3.1 JSON, pricing, API agreement, usage policy, and privacy policy before a release or quote.
Unless a paragraph says otherwise, API facts below are Documented — checked 2026-07-09.
Select a route, not an invented model string
| Need | Canonical route | Effective model/lifecycle |
|---|---|---|
| New text/layout generation | POST /v1/ideogram-v4/generate |
Ideogram 4.0; current flagship API route |
| Asynchronous new generation | POST /v1/ideogram-v4/async/generate |
Ideogram 4.0; webhook plus polling |
| V4 image-guided change | POST /v1/ideogram-v4/remix |
Ideogram 4.0 |
| Style/character references, mask edit, reframe, replacement background | /v1/ideogram-v3/* routes below |
Ideogram 3.0; current specialized routes |
| Prompt-only multi-image edit | POST /v1/edit |
Current instructional-edit route; docs expose V3 resolution controls but no request model field |
| Older body-selected generation | /generate, /edit, /remix, /reframe |
Explicitly labeled legacy in the reference; avoid for new work |
Do not send model to V4 or V3 route-scoped endpoints. Their model identifiers are the route segments ideogram-v4 and ideogram-v3. The legacy ModelEnum accepts V_1, V_1_TURBO, V_2, V_2_TURBO, V_2A, V_2A_TURBO, or AUTO; it does not expose V3/V4. The generic Describe route accepts V_2, V_3, or V_4. A V3 custom model is addressed by custom_model_uri in the form model/<model_name>/version/<version_name>.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 627 lines · 93 tokens per session scan A 6d32e4031a19
ideogram-image is a skill published in the GitHub repository calesthio/generative-media-skills (170 stars, last pushed 1mo ago), licensed MIT. It adds 93 tokens to every session and 10,844 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
image-authoring
Author images and diagrams as code — SVG, Pillow, Excalidraw, mermaid. Load when asked to draw, illustrate, or make an image, icon, logo, poster, or diagram.
bento-slides
Create and edit Bento presentations — self-contained .bento.html decks whose document is JSON. Use whenever the user wants a slide deck or presentation: from scratch, from source material, or by improving an existing file.
motion-graphics
Use when the user wants a short, design-led motion graphic where motion is the message: kinetic typography, stat or number count-up, chart/data-viz hit, logo sting, brand lockup, lower-third, callout, social overlay, animated headline/tweet/news item, motion poster, or quick captured-page highlight. Usually under 10s…
storyboard-generation
Rules and prompts for generating structured presentation slides and multi-panel storyboards.
excalidraw-visual-designer
Create and revise editable visual drawings directly in the Excalidraw website through the in-app browser. Use when the user asks Codex to draw in Excalidraw or update an Excalidraw canvas, including diagrams, flowcharts, architecture sketches, process maps, infographics, teaching visuals, product explanation graphics…
wechat-sticker-assets-designer
A design skill for creating the supporting images used when publishing WeChat sticker packs, including a banner, a support-request image, and a thank-you image.