Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Chisiki1/objective-integrity-framework --skill artifact-accessgit clone --depth 1 https://github.com/Chisiki1/objective-integrity-frameworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/chisiki1/objective-integrity-framework/artifact-access)<a href="https://agentmods.dev/skills/chisiki1/objective-integrity-framework/artifact-access"><img src="https://agentmods.dev/badge/skills/chisiki1/objective-integrity-framework/artifact-access/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/chisiki1/objective-integrity-framework/artifact-access"><img src="https://agentmods.dev/badge/skills/chisiki1/objective-integrity-framework/artifact-access.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.00563 |
| Opus 5 | $0.00024 | $0.00282 |
| Sonnet 5 | $0.00010 | $0.00113 |
| Haiku 4.5 | $0.00005 | $0.00056 |
Grade A, and why
artifact-access scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Artifact access
Use the existing manifest first. When its paths are already exact and sufficient,
do not create another inventory. For a generated tree without a usable manifest,
scripts/artifact_access.py inventory --root <explicit-task-root> --output <new-json>
creates a disposable path/hash view. It reads only the chosen tree, never searches
the home directory for a similar version and never modifies the source.
Read a member with:
python -B <skill>/scripts/artifact_access.py read --inventory <json> --path <exact/relative/file> --start 1 --lines 80
For an existing file manifest, pass --manifest <json> --root <explicit-root>
instead of --inventory. Supported manifests contain files or members rows
with relative path and sha256. The explicit root determines their meaning;
an installation's live path is not silently substituted for a candidate path.
The result includes exact source identity, selected lines, next_line and whether
that view covers the whole file. Follow next_line to EOF when a required Skill,
policy or source must be read completely. A bounded preview is not a full read.
Missing, duplicate, linked or changed members remain explicit errors; do not
silently fall back from an overlay to another release. Choose the actual baseline
or overlay from its existing manifest when both are required.
Use diff --left <file> --right <file> --lines 120 for a bounded ordinary unified
diff with both full-file hashes. The original files remain the evidence; a
truncated diff cannot certify complete change coverage.
For a large single-line JSON artifact, use json --file <exact-file> --pointer <JSON-pointer> --keys to list one object's keys, or omit --keys for its bounded
value. An empty pointer selects the root. Oversized selections fail explicitly;
choose a narrower pointer rather than printing the entire file. This selected
projection never counts as reading a mandatory full source.
For repeated material operations whose first fault/next use matters, the existing
local master-guided-skill-lifecycle operation runner can retain this script's
actual exit status and full stdout/stderr. This Skill also runs independently;
it does not require a workflow registry, create learning authority, or certify
that the inspected product works. Its exact input and result—not a read count—
are the useful learning evidence.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 48 lines · 48 tokens per session scan A c257d6303fd9
artifact-access is a skill published in the GitHub repository Chisiki1/objective-integrity-framework (11 stars, last pushed yesterday), licensed Apache-2.0. It adds 48 tokens to every session and 563 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-10.
Other skills, from other repositories
copilotkit-channels
Use for the CODE half of a managed Intelligence Channel with Slack or Microsoft Teams: customising the Channel a CLI-scaffolded project already ships, or — for a project the CLI did not generate — writing the Channel declaration, the long-running host, and the awaited activation call. Teams provider setup is in scope…
setup-slack-channel
Use for the PROVIDER half of getting a locally running CopilotKit Channels agent to answer in Slack, when no Slack app exists yet — setting up a Channels bot in Slack for the first time, creating the Slack app and its tokens, attaching it to a managed Intelligence Channel, or when a Channel reports setuprequired, sits…
channels-setup
Use when a developer wants to build their first CopilotKit Channels agent and get it answering in Slack or Microsoft Teams — "set up a channel", "connect my agent to Slack", "get my agent into Teams", or starting from nothing and wanting a working channel end to end. Covers the whole path: inspecting or scaffolding…
anarlog
Query Anarlog meetings, notes, summaries, transcripts, participants, action items, and recurring history. Use when a user asks about their Anarlog meeting data or needs meeting context for another task.
gmail
Manage Gmail email — drafting, sending, organizing, filters, vacation replies, and inbox analysis.
schedule
Reminders, automations, and recurring page, dashboard, or status monitoring (cron, RRULE, or fire-at).