Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add cometchat/cometchat-skills --skill cometchat-android-v6-builder-settingsgit clone --depth 1 https://github.com/cometchat/cometchat-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cometchat/cometchat-skills/cometchat-android-v6-builder-settings)<a href="https://agentmods.dev/skills/cometchat/cometchat-skills/cometchat-android-v6-builder-settings"><img src="https://agentmods.dev/badge/skills/cometchat/cometchat-skills/cometchat-android-v6-builder-settings/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cometchat/cometchat-skills/cometchat-android-v6-builder-settings"><img src="https://agentmods.dev/badge/skills/cometchat/cometchat-skills/cometchat-android-v6-builder-settings.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00137 | $0.01663 |
| Opus 5.5 | $0.00055 | $0.00665 |
| Sonnet 5.5 | $0.00027 | $0.00333 |
| Haiku 4.5 | $0.00014 | $0.00166 |
Grade A, and why
cometchat-android-v6-builder-settings scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 64 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Ground truth: the installed kit source
com.cometchat.uikit.core.CometChatUIKit(6.0.5) + the live page/ui-kit/android/methods(init · authentication · logout · create user · message helpers). Symbols verified against catalogandroid-v6.json. Fetch exact signatures from the methods page; never guess an overload.
Companion skills (read first)
cometchat-android-v6-core— owns the DEFAULT path:initFromSettings → login → render, the settings file, and credential handling. Come HERE only when a task needs an option or auth variant beyond that default.
Use this skill when
"what can go in the settings file?", "turn on calling in the settings", "log in with a server-minted auth token instead of the auth key", "create a CometChat user from the app", "check who's logged in", "what does the UIKitSettings builder do?".
Prerequisites & install
Same kit + init as core. Everything here is com.cometchat.uikit.core — no extra dependency.
The settings file (the DEFAULT input to initFromSettings)
app/src/main/assets/cometchat-settings.json — gitignored (it carries the dev Auth Key). Read by CometChatUIKit.initFromSettings(context, callback), which parses it, builds the settings, and persists integrationSource="ai-agent" for telemetry:
{
"appId": "APP_ID",
"region": "REGION",
"credentials": { "authKey": "AUTH_KEY" },
"uiKit": {
"subscribePresenceForAllUsers": true,
"enableCalling": false
}
}
appId+regionare required — missing either fails withERR_SETTINGS_INVALID; a missing file fails withERR_SETTINGS_FILE_NOT_FOUND.credentials.authKeyis optional and dev-only — omit it in production builds and log in with a server-minted auth token.uiKit.subscribePresenceForAllUsersdefaults totrue.uiKit.enableCallingdefaults tofalse. Setting ittruemakesinitFromSettingsauto-initialize the Calls SDK — which means thecom.cometchat:calls-sdk-androiddependency becomes MANDATORY. Without it the app throwsNoClassDefFoundError: CometChatCalls$SessionSettingsBuilderfrominitCometChatCallsduringonCreate, before any UI renders (verified on device). The two must always change together (→cometchat-android-v6-calls).- The Chat SDK may read an optional
chatSDKsection from the same file. It is not required — init succeeds without it./sdk/android/v5/setup.mddocuments only the classic programmaticinit()+AppSettings, so it will NOT tell you the section's keys; do not send the user there for them.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -86 lines · +102 tokens per session 914eb04595cc
- 1mo ago First seen · 150 lines · 35 tokens per session scan A 24ff125346af
cometchat-android-v6-builder-settings is a skill published in the GitHub repository cometchat/cometchat-skills (150 stars, last pushed 8d ago), licensed MIT. It adds 137 tokens to every session and 1,663 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
firebase-messaging
Use when setting up Firebase Cloud Messaging, managing permissions and tokens, handling background/foreground notification taps, or dispatching messages server-side (HTTP v1).
firebase-app-check
Use when implementing app attestation, configuring App Check providers, setting up debug tokens, enabling backend enforcement, or managing token refresh.
firebase-ai
Use when setting up firebaseai, generating text/chat with Gemini, streaming AI output, building multimodal prompts, or handling AI errors.
flutter-best-practices
Use when writing, reviewing, refactoring, or planning Flutter/Dart code — screens, features, project structure, state management, folders, widgets, cubits/blocs, repositories, services, or tests.
compose-project
Owns project and build-level work for Compose and Compose Multiplatform apps: bootstrapping a new project, adopting the kit in an existing project, adding or extracting a module, convention plugins in build-logic, the version catalog, and CI plus agent hooks. Use when starting a Compose Multiplatform app, adding a…
e2e-testing
AI-powered E2E testing for any app — Flutter, React Native, iOS, Android, Electron, Tauri, KMP, .NET MAUI. Connects via MCP to running apps so the agent can take screenshots, tap elements, enter text, scroll, inspect UI trees, and verify state with natural language. Use when the user wants to test an app's UI…