Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add cosmicstack-labs/mercury-agent-skills --skill daily-briefinggit clone --depth 1 https://github.com/cosmicstack-labs/mercury-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cosmicstack-labs/mercury-agent-skills/daily-briefing)<a href="https://agentmods.dev/skills/cosmicstack-labs/mercury-agent-skills/daily-briefing"><img src="https://agentmods.dev/badge/skills/cosmicstack-labs/mercury-agent-skills/daily-briefing/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cosmicstack-labs/mercury-agent-skills/daily-briefing"><img src="https://agentmods.dev/badge/skills/cosmicstack-labs/mercury-agent-skills/daily-briefing.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 71 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00036 | $0.00836 |
| Opus 5 | $0.00018 | $0.00418 |
| Sonnet 5 | $0.00007 | $0.00167 |
| Haiku 4.5 | $0.00004 | $0.00084 |
Grade A, and why
daily-briefing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Daily AI Audio Briefing
Automatically collect, deduplicate, summarize, and synthesize a daily tech briefing as a warm-voiced MP3 every morning.
Workspace
- Collection script + summarization/TTS script
- Output:
briefing/YYYY-MM-DD.mp3+.txt - Knowledge base:
brain/news/YYYY-MM-DD/ - Schedule: cron (recommended 8:30 AM)
Workflow
- Collect — Scrape GitHub trending/rising, HN top/show/new, arXiv latest AI papers, weather
- Deduplicate — Compare against
brain/news/existing entries- New project → mark
is_new - Growth >30% → mark
is_update - Otherwise → discard
- New project → mark
- Ingest — Write new entries to
brain/news/YYYY-MM-DD/ - Summarize — AI composes briefing script from filtered JSON
- Synthesize — TTS API → MP3 file
- Cleanup — Delete briefings older than 7 days
Rules
- Don't use shell-level file deletion (
find -delete) — may trigger security scanners; use PythonPath.unlink() - Don't assume cron environment has API keys loaded — export them before running scripts
- Don't use inline
python3 -cor heredocs in agent/cron mode — write to.pyfiles first - Don't trust agent-reported "MP3 generated" — verify mtime with
statafter TTS step - Don't let each source exceed 8 items — keeps briefing concise
Validation
- Collection script runs successfully, all sources return data
- After dedup, filtered items ≥ 3
- Generated briefing text contains correct date (no placeholders)
- MP3 mtime matches current time (TTS actually ran)
Pitfalls
Date placeholders not replaced (Fixed: 2026-05-12)
- Symptom: Briefing shows "Year X Month X" instead of actual date
- Root cause: Prompt didn't inject real date, AI made it up
- Fix: Inject
datetime.date.today()into summarization prompt
Wrong weather source (Fixed: 2026-05-12)
- Symptom: Always reports wrong city/temperature format
- Root cause: Source only provided real-time temp, no high/low
- Fix: Switch to structured weather API with high/low temp
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 89 lines · 36 tokens per session scan A 0779ba52d3f2
daily-briefing is a skill published in the GitHub repository cosmicstack-labs/mercury-agent-skills (470 stars, last pushed 17d ago), licensed MIT. It adds 36 tokens to every session and 836 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
muapi-seedance-2
Expert Cinema Director skill for Seedance 2.0 (ByteDance) — high-fidelity video generation across Chinese, Global, and VIP tiers. Supports text-to-video, image-to-video, first-last-frame, omni reference, character training, omni-reference training, video editing, and watermark removal.
muapi-workflow
Build, run, and visualize multi-step AI generation workflows. The AI architect translates natural language descriptions into connected node graphs — chain image generation, video creation, enhancement, and editing into automated pipelines.
muapi-media-editing
Edit and enhance images and videos with AI via muapi.ai — prompt-based editing, upscaling, background removal, face swap, lipsync, video effects, and more.
muapi-media-generation
Generate AI images, videos, music, and audio from the terminal via muapi.ai — supports 100+ models including Flux, Midjourney v7, Kling 3.0, Veo3, and Suno V5.
wechat-article-writer
A Chinese-language content-creation workflow for public-account and social-media writing. It supports article drafting, cover images, illustrations, process diagrams, style analysis, and adapting writing to selected styles.
gemini-watermark-remover
Remove visible Gemini image watermarks from local image files by calling the project's CLI. Use when the user wants an agent to clean one or more local Gemini-generated images and save de-watermarked output files.