Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CSOAI-ORG/councilof-ai --skill gspcgit clone --depth 1 https://github.com/CSOAI-ORG/councilof-aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/csoai-org/councilof-ai/gspc)<a href="https://agentmods.dev/skills/csoai-org/councilof-ai/gspc"><img src="https://agentmods.dev/badge/skills/csoai-org/councilof-ai/gspc/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/csoai-org/councilof-ai/gspc"><img src="https://agentmods.dev/badge/skills/csoai-org/councilof-ai/gspc.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.01442 |
| Opus 5.5 | $0.00020 | $0.00577 |
| Sonnet 5.5 | $0.00010 | $0.00288 |
| Haiku 4.5 | $0.00005 | $0.00144 |
Grade A, and why
gspc scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 42 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GSPC (Council of AI, Layer 0)
The gspc MCP server (https://councilof.ai/mcp) exposes 19 tools (14 free, 5 x402-metered).
Free:
board_totals— Live GSPC board totals from https://councilof.ai/api/gspc.get_axis— One axis row from the live GSPC board at https://councilof.ai/api/gspc — every axis the board carries, behavioural and financial families alike, addressed by the axis id exactly as the board spells it: n, accuracy, interval, MEASURED or UNMEASURED status, family, kind, the bank or run-artifact URL behind the row, and dates.verify_card— Verify a signed gspc.measurement-card under the published rule (https://councilof.ai/signed/HOW-TO-VERIFY.md): recompute the id from the canonical body bytes, then check the Ed25519 signature under the PINNED key published at did:web:csoai.org#card-attestation-1.list_cards— The published signed-card index (https://councilof.ai/signed/card_index.json): what the index declares (n_cards) and how many rows it actually carries, reported next to — never reconciled with — the count the card store endpoint (https://councilof.ai/api/cards) reports for itself.get_root— GET the permissionless public-root at https://councilof.ai/root.json.get_card— GET one public-root card-v0 leaf by sha256 (64 hex) from https://councilof.ai/cards/{sha16}.json.verify_inclusion— Check a sha256 against the live public-root merkle via GET /api/proof?sha=.x402_trust— GET the latest x402 catalog trust snapshot: counts of how many catalogued x402 resources open a correct 402 challenge vs how many are phantom on the wire.mcp_trust— GET the latest MCP handshake trust snapshot (https://councilof.ai/interop/mcp-trust/latest.json): counts of how many internet-facing MCP servers answer a correct initialize handshake, how many respond with an auth challenge, and how many are unreachable.measurement_index— Read the latest signed measurement-capsule index published at https://councilof.ai/measurement-capsules/latest.json: the index root over every capsule, each batch (adapter, kind, capsule count, measurement states, batch Merkle root, record sha256, record signature and OpenTimestamps state), the index's own board signature re-verified here against the pinned did:web:csoai.org#board-attestation-1 key, and the anchor states published beside it (OpenTimestamps, Rekor, XRPL) — PENDING is never called attested.verify_capsule— Verify one measurement capsule.server_evidence— Trust per server, not totals: every published measurement capsule about ONE endpoint URL across all batches — MCP contract-parity dimensions (AUTH, PAYMENT, PROTOCOL, TOOLS, VERSION), A2A card-signature state, self-parity cells for CSOAI's own doors, and any later adapter (e.g.evidence_bundle_preview— For ONE obligation (article-50, article-53 GPAI transparency, dora or cra) and an optional subject: the obligation record, its counsel-gate status and the already-signed measurement cards that are relevant to it (count plus the first cards, each with its verify link), read live from https://councilof.ai/api/evidence-bundle.route— GSPC Route (free, decide-only).
x402-metered (call without x_payment to see the challenge; a challenge is not a payment):
commission_card— Commission one signed card-v0 receipt (surface ras.commission) for a named subject on the frozen bank via https://councilof.ai/api/request-attestation.art50_marking_evidence— Article 50 marking-evidence pack via https://councilof.ai/api/art50/marking-evidence: which machine-readable marks the named methods DETECT in these bytes right now.rwa_evidence— Per-request signed evidence card of ONE XRPL issued asset's deterministic on-ledger state via https://councilof.ai/api/rwa/evidence: AccountRoot lsf* flags, Domain, the two-way xrp-ledger.toml check (PASS / FAIL / UNCHECKABLE — unreachable is never FAIL), gateway_balances obligation, holders as the free reader has them, every raw fetch sha256'd.receipts_batch— A historical batch of the estate's measurement receipts via https://councilof.ai/api/receipts/batch: every signed card-v0 leaf whose as_of falls in [from,to] (≤200), each with its Merkle inclusion path and the public root(s) that carried it, plus the root index for the window and one manifest card citing the batch sha256.evidence_bundle— For ONE obligation (article-50, article-53 GPAI transparency, dora or cra) and an optional subject via https://councilof.ai/api/evidence-bundle: selected existing card objects with signature fields and any retained inclusion proofs, an OSCAL assessment-results wrapper and an assembly manifest.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 2fd9a9e8a81c
- 9d ago Changed 9769922560f1
- 13d ago First seen · 42 lines · 50 tokens per session scan A 00843c5795ff
gspc is a skill published in the GitHub repository CSOAI-ORG/councilof-ai (3 stars, last pushed today), licensed MIT. It adds 50 tokens to every session and 1,442 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-03.
Other skills, from other repositories
complyedge-eu-ai-act-runtime-deny
Runtime deny for EU AI Act Article 5 and Article 50 on this prompt or output via ComplyEdge TrustLint MCP. Use when the user wants agent I/O compliance enforcement, not system classification, FRIA forms, or C2PA watermarking.
hold-triage
Review and process pending governance holds. Use when holds are waiting for human approval or when the user asks about blocked operations.
code-executor-mcp
Secure code execution in sandboxed environments. Run Python, JavaScript, and shell commands safely with tier-based permissions.
memory-search-mcp
Long-term memory and context retrieval for AI agents. Semantic search across conversation history with care-weighted relevance.
web-research-mcp
Intelligent web research with source validation. Automated research synthesis with citation tracking and fact verification.
governance-setup
Configure PromptSpeak governance for a new project. Use when first setting up PromptSpeak or when the user wants to customize governance policies.