Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CSOAI-ORG/councilof-ai --skill packgit clone --depth 1 https://github.com/CSOAI-ORG/councilof-aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/csoai-org/councilof-ai/pack)<a href="https://agentmods.dev/skills/csoai-org/councilof-ai/pack"><img src="https://agentmods.dev/badge/skills/csoai-org/councilof-ai/pack/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/csoai-org/councilof-ai/pack"><img src="https://agentmods.dev/badge/skills/csoai-org/councilof-ai/pack.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.00462 |
| Opus 5.5 | $0.00024 | $0.00185 |
| Sonnet 5.5 | $0.00012 | $0.00092 |
| Haiku 4.5 | $0.00006 | $0.00046 |
Grade A, and why
pack scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Pack assemble (CSOAI 402)
Agents pay to assemble the pack; the board stays free. This is not a score, a certificate, or a way to paint the empty cells.
Call
The paid rails are served by Council of AI. Read the actual 402 challenge first — it carries the asset, the amount and the pay-to address, and the terms differ per request:
https://councilof.ai/api/evidence-bundle— one obligation (article-50,article-53,dora,cra), optionally narrowed to a subject.https://councilof.ai/api/receipts/batch— a historical window of signed measurement receipts.
preview=true (or the free evidence_bundle_preview MCP tool) returns the count, span and digest
without charging anything. Use it first so the user knows what they are buying.
How to present
- If 402: say invoice for assembly, and quote the scheme, network and amount from the challenge itself. Never say "pay to pass". There is no price on any Council of AI surface.
- If 200: print the bundle contents — the selected cards, their verification links, and the manifest
signing status. A returned unsigned manifest declares
sig_ed25519: nulland an unsigned reason; report it as unsigned. - Quote the verify URL. The board at
/api/gspcand verification at/gspc-verifystay free.
Forbidden
- Filling empty cells
- Treating the pack as a grade, a rank, or a conformance determination
- Hosting a 402 on
/api/gspcor on the verify page - Listing a 402 anywhere as pay-to-pass
- Settling a payment from a plugin session without the owner's explicit instruction
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 39 lines · 61 tokens per session scan A b6f9c2fc8dff
pack is a skill published in the GitHub repository CSOAI-ORG/councilof-ai (3 stars, last pushed today), licensed MIT. It adds 61 tokens to every session and 462 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-27.
Other skills, from other repositories
complyedge-eu-ai-act-check-and-cite
Check this prompt or output against EU AI Act Article 5 and Article 50 rules and cite the article, via the ComplyEdge TrustLint MCP. Use when the user wants agent I/O checked and cited, not system classification, FRIA forms, or C2PA watermarking.
hold-triage
Review and process pending governance holds. Use when holds are waiting for human approval or when the user asks about blocked operations.
eu-ai-act-compliance-mcp
EU AI Act compliance checking and risk classification. Automated compliance validation for high-risk AI systems with Article 11 technical documentation generation.
mima-close-gaps
Run the compliance copilot loop — observe posture, identify gaps, dry-run proposed evidence records where possible, present for human approval, then write approved records. Use when the user asks to close compliance gaps, improve their EU AI Act score, or fix failing governance gates.
mima-register-systems
Run the Art. 9 intake workflow — find every AI system without an airiskassessment record, gather the required fields, and register each one. Use when the user asks to register systems, fix Art. 9 gaps, or prepare for the EU AI Act deadline.
mima-quarterly-evidence
Run the quarterly evidence collection workflow — find the stalest controls by record type, collect completion details for each, dry-run to confirm controls earned, then write approved records. Use at the end of each quarter when a GRC manager has completed governance activities (risk assessments, model evaluations…