Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CSOAI-ORG/councilof-ai --skill sign-artifactgit clone --depth 1 https://github.com/CSOAI-ORG/councilof-aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/csoai-org/councilof-ai/sign-artifact)<a href="https://agentmods.dev/skills/csoai-org/councilof-ai/sign-artifact"><img src="https://agentmods.dev/badge/skills/csoai-org/councilof-ai/sign-artifact/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/csoai-org/councilof-ai/sign-artifact"><img src="https://agentmods.dev/badge/skills/csoai-org/councilof-ai/sign-artifact.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.00394 |
| Opus 5.5 | $0.00024 | $0.00158 |
| Sonnet 5.5 | $0.00012 | $0.00079 |
| Haiku 4.5 | $0.00006 | $0.00039 |
Grade A, and why
sign-artifact scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Sign / seal an artifact
What this is
csoai_sign (MCP csoai-governance) binds an Ed25519 signature to the bytes you pass. That is a
receipt: these bytes, this key, this moment.
It is not a certificate that the model, the repo, the company or the person is safe, legal, compliant or approved. A seal answers "did these bytes exist and were they unchanged?" — nothing else.
Steps
- Identify the exact file or string. Prefer a file path in the workspace.
- Call MCP
csoai_sign. If the governance MCP is unavailable, say so plainly and point atnpx -y csoai-governance-mcp. Never fabricate a signature. - Return the fingerprint, the signature and the public key.
- Offer
csoai_verifyon the same payload so the user sees the round-trip. - If the artifact is an eval scoreboard, say plainly that a Council measurement card
(
gspc.measurement-card) is a different object produced by the measurement body, not by this local seal. Do not blur them.
Forbidden
- Printing a badge, a shield, or the word "certified"
- Signing and then saying the product "passed Council of AI"
- Inventing a signature when the service is UNREACHABLE — return the error instead
- Writing the key, or any secret, into the artifact, the log, or the chat
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 34 lines · 61 tokens per session scan A 7e380886926c
sign-artifact is a skill published in the GitHub repository CSOAI-ORG/councilof-ai (4 stars, last pushed today), licensed MIT. It adds 61 tokens to every session and 394 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-27.
Other skills, from other repositories
agoragentic-anydoc-document-evidence
Convert a local Word, PowerPoint, spreadsheet, OpenDocument, RTF, EPUB, CSV, or text-based PDF into bounded Markdown and an Agoragentic evidence handoff. Use when an agent needs document contents plus runtime-verified provenance, explicit evidence coverage, known-loss warnings, and a pending-or-incomplete parse…
complyedge-eu-ai-act-check-and-cite
Check this prompt or output against EU AI Act Article 5 and Article 50 rules and cite the article, via the ComplyEdge TrustLint MCP. Use when the user wants agent I/O checked and cited, not system classification, FRIA forms, or C2PA watermarking.
cvx
Create, validate, and render professional CV/resume PDFs from plain YAML using CVX — fully local, no accounts. Use when the user wants to write a CV or resume, convert an existing CV to a maintained format, tailor a CV for a job application, or produce an ATS-safe variant. Covers the cv-content/ YAML schema, the…
file-conversion
Convert files between formats — PDF to Word, HEIC to JPG, MP4 to MP3, CSV to JSON, EPUB to MOBI, and 1,000+ supported routes across images, video, audio, documents, data, fonts, ebooks, and archives. Anonymous compatibility access is currently available via changethisfile.com; verified keys use the shared developer…
legacy-shield
Secure zero-knowledge document vault for AI agents. Persistence for your secrets.
pandadoc
Every PandaDoc endpoint, plus an offline document pipeline no other PandaDoc tool has - stalled deals, aging, recipient engagement, and open quote value from a local store. Trigger phrases: check my pandadoc pipeline, which proposals are stalled, list pandadoc documents, create a document from a template, how much…