aithy: Skill for Claude Code

.claude/skills/ax-agent/SKILL.md

ax-agent is a skill for Claude Code from dosco/aithy. It costs 131 tokens per session (8,000 once invoked), scanned A, a copy of ax-agent, Apache-2.0.

A coding guide for building AxAgent, a framework for AI assistants that can use tools and other agents. It covers agents, child agents, function namespaces, clarification, errors, and host-side results.

In plain words
What is it for?
Use it to create ordinary tool-using assistants, child-agent workflows, named tool groups, discovery behavior, clarification flows, or error handling.
Why use it?
It helps choose a small, correct agent setup instead of manually assembling configuration and tool schemas.

Skill for Claude Code

Written for Claude Code: installed under .claude/.

This is dosco/aithy's own configuration. It tells Claude Code how to work on aithy itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything aithy configures →

Reuse

Borrowing it

Nothing to install: this file belongs to dosco/aithy. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/dosco/aithy/main/.claude/skills/ax-agent/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/dosco/aithy

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ax-agent

README.md
[![agentmods](https://agentmods.dev/badge/skills/dosco/aithy/ax-agent/github.svg)](https://agentmods.dev/skills/dosco/aithy/ax-agent)
Your own site
<a href="https://agentmods.dev/skills/dosco/aithy/ax-agent"><img src="https://agentmods.dev/badge/skills/dosco/aithy/ax-agent/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ax-agent

Your own site · 80×15
<a href="https://agentmods.dev/skills/dosco/aithy/ax-agent"><img src="https://agentmods.dev/badge/skills/dosco/aithy/ax-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 131 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 8,000 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 88% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00131 $0.08000
Opus 5.5 $0.00052 $0.03200
Sonnet 5.5 $0.00026 $0.01600
Haiku 4.5 $0.00013 $0.00800

Measured 1mo ago against content hash 0c5e6e840944, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ax-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

88% identical to ax-agent — 23 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.claude/skills/ax-agent/SKILL.md · 696 lines

How it starts

The opening of the file, as written. The whole thing — 696 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AxAgent Codegen Rules (@ax-llm/ax)

Use this skill to generate small, correct AxAgent code. Prefer modern factory-style APIs and copyable patterns. Do not write tutorial prose unless the user explicitly asks for explanation.

Your job is to choose the smallest correct AxAgent shape for the user's needs:

  • If the user wants a normal tool-using assistant, keep the config minimal.
  • If the user wants long-running code execution, use the ax-agent-rlm skill.
  • If the user wants callbacks, logs, tracing, or usage data, use the ax-agent-observability skill.
  • If the user wants dynamic memory retrieval or skill-guide loading, use the ax-agent-memory-skills skill.
  • If the user wants tuning or eval with agent.optimize(...), use the ax-agent-optimize skill.
  • If the user wants MCP transports, authentication, catalogs, subscriptions, tasks, Apps, or event-driven wake/resume, use the ax-mcp skill.

Use These Defaults

  • Use agent(...), not new AxAgent(...).
  • Prefer string signatures or f() signatures over hand-written signature objects.
  • Put ai, judgeAI, and agentIdentity on the agent(...) config when you want instance defaults or child-agent metadata.
  • Prefer fn(...) for host-side function definitions instead of hand-writing JSON Schema objects.
  • Prefer namespaced functions such as utils.search(...) or kb.find(...).
  • Pass child agents directly in functions: [...]. They land under their agentIdentity.namespace (or utils if unset), exactly like a fn() tool.
  • If discovery is enabled, call discover(...) before using callables whose docs are not already in the prompt.
  • Use explicit child agents in functions: [...] for specialist delegation; do not model that as recursive llmQuery(...).
  • Add bubbleErrors only for fatal infrastructure errors that should abort .forward().

Decision Guide

Map user intent to agent shape before writing code:

  • "Use tools and answer" -> plain agent(...) with local functions, no extra observability.
  • "Need child agents with distinct responsibilities" -> add child agents to the parent's functions: [...] list and set each child's agentIdentity.namespace when you want a specific runtime call site such as team.writer(...).
  • "Need tool discovery because names/schemas are not stable" -> enable discovery and generate discovery-first actor code.
  • "Need certain errors to escape the agent loop" -> add bubbleErrors with error classes; those errors propagate through function handlers, actor code, and llmQuery(...) sub-queries to .forward().
  • "Inspect large context with code", "RLM", or "llmQuery(...)" -> use ax-agent-rlm.
  • "Need debugging, traces, progress updates, tool-call logs, chat logs, or usage" -> use ax-agent-observability.
  • "Need memories, recall, dynamic skill guides, discover({ skills }), or loaded/used tracking" -> use ax-agent-memory-skills.

Read the full file on GitHub · 696 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +64 lines · +22 tokens per session 0c5e6e840944
  2. 1mo ago First seen · 632 lines · 109 tokens per session scan A ca31f31ca6f2

Subscribe to this mod's changes

ax-agent is a skill published in the GitHub repository dosco/aithy (108 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 131 tokens to every session and 8,000 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 88% identical to ax-agent, differing in 23 lines, and is treated as a copy.

Related

Other skills, from other repositories

offensive-vuln-classes

Exploit development curriculum covering core vulnerability classes with real-world CVE case studies: stack/heap buffer overflows, use-after-free, integer overflows, format strings, type confusion, and race conditions. Use when learning or teaching vuln classes, researching specific CVE patterns, or building exploit…

Miosa-osa/OSA · 69 tokens

offensive-crypto-attacks

Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications. Covers padding oracle attacks against CBC-mode ciphers with PKCS7 padding (Vaudenay's original attack through modern padbuster automation), ECB mode exploitation including block cut-and-paste and…

Miosa-osa/OSA · 199 tokens

offensive-phishing

Phishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle: infrastructure provisioning (GoPhish, SMTP relay configuration, domain acquisition and aging, SPF/DKIM/DMARC alignment), payload delivery vectors (Office macro weaponization, HTA droppers, ISO/IMG…

Miosa-osa/OSA · 202 tokens

offensive-social-engineering

Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements. Covers pretexting methodology (persona creation, authority and urgency psychological triggers, rapport building), vishing (voice phishing via caller ID spoofing, IVR system exploitation…

Miosa-osa/OSA · 193 tokens

offensive-parameter-pollution

HTTP parameter pollution (HPP) checklist: duplicate parameter injection, backend vs frontend parsing differences, WAF bypass via HPP, server-side vs client-side HPP, and practical exploitation patterns. Use when testing web applications for parameter handling flaws.

Miosa-osa/OSA · 57 tokens

code-review

Analyze pull requests and diffs for bugs, security vulnerabilities, performance issues, style violations, and test coverage gaps — producing structured, actionable feedback.

Miosa-osa/OSA · 31 tokens