Borrowing it
Nothing to install: this file belongs to dosco/aithy. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/dosco/aithy/main/.claude/skills/ax-agent/SKILL.mdgit clone --depth 1 https://github.com/dosco/aithyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dosco/aithy/ax-agent)<a href="https://agentmods.dev/skills/dosco/aithy/ax-agent"><img src="https://agentmods.dev/badge/skills/dosco/aithy/ax-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dosco/aithy/ax-agent"><img src="https://agentmods.dev/badge/skills/dosco/aithy/ax-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00131 | $0.08000 |
| Opus 5.5 | $0.00052 | $0.03200 |
| Sonnet 5.5 | $0.00026 | $0.01600 |
| Haiku 4.5 | $0.00013 | $0.00800 |
Grade A, and why
ax-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
88% identical to ax-agent — 23 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 696 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AxAgent Codegen Rules (@ax-llm/ax)
Use this skill to generate small, correct AxAgent code. Prefer modern factory-style APIs and copyable patterns. Do not write tutorial prose unless the user explicitly asks for explanation.
Your job is to choose the smallest correct AxAgent shape for the user's needs:
- If the user wants a normal tool-using assistant, keep the config minimal.
- If the user wants long-running code execution, use the
ax-agent-rlmskill. - If the user wants callbacks, logs, tracing, or usage data, use the
ax-agent-observabilityskill. - If the user wants dynamic memory retrieval or skill-guide loading, use the
ax-agent-memory-skillsskill. - If the user wants tuning or eval with
agent.optimize(...), use theax-agent-optimizeskill. - If the user wants MCP transports, authentication, catalogs, subscriptions,
tasks, Apps, or event-driven wake/resume, use the
ax-mcpskill.
Use These Defaults
- Use
agent(...), notnew AxAgent(...). - Prefer string signatures or
f()signatures over hand-written signature objects. - Put
ai,judgeAI, andagentIdentityon theagent(...)config when you want instance defaults or child-agent metadata. - Prefer
fn(...)for host-side function definitions instead of hand-writing JSON Schema objects. - Prefer namespaced functions such as
utils.search(...)orkb.find(...). - Pass child agents directly in
functions: [...]. They land under theiragentIdentity.namespace(orutilsif unset), exactly like afn()tool. - If discovery is enabled, call
discover(...)before using callables whose docs are not already in the prompt. - Use explicit child agents in
functions: [...]for specialist delegation; do not model that as recursivellmQuery(...). - Add
bubbleErrorsonly for fatal infrastructure errors that should abort.forward().
Decision Guide
Map user intent to agent shape before writing code:
- "Use tools and answer" -> plain
agent(...)with local functions, no extra observability. - "Need child agents with distinct responsibilities" -> add child agents to the parent's
functions: [...]list and set each child'sagentIdentity.namespacewhen you want a specific runtime call site such asteam.writer(...). - "Need tool discovery because names/schemas are not stable" -> enable discovery and generate discovery-first actor code.
- "Need certain errors to escape the agent loop" -> add
bubbleErrorswith error classes; those errors propagate through function handlers, actor code, andllmQuery(...)sub-queries to.forward(). - "Inspect large context with code", "RLM", or "
llmQuery(...)" -> useax-agent-rlm. - "Need debugging, traces, progress updates, tool-call logs, chat logs, or usage" -> use
ax-agent-observability. - "Need memories, recall, dynamic skill guides,
discover({ skills }), or loaded/used tracking" -> useax-agent-memory-skills.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +64 lines · +22 tokens per session 0c5e6e840944
- 1mo ago First seen · 632 lines · 109 tokens per session scan A ca31f31ca6f2
ax-agent is a skill published in the GitHub repository dosco/aithy (108 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 131 tokens to every session and 8,000 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 88% identical to ax-agent, differing in 23 lines, and is treated as a copy.
Other skills, from other repositories
offensive-vuln-classes
Exploit development curriculum covering core vulnerability classes with real-world CVE case studies: stack/heap buffer overflows, use-after-free, integer overflows, format strings, type confusion, and race conditions. Use when learning or teaching vuln classes, researching specific CVE patterns, or building exploit…
offensive-crypto-attacks
Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world applications. Covers padding oracle attacks against CBC-mode ciphers with PKCS7 padding (Vaudenay's original attack through modern padbuster automation), ECB mode exploitation including block cut-and-paste and…
offensive-phishing
Phishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle: infrastructure provisioning (GoPhish, SMTP relay configuration, domain acquisition and aging, SPF/DKIM/DMARC alignment), payload delivery vectors (Office macro weaponization, HTA droppers, ISO/IMG…
offensive-social-engineering
Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing engagements. Covers pretexting methodology (persona creation, authority and urgency psychological triggers, rapport building), vishing (voice phishing via caller ID spoofing, IVR system exploitation…
offensive-parameter-pollution
HTTP parameter pollution (HPP) checklist: duplicate parameter injection, backend vs frontend parsing differences, WAF bypass via HPP, server-side vs client-side HPP, and practical exploitation patterns. Use when testing web applications for parameter handling flaws.
code-review
Analyze pull requests and diffs for bugs, security vulnerabilities, performance issues, style violations, and test coverage gaps — producing structured, actionable feedback.