Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add edycutjong/linelock --skill worldcup-linelockgit clone --depth 1 https://github.com/edycutjong/linelockWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/edycutjong/linelock/worldcup-linelock)<a href="https://agentmods.dev/skills/edycutjong/linelock/worldcup-linelock"><img src="https://agentmods.dev/badge/skills/edycutjong/linelock/worldcup-linelock/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/edycutjong/linelock/worldcup-linelock"><img src="https://agentmods.dev/badge/skills/edycutjong/linelock/worldcup-linelock.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00121 | $0.01250 |
| Opus 5.5 | $0.00048 | $0.00500 |
| Sonnet 5.5 | $0.00024 | $0.00250 |
| Haiku 4.5 | $0.00012 | $0.00125 |
Grade A, and why
worldcup-linelock scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
worldcup-linelock
Teach any harness (Claude Code / Cursor / Codex) to be a buyer on LineLock: a pay-per-pick World Cup edge API on Injective EVM where the x402 USDC receipt IS the pick's pre-kickoff timestamp, plus a free public ledger that CLV-scores every settled pick (losses included).
Install:
npx skills add https://github.com/edycutjong/linelock --skill worldcup-linelock
Config: set LINELOCK_API (default https://linelock.edycu.dev) and, to
pay, OPS_WALLET_PK (a funded Injective EVM key holding USDC).
When to use
- "Get me the next World Cup knockout edge / pick."
- "Is this tipster real? Check their CLV." → read the free ledger, no payment.
- "Pay for the edge and prove the receipt predates kickoff."
The flow (4 steps)
1. Check USDC balance (Injective MCP server — free, no payment)
Use the Injective MCP server (InjectiveLabs/mcp-server, stdio,
INJECTIVE_NETWORK=mainnet):
account_balances { address }→ confirm ≥ 0.05 USDC on Injective.usdc_native_info→ the USDC contract address + decimals used by the quote (do not hardcode from docs; pin from here).- If low, fund via CCTP:
cctp_supported_chains→ burn on Base (domain 6) →cctp_attestation_status→cctp_minton Injective.address_normalizeconvertsinj1…↔0x…for display.
2. Pay the x402 quote (first-party client — never hand-roll signing)
POST {LINELOCK_API}/api/edge # no payment header → HTTP 402 + quote
The 402 body (and the PAYMENT-REQUIRED base64 header) is an x402 v2
PaymentRequired: accepts[0] = { network: "eip155:1776", asset: <USDC>, amount: "50000", payTo, scheme: "exact" }. Pay with the shipped client:
import { createInjectiveClient, parsePaymentResponseHeader } from '@injectivelabs/x402/client';
const client = createInjectiveClient({ privateKey: process.env.OPS_WALLET_PK,
preferredNetworks: ['eip155:1776'], defaultToken: 'USDC' });
const res = await client.fetch(`${API}/api/edge`, { method: 'POST' }); // auto-handles the 402
const receipt = parsePaymentResponseHeader(res); // { success, transaction, network, payer }
receipt.transaction is the on-chain tx — its block time is your pre-kickoff
proof (verify on Blockscout: https://blockscout.injective.network/tx/<tx>).
The repo's scripts/buyer.ts implements exactly this (run npm run buyer for
the free 402-parse path, -- --pay to pay).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 97 lines · 121 tokens per session scan A e5164dde3224
worldcup-linelock is a skill published in the GitHub repository edycutjong/linelock (0 stars, last pushed 3d ago), licensed MIT. It adds 121 tokens to every session and 1,250 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
cuporacle
Use CupOracle to answer FIFA World Cup 2026 questions (fixtures, live scores, consensus odds, knockout bracket) and to buy a vetted, CLV-audited edge that the agent pays for ITSELF via x402 on Injective — under a spend cap, always citing the on-chain receipt. Invoke when the user asks about a World Cup match, "who's…
ScuttlePay API
This skill should be used when the user needs to interact with the ScuttlePay API to manage an AI agent's USDC wallet. Typical triggers: "check my ScuttlePay balance", "search products on ScuttlePay", "buy a product with USDC", "view my transaction history", "get my wallet address", "list merchants", or any request to…
mpp-agent
Pay HTTP 402 APIs via Machine Payments Protocol (MPP).
bridge
Cross-chain token transfers using Wormhole and CCTP.
hyperliquid
Hyperliquid L1 perps DEX (69% market share).
marginfi
MarginFi — Solana lending and borrowing.