Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ericrisco/rsc-harness/logistics-opsnpx skills add ericrisco/rsc-harness --skill logistics-opsgit clone --depth 1 https://github.com/ericrisco/rsc-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ericrisco/rsc-harness/logistics-ops)<a href="https://agentmods.dev/skills/ericrisco/rsc-harness/logistics-ops"><img src="https://agentmods.dev/badge/skills/ericrisco/rsc-harness/logistics-ops.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00127 | $0.03048 |
| Opus 5 | $0.00063 | $0.01524 |
| Sonnet 5 | $0.00025 | $0.00610 |
| Haiku 4.5 | $0.00013 | $0.00305 |
Grade A, and why
logistics-ops scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 220 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Logistics-ops — the box is packed, now move it, watch it, and bring it home cheap
You run the parcel as an operation. An order is paid and packed; from here the box has exactly four things it can do — ship out, travel, go sideways, or come back — and your job is to make each one cost the least while keeping the promise the order made. You ship on the cheapest service that still hits the delivery date, you catch the parcel when it goes wrong before the customer notices, and you turn the return into the smallest possible revenue loss.
You do not decide what stock to hold or when to reorder — that is
inventory. You do not source or buy from suppliers —
that is procurement (inbound from vendors, not outbound
to customers). You do not write the on-voice customer reply — you hand the facts and
the trigger to customer-support and it writes the
apology around them. You do not host the carrier-API webhook listener — that is
api-connector-builder /
webhooks. And you do not post the refund to the books —
that is bookkeeping. You decide what calls to make and
when, and what to do with the box.
The parcel lifecycle — the spine
Every parcel moves through four legs. Two of them (EXCEPT, REVERSE) are where operators lose money by treating them as edge cases. They are not: exceptions hit 8-12% of parcels (≈18% at peak) and returns run ≈20% of online sales. Build both as first-class paths.
SHIP TRACK EXCEPT REVERSE
rate-shop ──► watch the ──► tiered ──► return / exchange /
+ cut label tracker response refund + reverse label
+ validate (event-driven) by severity + carrier claim
address ▲ ▲
└── exception ──┘ │
└────────── return requested ───────┘
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 220 lines · 127 tokens per session scan A 9ef2f5dd90ce
logistics-ops is a skill published in the GitHub repository ericrisco/rsc-harness (64 stars, last pushed 3d ago), licensed MIT. It adds 127 tokens to every session and 3,048 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
shipping-rate-calculator
Show real-time shipping rates from UPS, FedEx, USPS, and DHL at checkout by integrating directly with each carrier's rate API.
logistics-tracking
当用户询问物流运输、快递追踪、清关进度或预计到达时间时使用此技能。支持实时物流追踪和物流异常预警。.
hunt-business-logic
Hunting skill for business logic vulnerabilities. Built from 7 public bug bounty reports. Use when hunting business logic on any target.
c-tracking
Track packages across UPS, FedEx, USPS, and DHL using the ordercli CLI. Look up tracking numbers, get current status, estimated delivery dates, and shipment history without visiting carrier websites.
subscription-billing
Use when integrating subscription billing, handling Stripe webhooks, implementing trial logic, managing upgrades/downgrades, or building dunning flows.
returns-management
Process returns end to end — generate prepaid labels, apply refund or exchange logic, update inventory, and notify customers automatically.