Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Far-Se/tabame --skill tabame_plugingit clone --depth 1 https://github.com/Far-Se/tabameWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/far-se/tabame/tabame_plugin)<a href="https://agentmods.dev/skills/far-se/tabame/tabame_plugin"><img src="https://agentmods.dev/badge/skills/far-se/tabame/tabame_plugin.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00074 | $0.23460 |
| Opus 5 | $0.00037 | $0.11730 |
| Sonnet 5 | $0.00015 | $0.04692 |
| Haiku 4.5 | $0.00007 | $0.02346 |
Grade A, and why
tbm-plugin scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
**HTTP / APIs** — use the runtime's HTTP client (`requests`/`urllib` in Python, How it starts
The opening of the file, as written. The whole thing — 1,755 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Tabame Launcher Plugin — Authoring Skill
If you're the AI reading this: treat everything below as authoritative. Do not invent fields or message types that aren't documented here. Choose the view from the user's task and the shape of the data. Do not default to a
list+ preview merely because the smoke-test templates use it. A substantial plugin should feel like a small, navigable application made of purpose-built pages, not a command list with every capability hidden in Ctrl+K.
1. What a plugin is
Tabame's launcher can be extended with plugins — external scripts written in Python, Node.js, or Bun. A plugin is a normal script that Tabame launches as a long-running child process when the user types the plugin's keyword in the launcher.
The conversation is newline-delimited JSON over stdin/stdout:
- Tabame → your script (stdin): UI events — the user's query text, selection changes, actions, and a shutdown signal.
- Your script → Tabame (stdout): render frames — JSON objects that fully describe what the launcher should display right now.
Your script is the source of truth for the UI. Every time you want the launcher to show something different, you print a new render frame. The process stays alive the whole time the plugin's keyword owns the query, and is shut down when the user leaves it.
There is no SDK — just read lines from stdin and print lines to stdout. No third-party packages are needed for the protocol itself; if your plugin's own logic wants extra libraries, see §4.1.
2. Quick start (minimal protocol example)
A plugin is a folder with a plugin.json and a script. Minimal Python plugin
that echoes the query as a single-item list. This only demonstrates the wire
protocol; it is not a UX template for a real plugin:
plugin.json
{
"name": "Hello",
"category": "Utilities",
"keyword": "hi",
"runtime": "python",
"version": "1.0.0",
"entry": "main.py"
}
main.py
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 1,755 lines · 74 tokens per session scan A 8be142b83cda
tbm-plugin is a skill published in the GitHub repository Far-Se/tabame (364 stars, last pushed 3d ago), licensed MIT. It adds 74 tokens to every session and 23,460 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
reverse-engineering-tools
Guide for reverse engineering protected games and anti-cheat components across user mode, kernel mode, and hypervisor-aware environments. Use this skill when analyzing drivers, IOCTL protocols, callback registration, injected-code artifacts, integrity checks, protected binaries, or debugging security-sensitive game…
shadcn-ui-flutter
A comprehensive Flutter UI library inspired by shadcn/ui. Provides high-quality, customizable, and accessible components including Buttons, Cards, Forms, and more. Use this skill when building Flutter UIs, implementing design systems, or needing specific component usage examples.
yt-dlp-music-downloads
Download YouTube playlists into the Navidrome music library.
firebase-messaging
Use when setting up Firebase Cloud Messaging, managing permissions and tokens, handling background/foreground notification taps, or dispatching messages server-side (HTTP v1).
cleanup-code-inspections
Reduce technical debt and improve code quality by systematically resolving static analysis warnings.
cleanup-unused-assets
Reduce plugin size by scanning resources/icons and removing unreferenced assets.