Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Gen-Verse/PAST-Bench --skill a0-manage-plugingit clone --depth 1 https://github.com/Gen-Verse/PAST-BenchWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/gen-verse/past-bench/a0-manage-plugin)<a href="https://agentmods.dev/skills/gen-verse/past-bench/a0-manage-plugin"><img src="https://agentmods.dev/badge/skills/gen-verse/past-bench/a0-manage-plugin/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/gen-verse/past-bench/a0-manage-plugin"><img src="https://agentmods.dev/badge/skills/gen-verse/past-bench/a0-manage-plugin.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00072 | $0.03382 |
| Opus 5 | $0.00036 | $0.01691 |
| Sonnet 5 | $0.00014 | $0.00676 |
| Haiku 4.5 | $0.00007 | $0.00338 |
Grade B, and why
a0-manage-plugin scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletemediumDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf /a0/usr/plugins/<name>/ Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
import urllib.request, json How it starts
The opening of the file, as written. The whole thing — 366 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Zero Plugin Management
Action Routing
Identify what the user needs and jump to the relevant section:
| User need | Section |
|---|---|
| Find / search / browse available plugins | Browse Plugin Hub |
| Scan a plugin for security issues | Security Scan |
| Install a plugin | Install a Plugin |
| Update an installed plugin | Update a Plugin |
| Uninstall / remove a plugin | Uninstall a Plugin |
| Enable or disable a plugin | Activation |
| Plugin not loading / crashing / missing | Read /a0/skills/a0-debug-plugin/SKILL.md |
| Explain how plugin discovery works | Read /a0/skills/a0-debug-plugin/SKILL.md |
Browse Plugin Hub
Fetch the current community index:
import urllib.request, json
url = "https://github.com/agent0ai/a0-plugins/releases/download/generated-index/index.json"
with urllib.request.urlopen(url, timeout=30) as resp:
index = json.loads(resp.read())
plugins = index.get("plugins", {})
Each entry in plugins is keyed by plugin name with fields: title, description, github, tags, thumbnail (URL if available).
To search: filter by keyword in title, description, or tags.
To list installed plugins locally:
ls /a0/usr/plugins/
Alternatively via UI: Open the Plugins dialog in Agent Zero and switch to the Browse tab (or click Install in the toolbar to open the Plugin Hub).
Security Scan
The _plugin_scan plugin provides an LLM-driven security scanner that clones the repository, reads all files, and produces a structured markdown report covering 6 checks: structure match, static code review, agent manipulation detection, remote communication, secrets access, and obfuscation.
Pre-install scan protocol (follow this for every install)
Always offer to scan before installing. If the user hasn't explicitly declined, say:
"Before installing, I strongly recommend running a security scan on this plugin. Third-party plugins execute code inside your Agent Zero environment. Should I scan it first? The scan typically takes 2-4 minutes."
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 366 lines · 0 tokens per session scan B d83ab99685a5
a0-manage-plugin is a skill published in the GitHub repository Gen-Verse/PAST-Bench (25 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 72 tokens to every session and 3,382 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it B with 2 findings (recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
lemmalog
Externalize working memory and logical state into the lemmalog Datalog engine (MCP). Use for ANY multi-step task where state should outlive one context window or span agents: long investigations, debugging sessions, audits, multi-agent searches, systematic explorations, planning with many interdependent constraints…
commit
Atomic git commit with conventional message. Use when the user says "commit", "save my changes", "commit this", or wants to create a git commit. Stages specific files, writes a conventional commit message with body explaining non-obvious decisions. Never uses git add -A.
python-run
Run and debug Python scripts in the project. Use when the user says "run python", "execute this script", "debug this py file", or wants to run/modify a .py file. Handles dependency checks, linting, execution, and error analysis.
nornweave-api
Give AI agents their own email inboxes using the NornWeave API. Use when building email agents, sending/receiving emails programmatically, managing inboxes, retrieving threads, searching messages, or integrating with email providers (Mailgun, SES, SendGrid, Resend). NornWeave provides LLM-ready markdown parsing and…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes — find the root cause first instead of guessing at symptom patches.
code-review-feedback
Use when receiving code-review feedback, before implementing suggestions — especially when feedback seems unclear or technically questionable. Verify against the codebase and reason about each item instead of agreeing performatively or implementing blindly.