Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add goshippo/ai --skill label-purchasegit clone --depth 1 https://github.com/goshippo/aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/goshippo/ai/label-purchase)<a href="https://agentmods.dev/skills/goshippo/ai/label-purchase"><img src="https://agentmods.dev/badge/skills/goshippo/ai/label-purchase.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.01734 |
| Opus 5 | $0.00014 | $0.00867 |
| Sonnet 5 | $0.00006 | $0.00347 |
| Haiku 4.5 | $0.00003 | $0.00173 |
Grade A, and why
label-purchase scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 151 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Label Purchase
Purchases Are Live
Label purchases charge the authorized Shippo account for real. Before purchasing, explicitly state "this will charge your Shippo account" with the carrier, service, and cost, and require the user to acknowledge. Do not purchase without that confirmation.
Purchase Confirmation Gate
Before every call to CreateTransaction, summarize the following and ask the user for explicit confirmation:
- Carrier and service level
- Estimated cost
- Estimated delivery time
- Origin and destination
Do not proceed without explicit user confirmation.
Domestic Label
- Optionally validate both addresses with
ValidateAddress(see Address Validation). - Call
CreateShipmentwithaddress_from,address_to(as inline address objects using v1 field names --street1,city,state,zip,country),parcels, andasync: false. - Present rates to the user. Let them choose.
- Confirm purchase (see Purchase Confirmation Gate above).
- Call
CreateTransactionwith:rate(selected rate object_id),label_file_type(defaultPDF_4x6),async: false. - Check response
status:SUCCESS: returntracking_number,label_url(display the COMPLETE URL -- S3 signed URLs break if truncated), andtracking_url_provider.QUEUED/WAITING: pollGetTransactionuntil resolved.ERROR: report messages from themessagesarray.
International Label
All domestic steps apply, plus customs handling before shipment creation. See shippo/references/customs-guide.md for the full customs workflow.
- Optionally validate addresses with
ValidateAddress. Sender must includeemailandphone. Ask if missing. - Create customs items: call
CreateCustomsItemper item (description, quantity, net_weight, mass_unit, value_amount, value_currency, origin_country, tariff_number). Alternatively, you can skip this step and pass inline item objects directly in the declaration (step 3). - Create the customs declaration: call
CreateCustomsDeclarationwith contents_type, non_delivery_option, certify: true, certify_signer, and the items (either object_ids from step 2, or inline item objects). Seeshippo/references/customs-guide.mdfor field details. - Call
CreateShipmentwith all standard fields pluscustoms_declaration(the declaration object_id). - Present rates, confirm purchase (see Purchase Confirmation Gate), then purchase label and return results as in the domestic flow.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 151 lines · 28 tokens per session scan A cd1451fa57b2
label-purchase is a skill published in the GitHub repository goshippo/ai (2 stars, last pushed 4d ago), licensed MIT. It adds 28 tokens to every session and 1,734 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
shop
Use when the user wants Axon-backed product research, product comparisons, review synthesis, budget-aware recommendations, or cart preparation without checkout.
product-price-monitor
Watch product, flight, or listing prices; alert on target.
refunds
Check refund eligibility and use the refund-order tool safely.
snack-batching
Weekly snack-request batching for {{officechannel}}. Collects Slack shortcut submissions since the last order, consolidates duplicates and standing staples, builds a cart against {{preferredvendor}} within {{weeklybudget}}, and posts it for the office manager to approve before anything is placed.
logistics-ops
Use when an order is paid and packed and the box now has to move, go sideways, or come back — picking a carrier and service and cutting a label, reacting to a delivery exception, getting ahead of where-is-my-order tickets, running a return, exchange or refund with its reverse label, filing a carrier claim before the…
cmdb-patterns
Create ServiceNow CIs and cmdbrelci relationships, walk upstream/downstream impact, detect orphan/stale CIs, and align discovered CIs with the proper sysclassname hierarchy.