Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add happy520ai/unified-ai-system --skill unified-ai-gatewaygit clone --depth 1 https://github.com/happy520ai/unified-ai-systemWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/happy520ai/unified-ai-system/unified-ai-gateway)<a href="https://agentmods.dev/skills/happy520ai/unified-ai-system/unified-ai-gateway"><img src="https://agentmods.dev/badge/skills/happy520ai/unified-ai-system/unified-ai-gateway/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/happy520ai/unified-ai-system/unified-ai-gateway"><img src="https://agentmods.dev/badge/skills/happy520ai/unified-ai-system/unified-ai-gateway.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 79 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium MCP Rug Pull · line 57 Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.Fix: Pin the image: image:tag or image@sha256:abc123
- medium MCP Rug Pull · line 61 Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.Fix: Pin the image: image:tag or image@sha256:abc123
- medium MCP Rug Pull · line 126 Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.Fix: Pin the image: image:tag or image@sha256:abc123
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.04017 |
| Opus 5.5 | $0.00014 | $0.01607 |
| Sonnet 5.5 | $0.00007 | $0.00803 |
| Haiku 4.5 | $0.00003 | $0.00402 |
Grade A, and why
unified-ai-gateway scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 29d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
grep -RInE 'child_process|spawn\(|fetch\(|AI_GATEWAY_MCP_URL|process\.env|writeFile|appendFile|unlink|rm\(' "$REVIEW_DIR/rootfs/app/packages/mcp-server/src" "$REVIEW_DIR/rootfs/app/packages/shared-sdk/src" > "$REVIEW_DIR How it starts
The opening of the file, as written. The whole thing — 290 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Unified AI Gateway
Overview
Use the official unified-ai-system MCP server to inspect and exercise a local
AI gateway without provider credentials. This skill file provides operating
guidance; it does not install the server or change Codex configuration by
itself. The official Codex plugin bundles the MCP definition, while skill-only
installations require the manual setup below.
Version Note
These are two different things and they are not equal today:
- Current release:
v0.8.0. It declares and ships fifteen tool names, and the 60-second demo command in the README names that version. Read it live withnode tools/verify-image-roster.mjs 0.8.0, which reports the roster from the image bytes rather than from this file. That command needs a clone of the repository, run from its root: the script ships with the source, not inside an installed skill bundle. Without a clone, the same roster is published at https://happy520ai.github.io/unified-ai-system/verify-mcp-docker-image.html. - Newest content review:
0.8.0(review), read from the published layer tarballs withnode tools/inspect-image-filesystem.mjs 0.8.0- no Docker engine and nothing executed. It found one thing worth knowing before you pull: thelinux/arm64tag carries x86-64 native modules, includingbetter_sqlite3.node, so request--platform linux/amd64. - Reviewed and pinned below:
0.4.9. The inspection procedure in this file pins that image's recorded digests because0.4.9is the newest version reviewed by that procedure, which exports a container filesystem with Docker. The 0.8.0 review above uses a different method and pins its own digests, so the table below still describes 0.4.9 until it is rewritten against a 0.8.0 export.0.4.9carries 9 of the fifteen names: the model-backed enhancement, knowledge retrieval and workflow execution tools arrived at 0.5.0, and the three governance tools at 0.8.0.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 29d ago Changed · +5 lines 03930a6f114a
- 1mo ago Changed · +44 lines 31462cefac61
- 1mo ago Changed 9704e274e08d
- 1mo ago First seen · 241 lines · 35 tokens per session scan A 278167281288
unified-ai-gateway is a skill published in the GitHub repository happy520ai/unified-ai-system (10 stars, last pushed 3d ago), licensed Apache-2.0. It adds 35 tokens to every session and 4,017 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
omni-compression
Configure RTK (command output), Caveman (prose), and stacked compression modes. Manage language packs, custom rules, and test prompt compression reducing tokens by 60–90%.
cli-compression
Configure and test prompt compression from the CLI. Manage RTK filters, Caveman rules, stacked compression modes, and preview compression output with real prompts.
n8n-agents
Design n8n AI agents the right way. Use when building or editing any @n8n/n8n-nodes-langchain. AI node — an AI Agent, LLM chain, Text Classifier, or Information Extractor — and whenever the user mentions AI agents, LLM with tools, tool calling, $fromAI, system prompts, agent memory, sessionId, structured/JSON output…
typesafe-ai
Build AI-powered software with TypeSafe System One models, including Jev, as typed judgments and probabilities for routing, ranking, extraction, verification, and other structured decisions. Use when integrating TypeSafe or replacing a semantic LLM prompt-and-parse step with a programmable decision primitive.
coding-agents-prompt-authoring
To author, adapt, review, and validate prompts (skills, agents, workflows, rules, etc.) with brief, contracts, and a validation pack.
keirouter-chat
Chat / code generation via KeiRouter using OpenAI /v1/chat/completions or Anthropic /v1/messages format with streaming + auto-fallback combos. Use when the user wants to ask an LLM, generate code, summarize text, or run prompts through KeiRouter.