Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add hashgraph-online/awesome-codex-plugins --skill alibaba-supplier-outreachgit clone --depth 1 https://github.com/hashgraph-online/awesome-codex-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/alibaba-supplier-outreach)<a href="https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/alibaba-supplier-outreach"><img src="https://agentmods.dev/badge/skills/hashgraph-online/awesome-codex-plugins/alibaba-supplier-outreach/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hashgraph-online/awesome-codex-plugins/alibaba-supplier-outreach"><img src="https://agentmods.dev/badge/skills/hashgraph-online/awesome-codex-plugins/alibaba-supplier-outreach.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00069 | $0.00838 |
| Opus 5 | $0.00034 | $0.00419 |
| Sonnet 5 | $0.00014 | $0.00168 |
| Haiku 4.5 | $0.00007 | $0.00084 |
Grade A, and why
alibaba-supplier-outreach scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 133 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Alibaba Supplier Outreach
This skill has three modes: outreach, reply review, and follow-up drafting.
Mode detection
- Product keyword or “find suppliers” -> OUTREACH
- “check replies”, “any responses” -> REPLY REVIEW
- “follow up”, “reply to supplier” -> FOLLOW-UP
Shared defaults
Use these defaults when the user does not care:
- first order quantity: 500 units
- shortlist size: top 5 suppliers
- conversation notes path:
./artifacts/launchfast/supplier-conversations/
OUTREACH
1. Gather context
Ask once for:
- product keyword
- target price or landed-cost goal
- target first order quantity
- sign-off name or company
- optional Amazon selling experience
2. Research suppliers
Run:
supplier_research(keyword="<keyword>", goldSupplierOnly=true, tradeAssuranceOnly=true, maxResults=10)
Present a compact shortlist with:
- supplier name
- quality score
- price
- MOQ
- years in business
- trust signals
3. Draft the outreach
Use this structure:
- Mention the supplier by name and one concrete credibility signal.
- Establish buyer credibility briefly.
- State quantity and target pricing clearly.
- Ask exactly 3 questions:
- best price at target quantity
- lead time
- private-label capability
- End with a warm but direct close.
Always show the message to the user before sending it anywhere.
4. Browser automation, if requested
If the user wants Codex to send messages and browser automation tools are available, use this concrete flow:
- Open Alibaba in the browser automation session.
- Confirm the user is already logged in before proceeding.
- Navigate to the supplier page or Alibaba messaging UI.
- Use page inspection or accessibility snapshot tooling to find the
Contact Supplieror reply form. - Click into the message textarea and paste the approved message verbatim.
- Submit the form.
- Confirm success by checking for a sent-state confirmation or the new message appearing in the thread.
- Save the conversation summary to the local notes path.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 133 lines · 69 tokens per session scan A cf00cea322a3
alibaba-supplier-outreach is a skill published in the GitHub repository hashgraph-online/awesome-codex-plugins (968 stars, last pushed today), licensed Apache-2.0. It adds 69 tokens to every session and 838 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
search
Search 2500+ curated ChatGPT and LLM open-source repositories. Use when the user asks to find tools, libraries, or repos related to ChatGPT, LLMs, RAG, agents, langchain, NLP, AI development, or any open-source AI tooling.
hunt-business-logic
Hunting skill for business logic vulnerabilities. Built from 7 public bug bounty reports. Use when hunting business logic on any target.
init
Set up Playwright in a project. Use when user says "set up playwright", "add e2e tests", "configure playwright", "testing setup", "init playwright", or "add test infrastructure".
playwright-pro
Production-grade Playwright testing toolkit. Use when the user mentions Playwright tests, end-to-end testing, browser automation, fixing flaky tests, test migration, CI/CD testing, or test suites. Generate tests, fix flaky failures, migrate from Cypress/Selenium, sync with TestRail, run on BrowserStack. 55 templates…
generate
Generate Playwright tests. Use when user says "write tests", "generate tests", "add tests for", "test this component", "e2e test", "create test for", "test this page", or "test this feature".
migrate
Migrate from Cypress or Selenium to Playwright. Use when user mentions "cypress", "selenium", "migrate tests", "convert tests", "switch to playwright", "move from cypress", or "replace selenium".