Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add inflowpayai/inflow-cli --skill agentic-discoverygit clone --depth 1 https://github.com/inflowpayai/inflow-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/inflowpayai/inflow-cli/agentic-discovery)<a href="https://agentmods.dev/skills/inflowpayai/inflow-cli/agentic-discovery"><img src="https://agentmods.dev/badge/skills/inflowpayai/inflow-cli/agentic-discovery/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/inflowpayai/inflow-cli/agentic-discovery"><img src="https://agentmods.dev/badge/skills/inflowpayai/inflow-cli/agentic-discovery.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.03749 |
| Opus 5.5 | $0.00019 | $0.01500 |
| Sonnet 5.5 | $0.00010 | $0.00750 |
| Haiku 4.5 | $0.00005 | $0.00375 |
Grade C, and why
agentic-discovery scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
| macOS/Linux hosted installer | `curl -fsSL https://inflowcli.ai/install.sh \| bash` | Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
allowed-tools: ['Bash(inflow:*)', 'Bash(brew:*)', 'Bash(curl:*)'] How it starts
The opening of the file, as written. The whole thing — 320 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agentic Discovery
Find Services through the InFlow directory, then use their ODP catalogs or OpenAPI documents. Let the InFlow CLI interpret documents and construct requests. ODP catalog commands enforce advertised capabilities, follow pagination, resolve supporting schemas, and use AEP authentication when required. OpenAPI calls use the inputs you supply and return explicit authentication or payment handoffs. The directory does not contain a Service's full catalog.
Setup
Install the signed native CLI through one of these channels:
| Channel | Command |
|---|---|
| macOS Homebrew | brew tap inflowpayai/tap && brew install --cask inflow |
| macOS/Linux hosted installer | curl -fsSL https://inflowcli.ai/install.sh | bash |
| Windows PowerShell installer | irm https://inflowcli.ai/install.ps1 | iex |
| Cross-platform shell compatibility | curl -fsSL https://inflowcli.ai/cli | bash |
Use structured output for programmatic work:
inflow directory search gpu --format json
The CLI is self-describing. Query the installed version instead of guessing parameters:
inflow odp --help
inflow odp offerings search --schema
inflow --llms-full
Choose the command
| Goal | Command |
|---|---|
| Find Services and indexed Collections | inflow directory search |
| Find matching Service and Collection names | inflow directory suggest |
| Inspect Service protocols and HTTP requirements | inflow inspect |
| Inspect one Service and its operations | inflow odp inspect |
| Browse or search Collection groupings | inflow odp collections list/search/get |
| Browse, search, or retrieve products | inflow odp offerings list/search/get |
| Find Offerings across directory Services | inflow odp offerings discover |
| Resolve an Offering Action without invoking it | inflow odp actions resolve |
| Read public OpenAPI operations | inflow openapi operations list/get |
| Prepare an OpenAPI request without sending it | inflow openapi operations prepare |
| Execute an OpenAPI operation or receive payment guidance | inflow openapi operations call |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · +3 lines 994b7c671b55
- 15d ago Changed 6c0dfc7f2eb0
- 19d ago Changed · +1 lines 9d0b0c9f5206
- 1mo ago Changed fd4caa4c2c8b
- 1mo ago Changed · +7 lines 400128aa2f6f
- 1mo ago Changed · +21 lines · -2 tokens per session 04638aba0f92
- 1mo ago Changed · +56 lines · -7 tokens per session ddc96efefa45
- 1mo ago Changed · +7 lines 5cebd283eec9
- 1mo ago Changed 87da5a8d3b25
- 2mo ago First seen · 225 lines · 57 tokens per session scan C 2021a3e309c2
agentic-discovery is a skill published in the GitHub repository inflowpayai/inflow-cli (10 stars, last pushed today), licensed MIT. It adds 48 tokens to every session and 3,749 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
verify-before-checkout
Pre-checkout verification for shopping agents. Before transacting with any storefront the user didn't explicitly type, fetch Ed25519-signed merchant facts (domain age, TLS age, brand-lookalike score, price deviation) from the Onyx oracle over x402, verify the signature, and surface the facts to the buyer. Use whenever…
daiso-cli
A command-line interface for searching Daiso and related Korean shopping, store, food, cinema, and convenience-store data through the Daiso project. It can return structured JSON for searches and comparisons.
goofish-reply-buyer
A Chinese-language workflow for handling buyer messages on Xianyu, a Chinese second-hand marketplace. It reviews conversations, classifies buyer intent, and drafts replies according to the seller’s rules, but waits for human approval before sending.
tripadvisor-cli
Searches TripAdvisor hotels, restaurants, attractions, and destinations via the cli-web-tripadvisor command-line tool, with detail lookups by URL. Use when the user asks about hotels, restaurants, things to do, travel destinations, or TripAdvisor ratings and reviews. Prefer this CLI over fetching the TripAdvisor…
seller-research
Use when researching a merchant, storefront, marketplace seller, or merchant of record for a buying decision, especially when identity, refund terms, fulfillment, counterfeit risk, domain history, or independent buyer outcomes are uncertain.
b2c-custom-job-steps
Create custom job steps for B2C Commerce batch processing. Use this skill whenever the user needs to write a batch job, data export script, scheduled cleanup task, or any server-side processing that runs on a schedule. Also use when they ask about steptypes.json, chunk-oriented vs task-oriented job steps…