Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add intentic/intentic --skill facebookgit clone --depth 1 https://github.com/intentic/intenticWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/intentic/intentic/facebook)<a href="https://agentmods.dev/skills/intentic/intentic/facebook"><img src="https://agentmods.dev/badge/skills/intentic/intentic/facebook/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/intentic/intentic/facebook"><img src="https://agentmods.dev/badge/skills/intentic/intentic/facebook.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.00431 |
| Opus 5.5 | $0.00016 | $0.00172 |
| Sonnet 5.5 | $0.00008 | $0.00086 |
| Haiku 4.5 | $0.00004 | $0.00043 |
Grade A, and why
facebook scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Facebook (connected browser)
Feed: https://www.facebook.com · a profile: https://www.facebook.com/ · a group: https://www.facebook.com/groups/ · notifications: https://www.facebook.com/notifications
${accounts}
- Read the feed, a group or a post: navigate, then
browser_snapshot. The feed loads as you scroll, so scroll andbrowser_wait_forbefore reading further. A post's timestamp links to its permalink; open that to read one post with all its comments. - New post: click "What's on your mind?" on the feed or in a group, which opens a composer dialog;
browser_type, check the audience selector (Public, Friends, …) says what the owner meant, then Post. - Comment: open the post, click "Write a comment…", type, then press Enter. Enter SUBMITS a Facebook comment, so a line break inside one is Shift+Enter; re-snapshot after posting to confirm it went out whole.
- Reply to ONE comment: click Reply under that comment so yours nests beneath it, never the post's own comment box.
- React: click Like; for another reaction,
browser_hoverover Like and pick from the row that appears. - Join a group: open it and click "Join group". Some groups ask membership questions first: answer them only with what the owner gave you.
- Posting as a Page the owner manages: switch to the Page's profile first (the account menu, "See all profiles"), post, then switch back, so later actions are not taken as the Page by mistake.
- Messenger (https://www.facebook.com/messages) may ask for an end-to-end encryption PIN: that is the owner's to enter, never guess one. ${tools}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 29 lines · 39 tokens per session scan A 268ae2be66ac
facebook is a skill published in the GitHub repository intentic/intentic (85 stars, last pushed yesterday), licensed MIT. It adds 39 tokens to every session and 431 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-14.
Other skills, from other repositories
modernize-tests
Modernize test suites to use modern Swift Testing features or migrate from XCTest.
device-interaction
Verify iOS app behavior on device or simulator via screenshots, UI hierarchy, and touch interactions.
apple-context
Use calendar and location modules for user-approved Apple Calendar events and current device location.
image-vision
Inspect attached or local images and visually analyze PDFs with vision. Use for photos, screenshots, scans, charts, diagrams, OCR, handwriting, UI inspection, or any task that depends on pixels, layout, or other non-structural page content.
audit-xcode-security-settings
Audit and enable security-oriented Xcode build settings. Progressively enables compiler warnings, static analyzer checkers, and Enhanced Security features. Use when: user wants to secure their Xcode project, audit security settings, enable hardening, review security posture of build configuration, set up…
uikit-app-modernization
Modernizes UIKit apps for multi-window environments by replacing legacy shared-state APIs with context-appropriate modern alternatives. This includes references to mainScreen, interfaceOrientation, application and scene lifecycle, as well as safe area inset updates.