Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ithinkihaveacat/dotfiles/agent-toolsnpx skills add ithinkihaveacat/dotfiles --skill agent-toolsgit clone --depth 1 https://github.com/ithinkihaveacat/dotfilesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ithinkihaveacat/dotfiles/agent-tools)<a href="https://agentmods.dev/skills/ithinkihaveacat/dotfiles/agent-tools"><img src="https://agentmods.dev/badge/skills/ithinkihaveacat/dotfiles/agent-tools.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00113 | $0.07710 |
| Opus 5 | $0.00056 | $0.03855 |
| Sonnet 5 | $0.00023 | $0.01542 |
| Haiku 4.5 | $0.00011 | $0.00771 |
Grade C, and why
agent-tools scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
`.git-credentials`, and patterns such as `*.pem`, `*.key` and `id_rsa*`. Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Requires curl, jq, and uv. Image tools also need base64 and magick (ImageMagick). How it starts
The opening of the file, as written. The whole thing — 764 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent Tools
Using Helper Scripts vs. Raw API Calls
Use the scripts in scripts/ as the primary interface for AI-delegated analysis
and context gathering. References to scripts/... in this skill are relative to
this skill directory. They encapsulate API boilerplate and formatting logic:
- Proper image encoding (WebP conversion, alpha removal)
- Task-tuned default model selection
- Structured output handling (e.g. boolean responses mapped to shell exit codes)
- Formatting structured data (like GitHub PRs and issues) into LLM-friendly Markdown
When to inspect script source: If a script lacks a specific parameter or
fails due to a local dependency, inspect the script in scripts/. They
demonstrate correct API schemas, request structures, and retry behaviors that
you can adapt for custom calls.
Quick Start
Environment: AI commands require a Gemini API key (reads from
GEMINI_API_KEY). Scripts will report clear errors if no key is found.
gh-markdown optionally accepts a --token for GitHub API access.
Model selection: Every Gemini-backed script accepts --model MODEL and
honors the GEMINI_MODEL environment variable (--model wins; each script's
built-in default applies when neither is set). Defaults vary per tool and are
tuned for its task; only override when you have a reason.
Dependencies: curl, jq, uv (all tools); base64, magick (image
tools only)
# Gather context and analyze
scripts/context show gemini-api | scripts/emerson "Explain the key features"
# Transform an entire directory of documents or code
scripts/caxton "Translate the guides into French" --edit docs/
# Fetch a GitHub PR, Issue, or Workflow Run as Markdown
scripts/gh-markdown https://github.com/owner/repo/pull/123
# Describe an image (generate alt-text)
scripts/screenshot-describe screenshot.png
# Compare two images for visual differences
scripts/screenshot-compare before.png after.png
# Smart crop image around the detected primary subject
scripts/photo-smart-crop photo.jpg cropped.jpg
# Check if a photo prominently features people (exit code = answer)
scripts/photo-query @people photo.jpg
# Generic image query with a JSON schema
scripts/photo-query "Is there a fireplace?" \
--schema "has_fireplace bool" photo.jpg
# Generate essay-length analysis from text
scripts/emerson "Summarize the key changes" < documentation.md
# Evaluate a boolean condition against text
echo "Hello world" | scripts/satisfies "is a greeting"
# Extract a structured purchase record from a receipt email
scripts/pacioli < order.eml
# Count tokens in text
cat document.md | scripts/token-count
# Interact with an Android UI via AI
scripts/popper "start an exercise"
What ships with it
49 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- permissions/unsafe 536 B
- references/afn.md 4.0 KB
- references/command-index.md 42 KB
- references/software-installation.md 4.9 KB
- references/troubleshooting.md 15 KB
- scripts/benchmarker 41 KB
- scripts/caxton 107 KB
- scripts/context 46 KB
- scripts/emerson 9.8 KB
- scripts/gemini-api-doctor 5.4 KB
- scripts/gh-markdown 17 KB
- scripts/oracle 41 KB
- scripts/pacioli 13 KB
- scripts/pascal 6.5 KB
- scripts/photo-query 15 KB
- scripts/photo-smart-crop 11 KB
- scripts/popper 44 KB
- scripts/satisfies 5.9 KB
- scripts/screenshot-compare 7.1 KB
- scripts/screenshot-describe 5.5 KB
- scripts/socrates 44 KB
- scripts/token-count 4.6 KB
- tests/fixtures/pacioli/department-multibrand.eml 852 B
- tests/fixtures/pacioli/dispatch-notice.eml 464 B
- tests/fixtures/pacioli/instore-receipt.eml 686 B
- tests/fixtures/pacioli/marketplace-subject-item.eml 546 B
- tests/fixtures/pacioli/return-confirmation.eml 530 B
- tests/fixtures/pacioli/shopify-single-brand.eml 826 B
- tests/fixtures/screenshot-compare/identical_1.png 17 KB
- tests/fixtures/screenshot-compare/identical_2.png 17 KB
- tests/fixtures/screenshot-compare/screenshot_api33_v2.png 30 KB
- tests/fixtures/screenshot-compare/screenshot_api36_v2.png 24 KB
- tests/fixtures/screenshot-compare/verify_italic.png 13 KB
- tests/fixtures/screenshot-compare/verify_large.png 13 KB
- tests/fixtures/screenshot-compare/verify_regular.png 13 KB
- tests/fixtures/screenshot-compare/verify_small.png 13 KB
- tests/test-benchmarker 15 KB
- tests/test-caxton 56 KB
- tests/test-context 5.9 KB
- tests/test-gemini-transport 4.7 KB
- tests/test-gh-markdown 568 B
- tests/test-oracle 11 KB
- tests/test-pacioli 5.0 KB
- tests/test-pascal 2.3 KB
- tests/test-screenshot-compare 2.6 KB
- tests/test-screenshot-compare-identical 1.1 KB
- tests/test-socrates-cli 2.8 KB
- tests/test-socrates-db 7.5 KB
- tests/test-socrates-resolve 3.9 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +36 lines 0f4480843e30
- 5d ago First seen · 728 lines · 113 tokens per session scan C 488ffeef6048
agent-tools is a skill published in the GitHub repository ithinkihaveacat/dotfiles (48 stars, last pushed today), licensed Apache-2.0. It adds 113 tokens to every session and 7,710 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it C with 2 findings (reaches for credential files, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
aish-add-skills
Create new skills from documents, tutorials, or examples. Use when user wants to create a skill from learning materials or existing content.
diagnose_system_lag
Local Linux lag and performance diagnosis. Run read-only probes based on the user's symptoms to find CPU, memory, disk, or local network bottlenecks, then give safe advice. Never auto-remediate. Also matches Chinese requests such as 系统卡顿、机器好慢、内存不足、突然重启、OOM、磁盘很慢.
devops-docker-patterns
Docker containerization expert specializing in multi-stage builds, image optimization, Docker Compose patterns, and production container security. Use for Dockerfile optimization, compose configurations, and container best practices.
devops-platform-engineering
Platform engineering expert specializing in internal developer platforms, self-service infrastructure, Backstage service catalogs, GitOps with ArgoCD, and golden path templates. Use for building developer portals and platform-as-a-product.
dns-diagnose
Local DNS resolution troubleshooting with dig/resolvectl/whois. Investigate NXDOMAIN, wrong answers, records not taking effect, and resolver failures. Read-only; do not change DNS config. Also matches Chinese requests such as DNS 解析失败、域名解析不了、NXDOMAIN、解析不到.
network-path-diagnose
Diagnose network path quality from this host to a target using ping/mtr/curl. Investigate packet loss, high latency, jitter, and reachability failures; interpret hop results and suggest follow-up tests. Do not change network config. Also matches Chinese requests such as 网络丢包、延迟高、链路质量、ping 不通、网络抖动.