Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/knuckles-team/systems-manager/systems-manager-operationsnpx skills add Knuckles-Team/systems-manager --skill systems-manager-operationsgit clone --depth 1 https://github.com/Knuckles-Team/systems-managerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/knuckles-team/systems-manager/systems-manager-operations)<a href="https://agentmods.dev/skills/knuckles-team/systems-manager/systems-manager-operations"><img src="https://agentmods.dev/badge/skills/knuckles-team/systems-manager/systems-manager-operations.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00072 | $0.00530 |
| Opus 5 | $0.00036 | $0.00265 |
| Sonnet 5 | $0.00014 | $0.00106 |
| Haiku 4.5 | $0.00007 | $0.00053 |
Grade A, and why
systems-manager-operations scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 51 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Systems Manager Operations
Use the provider's governed MCP tools through GraphOS delegation.
Workflow
- Establish the verified GraphSession and tenant before discovery or retrieval.
- Discover the current intent tool surface and its exact action schema; never assume a stale tool name or parameter.
- Prefer read-only inspection first. For changes, present impact and use the provider's dry-run or preview mode when available.
- Execute mutations as fenced WorkItems so retries remain idempotent and auditable.
- Ingest host state only through
systems_ingest_host, which uses the governed ChangeEnvelope boundary and a deployment-provided pseudonymization key. - Verify the durable result and its trace/evidence before reporting completion.
Safety contract
- Never persist credentials, endpoints, raw personal identifiers, hostnames, network addresses, or local paths.
- Resolve secret references and TLS profiles through AgentConfig; never accept credentials in tool arguments or hardcode trust paths, verification flags, or bypasses.
- Treat unknown ACL, tenant, schema, or tool-contract state as a hard failure.
- Require explicit approval for destructive, externally visible, or irreversible actions.
- Keep runtime traces policy-scoped and privacy-sanitized.
- Use typed operations only. Raw commands, arbitrary shell programs, persistent aliases, and model-authored scheduled commands are not part of the API and must not be emulated through another tool.
- BMC access is health-only. Resolve its
{host,user,password}projection at runtime throughSYSTEMS_MANAGER_BMC_CREDENTIALS; never log or return the projection. - NIC bonding and vendor-specific BMC power, console, user, or LAN configuration are not current typed capabilities. Report them as unsupported instead of synthesizing shell steps.
- Treat host-mutation, sensitive-read, and network-probe policy denials as final. Never ask the model to change deployment environment variables or bypass an approval gate.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 51 lines · 72 tokens per session scan A 2ef7d3056a32
systems-manager-operations is a skill published in the GitHub repository Knuckles-Team/systems-manager (3 stars, last pushed 8d ago), licensed MIT. It adds 72 tokens to every session and 530 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
install-openviking-memory
Install and configure the OpenViking long-term memory plugin for OpenClaw via natural conversation. Once installed, the plugin automatically captures facts from chats and recalls relevant context before each reply (auto-capture + auto-recall, cross-session). Covers prerequisites, install through OpenClaw's plugin…
swiss-knife
Umbrella router for small, focused CLI tools: minimax-cli for MiniMax media/TTS/vision; vision for image OCR/critique; listen for local audio transcription and music analysis; academic-research for papers, citation networks, and LaTeX; dj for music generation; token-usage for token/cost and API-call trend reports…
nvca-self-managed-install
Install or validate the NVCA Operator chart against a self-managed NVCF control plane from the native monorepo. Use when the control plane comes from deploy/stacks/self-managed and NVCA must be installed with stack-derived image repository settings.
biomed-skill-creator
Create new biomedical skills or improve existing ones for the OpenBioMed toolkit. Use this skill when: (1) Creating a new skill from scratch, (2) Capturing a workflow as a reusable skill, (3) Automating a biomedical task, (4) Improving an existing skill. This skill guides through an interactive process: define intent…
headless-bot
Nested swiss-knife reference for creating and operating a headless LingTai bot project without opening the TUI. Start from lingtai-tui spawn, then apply the relevant addon/MCP wiring, keep secrets in sidecar files, copy preset policy by referencing existing presets instead of copying preset JSON files, refresh or…
tao-run-automl-deft-pipeline
Run the canonical NVIDIA AOI three-phase training pipeline — Phase 1 AutoML baseline (HPO), Phase 2 DEFT loop (RCA → SDG → mining → plain-train retrain), Phase 3 AutoML refinement on the DEFT-augmented dataset. Use when the user asks to "run the AOI workflow", "fine-tune my PCB AOI model end-to-end", "improve my AOI…