Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add KongFangXun/sofagent --skill cordis-plugin-sofagentgit clone --depth 1 https://github.com/KongFangXun/sofagentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kongfangxun/sofagent/cordis-plugin-sofagent)<a href="https://agentmods.dev/skills/kongfangxun/sofagent/cordis-plugin-sofagent"><img src="https://agentmods.dev/badge/skills/kongfangxun/sofagent/cordis-plugin-sofagent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kongfangxun/sofagent/cordis-plugin-sofagent"><img src="https://agentmods.dev/badge/skills/kongfangxun/sofagent/cordis-plugin-sofagent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00087 | $0.00716 |
| Opus 5.5 | $0.00035 | $0.00286 |
| Sonnet 5.5 | $0.00017 | $0.00143 |
| Haiku 4.5 | $0.00009 | $0.00072 |
Grade A, and why
cordis-plugin-sofagent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
cordis-plugin-sofagent
一次挂载 sofagent 全套能力——6 项能力一次到位（注入 · 审计与验收 · 经验 · 回溯 · 巡检 · FDE 三域）（seam: non-seam:plugin-suite）——只编排不重实现，能力仍由各原子插件提供
用途
一次 apply 把 6 个原子插件（inject / audit / evolve / rollback / daemon / fde）逐个挂到同一个 ctx 上，挂完把结果（loaded / failed / total）注册成 sofagent.suite 服务。适合「整套装上、不想逐个装」的场景。什么时候用：一次拿到全套约束层能力、不想逐个挑插件时。
三条硬约束：
- 只编排，不重实现 —— 每个能力仍由原子插件
provide，本层只依次调用它们的apply，不复制任何子插件逻辑； - 逐个降级，不整挂失败 —— 缺任一个原子插件只记入
failed数组（含包名与原因），其余 5 个照常加载； - 不替代细粒度插件 —— 6 个原子插件全部保留，本插件是新增的整装选项，按需二选一。
本插件随 sofagent 主线版本发布，走宿主挂载通道：skillhub install cordis-plugin-sofagent。⚠️ 本插件不在 npm 通道——11 款插件（7 DSH + 4 OpenClaw）均为 private，npm 装不到；npm 侧另有库通道 npm i -g sofagent（总包 engine/umbrella，聚合 @sofagent/audit / mcp / orchestrator / daemon 四个能力包，不含本插件）。
两条通道按所在环境二选一，互不依赖、互不为前置。版本号与 sofagent 主线对齐。
本插件是宿主挂载入口；npm 安装入口见裸名总包（engine/umbrella，包名 sofagent）—— 两个入口互不引用为前置，按使用场景各取其一。
相关链接
- sofagent 主仓：https://github.com/KongFangXun/sofagent
- 开发日志：docs/changelog/v1.4/v1.4.0.md（DSH 插件家族）
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed fbdc0deb78ad
- 4d ago Changed 9de772b840cd
- 7d ago Changed 382d86184278
- 8d ago Changed da96085e5998
- 12d ago Changed 2b0c18a2d229
- 15d ago Changed 8f05708f4c7a
- 17d ago Changed · +1 lines e2199ff33a2f
- 20d ago Changed 21cc8c1c3b8f
- 22d ago Changed b2422f5dae39
- 24d ago First seen · 32 lines · 87 tokens per session scan A c0748e6e8e08
cordis-plugin-sofagent is a skill published in the GitHub repository KongFangXun/sofagent (53 stars, last pushed today), licensed MIT. It adds 87 tokens to every session and 716 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-14.
Other skills, from other repositories
design-impeccable
Anti-pattern detector and design rules for AI coding agents. Catches the specific mistakes AI makes when generating UI: gray text on color, nested cards, broken buttons, missing states. Use before shipping any frontend.
js-library-packaging
Use when a JavaScript/TypeScript package is consumed by another package — exports map, peer vs. direct dependencies, files allow-list, and whether it should be built at all.
stripe-spend
Create real Stripe test-mode charges for bounded business actions, with an authority-band budget cap and human escalation above the cap.
calendar-event-create
Create a Google Calendar event with title, time, and attendees.
stripe-subscription-cancel
Cancel a Stripe subscription immediately or at period end.
calendar-event-list
List upcoming Google Calendar events for a given timerange.