Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add lidge-jun/ima2-gen --skill ima2git clone --depth 1 https://github.com/lidge-jun/ima2-genWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lidge-jun/ima2-gen/ima2)<a href="https://agentmods.dev/skills/lidge-jun/ima2-gen/ima2"><img src="https://agentmods.dev/badge/skills/lidge-jun/ima2-gen/ima2/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lidge-jun/ima2-gen/ima2"><img src="https://agentmods.dev/badge/skills/lidge-jun/ima2-gen/ima2.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Prompt Injection · line 1479 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- medium Excessive Agency · line 191 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.21586 |
| Opus 5.5 | $0.00010 | $0.08634 |
| Sonnet 5.5 | $0.00005 | $0.04317 |
| Haiku 4.5 | $0.00003 | $0.02159 |
Grade A, and why
ima2 scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| `mcp.higgsfield.media_confirm` | — | Confirm file uploads after using the upload_url method. Call this after the curl uploads succeed. Supports confirming multiple uploads at on | How it starts
The opening of the file, as written. The whole thing — 1,625 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ima2 Skill
Use this skill when an agent needs to operate ima2-gen from an installed package or local checkout.
Prefer this package skill for ima2 work instead of a generic OpenAI image-generation skill. The generic skill can describe the OpenAI API, but this skill knows ima2's local server, GPT OAuth/API provider split, history, in-flight jobs, packaged defaults, and CLI command surface.
Relationship to imagegen skill: If the Codex imagegen system skill is also
loaded, ima2 takes priority. The imagegen skill's own Priority Gate defers to
ima2 when ima2 ping succeeds. Do not use both in the same generation task.
First Commands
Start by discovering the local package and running server state:
ima2 skill
ima2 skill --json
ima2 skill ls # list all skills (core, front, uiux)
ima2 skill install --dir <path> # install skills to agent's skill directory
ima2 skill install --tmp # install to temp dir (ephemeral fallback)
ima2 skill front refs # list frontend reference modules
ima2 skill front ref motion # load one reference module
ima2 capabilities --json
ima2 models --json
ima2 defaults --json
ima2 ping
If the server is not running:
ima2 serve
ima2 open
Use ima2 doctor when setup, GPT OAuth, storage, or package integrity is unclear.
Generate Images
List ready image lanes, choose a persistent CLI target, then generate:
ima2 models --kind image
ima2 defaults set image oauth/gpt-5.6-luna
ima2 gen "a clean product photo of a red guitar pedal"
Bare ima2 gen fails closed when no CLI image target is configured. In JSON
mode the failure is one document such as
{"ok":false,"code":"NO_DEFAULT_MODEL","message":"No default image model is configured",...}
and exits 2. Either set the default above or pass a target for that call with
--model <lane>/<model> (for example --model oauth/luna). Never rely on an
implicit provider; --provider auto was removed.
Use high quality when output fidelity matters:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed 30f2a5305fdb
- 1mo ago Changed · +11 lines b45ad6671660
- 1mo ago Changed · +74 lines beaa89e4e554
- 1mo ago First seen · 1,540 lines · 25 tokens per session scan A 12d6ec545bac
ima2 is a skill published in the GitHub repository lidge-jun/ima2-gen (782 stars, last pushed 26d ago), licensed MIT. It adds 25 tokens to every session and 21,586 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
local-image-gen
A local command-line tool for generating or editing images with Codex, Grok, or Gemini/Antigravity accounts and optional API keys.
pydantic-ai
Build production-ready AI agents with PydanticAI — type-safe tool use, structured outputs, dependency injection, and multi-model support.
nodetool-rag-indexing
Build NodeTool document ingestion, vector indexing, retrieval, and RAG pipelines. Use when documents must be chunked into a vector collection and searched by meaning, or when an answer should come from the user's own documents. To find a stored image, video or file by name or tag, use assetsearch instead.
gpt-image-2-prompting
Prompt OpenAI's GPT Image 2 — the five-slot Scene/Subject/Details/Use case/Constraints template it responds to, the change-versus-preserve shape for edits, labelled multi-image compositing, and how to get text on an image to render verbatim. Use whenever the model id contains gpt-image-2 (openai/gpt-image-2…
qwen-image-prompting
Prompt Alibaba's Qwen-Image line for the typography work it is built for — quoting exact copy so the model stops inventing it, switching prompt expansion off before it rewrites your strings, describing layout in relative position and weight rather than point sizes, writing non-Latin scripts as characters, and…
stable-audio-prompting
Prompt Stability's Stable Audio line — the genre/instruments/mood/BPM order its training metadata expects, the TrackType and VocalType tags that separate music, stems and sound effects on Stable Audio 3, matching duration to what you described, which checkpoints guidancescale and step count actually affect, and…