Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ltczding-gif/agent-supervision-skills --skill kimi-supervisiongit clone --depth 1 https://github.com/ltczding-gif/agent-supervision-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ltczding-gif/agent-supervision-skills/kimi-supervision)<a href="https://agentmods.dev/skills/ltczding-gif/agent-supervision-skills/kimi-supervision"><img src="https://agentmods.dev/badge/skills/ltczding-gif/agent-supervision-skills/kimi-supervision/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ltczding-gif/agent-supervision-skills/kimi-supervision"><img src="https://agentmods.dev/badge/skills/ltczding-gif/agent-supervision-skills/kimi-supervision.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.07352 |
| Opus 5 | $0.00026 | $0.03676 |
| Sonnet 5 | $0.00010 | $0.01470 |
| Haiku 4.5 | $0.00005 | $0.00735 |
Grade A, and why
kimi-supervision scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
### Anti-pattern: bypassing the supervision scripts via direct `subprocess.run` This is a copy
100% identical to kimi-supervision — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 854 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Kimi Supervision
Use this skill when you want Codex to make local Kimi Code do work, watch what happened, inspect its reports, and then independently verify the outcome.
This skill is for supervision, not blind delegation.
What this skill provides
This skill ships self-contained PowerShell scripts:
scripts/common.ps1scripts/kimi-run-once.ps1scripts/kimi-chat.ps1scripts/kimi-view-session.ps1scripts/test-kimi-supervision.ps1
The optional agents/openai.yaml file is metadata for agent environments that support skill display names, descriptions, and implicit invocation policy. The PowerShell scripts do not require it.
These scripts:
- require a locally installed
kimiCLI - do not depend on any hard-coded machine-specific bridge directory
- prefer Kimi's native session memory
- start Kimi with thinking mode enabled by default unless you pass
-NoThinking - treat think-only or tool-call-only output as intermediate, not as a finished answer
- keep local session artifacts for later inspection
- recover answers from Kimi native files when
kimi --printreturns empty or incomplete stdout - default to a long native recovery window so Kimi is not judged too early
State layout
Default state root:
%LOCALAPPDATA%\kimi-supervision\
Override:
KIMI_SUPERVISION_HOME
Fallbacks if environment variables are missing:
%USERPROFILE%\.kimi-supervisionC:\kimi-supervision
Per session, this skill stores:
sessions/<name>/transcript.jsonlsessions/<name>/last-prompt.txtsessions/<name>/last-response.jsonlsessions/<name>/last-response.txtsessions/<name>/session.json
Core design
This skill uses:
- Native Kimi session first
- Native file recovery second
- Transcript replay fallback last
Meaning:
kimi-chat.ps1creates or reuses a real Kimi--sessionid- follow-up calls reuse that same native Kimi session id
- if flattened stdout is empty or incomplete, the script reads Kimi's native
context.jsonl - if flattened stdout contains only
[THINK]or[TOOL_CALL]lines, the script still keeps waiting for final answer text - if native execution or native resume is unavailable, the script can fall back to transcript replay mode
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 854 lines · 51 tokens per session scan A 261f772aa3ec
kimi-supervision is a skill published in the GitHub repository ltczding-gif/agent-supervision-skills (2 stars, last pushed 3mo ago), licensed MIT. It adds 51 tokens to every session and 7,352 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (runs shell commands). It is 100% identical to kimi-supervision, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
vs-search
Search runtime and scene management: verify queries, inspect scenes, debug app readiness, and diagnose recall or scene-config issues.
vs-shared
Shared SearchCLI setup: install, authenticate, run doctor, and verify the local environment.
linear-graphql-skill
Operate Linear workspace issues, projects, and teams through Linear GraphQL API using UXC. Use when tasks require querying or creating issues, managing projects, or interacting with Linear workflow. Supports both Personal API Key and OAuth authentication.
coingecko-openapi-skill
Operate CoinGecko and GeckoTerminal market data APIs through UXC with a curated OpenAPI schema, API-key auth, and read-first guardrails.
matrix-openapi-skill
Operate Matrix Client-Server API through UXC with a curated OpenAPI schema, bearer-token auth, and homeserver-aware messaging guardrails.
blocknative-openapi-skill
Operate Blocknative gas intelligence APIs through UXC with a curated OpenAPI schema, API-key auth, and read-first guardrails.