Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add MartinOlivero/saas-builder --skill ai-featuresgit clone --depth 1 https://github.com/MartinOlivero/saas-builderWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/martinolivero/saas-builder/ai-features)<a href="https://agentmods.dev/skills/martinolivero/saas-builder/ai-features"><img src="https://agentmods.dev/badge/skills/martinolivero/saas-builder/ai-features/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/martinolivero/saas-builder/ai-features"><img src="https://agentmods.dev/badge/skills/martinolivero/saas-builder/ai-features.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00241 | $0.02180 |
| Opus 5.5 | $0.00096 | $0.00872 |
| Sonnet 5.5 | $0.00048 | $0.00436 |
| Haiku 4.5 | $0.00024 | $0.00218 |
Grade A, and why
ai-features scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 100 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AI Features
This skill covers the model as a component of your product: your server calls an LLM, your users see the result, and you get the invoice. It prevents the four ways this goes wrong: unbounded spend, invented facts, silent failures, and tests that pass while the feature is broken.
Analogy: the model is a brilliant temp worker with no memory of your business and no sense of what things cost. You don't hand them the company card and the customer list and leave. You give them a brief, a spending limit, a rule that says "if it's not in the file, say you don't know", and someone to call when they're stuck.
Discovery (max 3 questions, only if unknown)
- What does the model do — talk to end users, or produce something your code then uses (a score, a summary, a category)?
- Who pays for the calls — you, or each customer with their own key?
- Where does the call run — a serverless function, an automation tool, a long-lived server?
Step 1 — Credentials and who pays (decide before writing code)
- A product uses API keys, never a personal subscription. Consumer plans (the kind you log into as a person) are licensed for individual use; routing your users' work through one — yours or theirs — is typically prohibited by the provider's terms and can be cut off without notice. Read the current terms of your provider before designing around a subscription.
- Your key, you pay: simplest. Price it into the plan and enforce a quota (Step 4).
- Bring-your-own-key: each customer pastes their key. You owe them a ledger — cost per run, per model — and their key is a secret you now store (server-only table, never returned to the browser).
- One provider account per product, with a low-balance alert. A balance shared across projects ran dry and took a production bot down with a payment-required error; a "workspace" inside one account did not separate the balance.
- Keep the provider swappable: one module wraps the call (base URL, key, model from config). You will change models more often than you expect.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 100 lines · 241 tokens per session scan A bbf3587e281b
ai-features is a skill published in the GitHub repository MartinOlivero/saas-builder (4 stars, last pushed 10d ago), licensed MIT. It adds 241 tokens to every session and 2,180 once invoked, about $0.0010 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-08.
Other skills, from other repositories
zero-shot
Use when the user asks to "check zero-shot", "audit few-shot anchoring", "find example anchoring", or invokes /zero-shot. Read-only audit of LLM-facing prose: principle over anchoring examples.
lightcad
Use when building or extending a desktop CAD/BIM application with the open-source FeiYang LightCAD platform — plugin development, custom elements, DWG/DXF I/O, 2D drafting and 3D/BIM modeling on C#/.NET. LightCAD (FeiYang Integrated Design Platform) is a C# CAD system integrating 2D design, 3D design, and BIM.
metaprompt
Generate a complete, ready-to-paste prompt engineered for a specific target model (Claude Fable 5.1 / Opus 5.5 / Sonnet 5 / Haiku 4.5, GPT-5.x) and harness (Claude Code CLAUDE.md or skill, Codex AGENTS.md, pi, Amp, eve, AI Gateway, Agent SDK, raw API, chat UI), using per-model and per-harness reference guides. Trigger…
prompt-evaluation-runner
Use when evaluating prompts, LLM outputs, red-team suites, or model behavior with local eval configs and safe provider/cost controls.
hunt-llm-ai
Hunt LLM/AI feature bugs — prompt injection, indirect injection, exfiltration via tool-use, ASCII smuggling, agentic AI security framework (ASI01-ASI10). Patterns: direct prompt injection in user input (bypass system prompt with 'ignore previous instructions'), indirect injection via documents/web pages the model…
grok-prompting
Internal guidance for composing clear Grok task prompts from Codex rescue handoffs.