Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/maxforai/tokenless/context-compressionnpx skills add MaxForAI/Tokenless --skill context-compressiongit clone --depth 1 https://github.com/MaxForAI/TokenlessWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00039 | $0.02116 |
| Opus 5 | $0.00019 | $0.01058 |
| Sonnet 5 | $0.00008 | $0.00423 |
| Haiku 4.5 | $0.00004 | $0.00212 |
Grade A, and why
context-compression scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 126 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Tokenless Context Compression
When working in this project, do not feed noisy raw outputs or large files directly into context.
Tokenless is mandatory for large or noisy context:
- If a file is large, first use
tokenless read --agent --data-dir <dir> <file>. - If a Bash command is noisy, first use
tokenless run --agent --data-dir <dir> -- <command>. - If a Tokenless hook blocks or caps a tool call, do not bypass it with another full-output command.
- If you need exact evidence after a packet, expand the artifact before editing.
- If Tokenless reports a pending large-file gate, the next action must be the exact
NEXT REQUIRED COMMAND.
The hook automatically caps high-noise Bash commands and large low-risk Read outputs through Tokenless.
Keep tool inputs small:
- Tokenless saves context by replacing large tool outputs with compact packets. Do not recreate the same token cost by sending huge generated tool inputs.
- Prefer
tokenless read,tokenless expand, and small boundedEdit/MultiEditcalls over large patch scripts. - Do not create large heredocs,
cat > file <<EOF, giantnode -e/python -commands, or temporary apply/fix/rewrite scripts unless the user explicitly asks. - If you feel tempted to write a big script to patch a large file, stop and use Tokenless to expand the exact lines, then edit only that small region.
For manual local development in this repository, use ./plugins/claude-code/bin/tokenless or the packaged tokenless alias:
./plugins/claude-code/bin/tokenless run --agent --data-dir /tmp/tokenless-dev -- npm test
High-noise commands include:
- npm test, pnpm test, yarn test
- pytest
- npm/pnpm/yarn build, lint, typecheck, install
- go test, cargo test, mvn test/verify/package, gradle build/test
- git diff, git log
- rg, grep -R
- find, tree, ls -R
- docker logs/build, kubectl logs/describe, Vercel/Netlify CLI logs
When you see a TOKENLESS-PACKET block:
- Treat it as a compressed evidence packet.
- Use the key failures, relevant files, line numbers, and raw artifact pointer.
- Do not ask for the full raw output unless needed.
- If needed, use the full raw artifact command shown in the
Raw artifact:line.
When you see a TOKENLESS-READ-PACKET block:
- Treat it as a compact local summary of a large file.
- Read
Action boundarybefore running any other command. It defines what tool commands are valid for this artifact. - If it contains
Action briefandEditable snippets, treat those snippets as the first-pass edit surface, not as a table of contents to explore. - For broad visual/style tasks, do one minimal native
Readto register editor state if you plan to edit, then make 6-10 boundedEditcalls from the snippets before doing more exploration. - Use only the artifact lookup commands shown in
Action boundarywhen a neededold_stringis not present in the snippets. - Do not expand every listed region by default.
- Do not use repeated
grep,rg,sed, or smallReadcalls to re-map the same file after a packet has already identified the edit targets. - Do not add unrelated files, scripts, or JS/HTML interactions for a CSS-only request unless the user explicitly asks.
Tool boundaries:
tokenless readcreates a whole-file packet only.tokenless readis not a range, selector, or line lookup tool.- Do not invent
tokenless read --range,tokenless read --selector,tokenless read --lines, or similar flags. tokenless expandis the artifact lookup tool for a specific selector/text or line range.tokenless show/ raw artifact access is not for normal editing.
Large CSS visual-edit protocol:
- After a
TOKENLESS-READ-PACKET, do not perform a second full-file read. - Identify the smallest useful edit set from
Editable snippets: tokens/variables, background layer, shared cards, buttons, one optional hero/visual area, one optional timeline/footer area. - After the registration
Read, make 6-10 boundedEditcalls when the snippets are sufficient. - If exact
old_stringis missing, use at most twotokenless expandlookups before the first edit. - Do not wait for
File must be read first; proactively do one minimal nativeReadonly to register editor state, then immediately edit. If the error still appears, do not remap the file. - After the first successful edit, continue editing only if the user request still clearly needs it; otherwise stop with a concise summary.
- Do not open the page or run visual validation unless the user explicitly asks for validation.
- Do not make “extra premium” changes outside the asked surface, such as mouse-tracking JS, custom scrollbars in HTML, or new runtime scripts, unless requested.
- Final answer should be 3-5 concise bullets only; do not write a long change diary.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 126 lines · 39 tokens per session scan A 34ff43f0ec41
context-compression is a skill published in the GitHub repository MaxForAI/Tokenless (45 stars, last pushed 3mo ago), licensed MIT. It adds 39 tokens to every session and 2,116 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
grix-code-review
Audit Grix diffs and pull requests for correctness, regressions, security, lifecycle safety, and cross-component contract consistency. Use when reviewing backend, Flutter frontend or admin, voicebridge, database migration, Kubernetes, protocol, agent-adapter, bug-fix, feature, or refactor changes in the Grix…
grix-pre-push-checks
Select and run the smallest sufficient validation set for Grix changes before push, review handoff, or completion. Use after changing backend Go code, Flutter frontend or admin code, Python voicebridge code, Kubernetes manifests, repository scripts, documentation, decision notes, or repository-local skills.
document-processor
Guidance for processing documents, extracting content, and transforming structured information. Use when the user asks to process, parse, extract, or transform document content such as PDFs, Word files, or spreadsheets.
skill-packager
Authors Agent Skills v1.0 packages (SKILL.md plus references/scripts), runs packageskill to produce a standards-compliant zip, and uses installskill to add skills from HTTPS, registry, workspace, or an uploaded archive. Use when the user wants to turn documentation, workflows, or code into a portable skill, export a…
workflow-helper
Guidance for creating, managing and executing workflow automations that chain multiple tools and agents together. Use when the user asks about building, listing, running or composing workflows and automated task pipelines.
attendance-signin-sheet
Generate printable attendance / 签到表 spreadsheets from name lists. Use when the user asks for 签到表, attendance sheet, meeting sign-in table, or similar printable roster tables (not full payroll attendance scoring unless asked).