Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/membranedev/application-skills/1msgnpx skills add membranedev/application-skills --skill 1msggit clone --depth 1 https://github.com/membranedev/application-skillsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00029 | $0.01622 |
| Opus 5 | $0.00015 | $0.00811 |
| Sonnet 5 | $0.00006 | $0.00324 |
| Haiku 4.5 | $0.00003 | $0.00162 |
Grade A, and why
1msg scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
The source is not reproduced here
No licence file
A repository with no LICENSE is all rights reserved by default, so the body is not copied here. The metadata, the measurements and the link are.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 170 lines · 29 tokens per session scan A a71e819dc8ad
1msg is a skill published in the GitHub repository membranedev/application-skills (265 stars, last pushed 4mo ago), with no licence file. It adds 29 tokens to every session and 1,622 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
firecrawl-lean
Web scraping, search, crawling, and browser interaction via Firecrawl CLI. Use when user wants to search the web, fetch a URL, scrape content, crawl docs, download a site, extract structured data, or interact with JS-heavy/login-gated pages. Triggers on: "search for", "scrape", "fetch this URL", "get the page"…
gan-zhong-xue
在你干真实开发时（边干边挖：搞懂 AI 正在做的这步，掌控方向）或干完提交后（事后挖： 回头搞懂一个甩手没懂的改动），就地陪你走一轮"先让你猜、再揭示、逼到原理"的回合制， 把黑盒变成你真懂、能复述、能迁移的东西。治的是 vibe-coding 的病：交付物在增加， 理解没跟上。触发词："干中学"、"帮我搞懂 AI 正在做的这步"、"我刚才那段没懂"、 "这个 commit 我说不清"、"帮我真正搞懂刚才做的"；掌舵（任务中途）："等等这步我没懂"、 "为什么这么改"、"这步我没跟上"。 English triggers: "learning by doing", "help me actually understand what…
sync-rules
Iteration closeout knowledge routing for AI-assisted development. Use when the user asks to summarize changed function points into a knowledge base, update project docs or generated superpower docs after code changes, sync rules, distill lessons from an iteration, record durable decisions, or remember user…
poly-wiki
多平台知识库编译器。从碎片素材中提炼结构化知识，维护可复用知识网络。 当用户要求编译素材、萃取知识、整理笔记、健康检查知识库、查询归档时触发。 Triggers: 知识库 wiki 编译 萃取 录入 整理 健康检查 lint query ingest extract 提炼知识 编译素材 整理笔记 知识管理 卡片笔记 Zettelkasten.
poly-wiki
Multi-platform knowledge base compiler. Compile raw materials into structured knowledge, maintain a reusable knowledge network. Triggers: wiki compile extract ingest lint query knowledge base notes Zettelkasten.
api-to-openapi
将自然语言接口描述、接口文档、参数表格或支持的后端代码转换为标准 OpenAPI 3.0.3 JSON， 并在需要时生成 Postman Collection 等平台兼容产物，供 Postman / Apifox / ApiPost 导入后形成可调试接口。 Use when the user asks to generate, export, convert, or validate Swagger/OpenAPI/importable API documentation from existing API descriptions, docs, tables, or code. Do not use merely to…