Meshery is an open-source cloud-native management platform for designing and managing Kubernetes-based infrastructure and applications across multiple clouds and clusters. Engineering teams use it to configure, deploy, operate, and observe cloud services and Kubernetes environments through visual and collaborative workflows. The catalogue add-ons provide skills, agents, instructions, and settings for operating Meshery.
Borrowing it
Nothing to install: this file belongs to meshery/meshery. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/meshery/meshery/master/.agents/skills/quota-axi/SKILL.mdgit clone --depth 1 https://github.com/meshery/mesheryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/meshery/meshery/quota-axi)<a href="https://agentmods.dev/skills/meshery/meshery/quota-axi"><img src="https://agentmods.dev/badge/skills/meshery/meshery/quota-axi/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/meshery/meshery/quota-axi"><img src="https://agentmods.dev/badge/skills/meshery/meshery/quota-axi.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 7 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 39 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 40 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 78 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 53 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium MCP Rug Pull · line 16 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 31 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 35 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00092 | $0.00907 |
| Opus 5 | $0.00046 | $0.00453 |
| Sonnet 5 | $0.00018 | $0.00181 |
| Haiku 4.5 | $0.00009 | $0.00091 |
Grade A, and why
quota-axi scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 79 lines — stays where its author put it; the contents beside it link to each section on GitHub.
quota-axi
Report local agent-provider quota windows for routing-aware agents.
You do not need quota-axi installed globally - invoke it with npx -y quota-axi.
quota-axi is data only: it never routes, recommends, proxies, intercepts, logs in, imports browser cookies, or mutates provider state. It reads local provider auth sources and calls first-party provider quota, usage, billing, or entitlement endpoints; it never launches the Claude CLI, so it cannot spend the quota it measures.
When to use
Use quota-axi whenever you need local quota headroom before deciding whether it is safe to keep working on a provider, when the user asks about usage, rate limits, or remaining quota, or when comparing supported local provider headroom side by side.
Workflow
- Run
npx -y quota-axifor compact TOON output covering supported providers' quota windows. - Scope to one provider with
--provider claudeor to a subset with--provider cursor,copilot,grok. - Pass
--jsonfor the normalized machine-readable model instead of TOON. - Pass
--fullto include account identity and per-source attempt details. - Run
npx -y quota-axi authto check local auth-source availability without printing secret values. - On macOS, Claude Keychain value reads are skipped by default until the user grants access once.
If quota output reports
reason: keychain_access_required, tell your user to runquota-axi --allow-keychain-promptonce and approve Keychain access ("Always Allow"). After that successful grant, plainquota-axicalls reuse the existing Keychain access marker to refresh live Claude quota without requiring the flag. - For a managed Codex installation, set
QUOTA_AXI_CODEX_BINARYto its absolute executable path. quota-axi uses that exact executable for auth inspection and the read-only app-server fallback, and fails closed if the override is invalid.
Usage
usage: quota-axi [auth] [flags]
commands[2]:
(none)=quota, auth
flags[6]:
--provider <claude,codex,cursor,copilot,grok>, --json, --full, --allow-keychain-prompt, --help, -v/--version
examples:
quota-axi
quota-axi --provider claude
quota-axi --provider cursor,copilot,grok
quota-axi --json
quota-axi --full
quota-axi auth
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 79 lines · 92 tokens per session scan A ce3ce2b9388d
quota-axi is a skill published in the GitHub repository meshery/meshery (11,744 stars, last pushed yesterday), licensed Apache-2.0. It adds 92 tokens to every session and 907 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
performing-kubernetes-etcd-security-assessment
Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
oss-find-issue
Find unclaimed open source issues that match the user's skills and experience level. Searches for issues created by maintainers/org admins, checks contribution eligibility, and ranks by learning value. Use when looking for an issue to contribute to, starting OSS contributions, or finding GSoC-friendly issues. Not for…
oss-find-real-issues
Find actual code issues in a repo that aren't listed in GitHub issues. missing tests, inconsistent patterns, outdated dependencies, documentation gaps. Presents findings to the user for evaluation. Use when you want to make proactive contributions beyond existing issues, or when no good issues are available. Not for…
oss-submit-pr
Submit a pull request following the repo's contribution guidelines. Reviews the diff, checks for common rejection reasons, and helps the user write their own PR description. The LLM reviews. the user writes. Use when implementation is complete and tests pass. Not for responding to review comments after the PR is open.…
oss-contribute
Research an issue deeply and present all context to the user. but the user writes the code. The LLM investigates code paths, finds relevant files, explains patterns, and identifies constraints. The user thinks through the approach and implements it. Use when ready to start working on an issue after…
oss-debug-ci
Debug CI failures in unfamiliar repo pipelines. Reads CI configs, fetches failure logs, classifies the failure type, and guides the user through diagnosing and fixing the issue. Use when CI fails on your PR in an OSS repo, when you don't understand a CI error, or when debugging GitHub Actions/CircleCI/other CI…