Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Mininglamp-OSS/octo-cli --skill octo-htmlgit clone --depth 1 https://github.com/Mininglamp-OSS/octo-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mininglamp-oss/octo-cli/octo-html)<a href="https://agentmods.dev/skills/mininglamp-oss/octo-cli/octo-html"><img src="https://agentmods.dev/badge/skills/mininglamp-oss/octo-cli/octo-html/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mininglamp-oss/octo-cli/octo-html"><img src="https://agentmods.dev/badge/skills/mininglamp-oss/octo-cli/octo-html.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00067 | $0.02436 |
| Opus 5 | $0.00034 | $0.01218 |
| Sonnet 5 | $0.00013 | $0.00487 |
| Haiku 4.5 | $0.00007 | $0.00244 |
Grade A, and why
octo-html scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 211 lines — stays where its author put it; the contents beside it link to each section on GitHub.
octo-html — interactive HTML documents
This is NOT the
octo-docsbody-editing domain.octo-cli html …talks to octo-doc, where a document is a self-contained HTML page published as immutable versions.octo-cli docs …talks to the separate CRDT/Yjs backend.
All commands call $OCTO_API_BASE_URL/docs-html/v1/* and return the standard
{ok, identity, data, ...} success envelope.
Document-reference contract
- Canonical create has no document reference. Omit
slugand providehtml. The CLI generatesidempotency_key; an explicit key is optional. A display name belongs inmeta.title; it is metadata, not identity. - Save
data.slugfrom the response. New documents always returndata.doc_idanddata.slug, withdata.slug == data.doc_id, whether mounted or unmounted. Usedata.slugfor every later operation. - Legacy documents keep their old reference. For an old document, use its
legacy slug wherever this skill says
<doc-ref>. - No alias identity and no same-name republish. Creating again with the same
meta.titlecreates a different document. To publish another version, supply the saveddata.slugin the server's legacy-namedslugfield. - Do not infer a mode from
mount_type,registered,status, or whetherdata.doc_idis non-empty.registeredandstatusreport operational state, not identity.
Query and JSON-body fields remain named slug for wire compatibility. Put the
saved document reference in them. Path help displays <doc-ref>, and old legacy
slugs are accepted. The CLI does not persist the reference.
Minimum rollout dependency: this contract requires the canonical-create server changes in octo-docs-backend#166 and octo-docs-html#33 to be merged and deployed before this CLI is released.
Auth & space
- Authenticate with a stored bot profile (
--profile/--bot-id) orOCTO_BOT_TOKEN; confirm the selected identity withocto-cli config show. - Do not pass
--space. octo-doc resolves identity and space server-side. - Write operations require author/write capability. Reads need at least reader
capability; backend failures are normalized into the CLI's
{ok:false,error:{type,code,message,hint,detail}}envelope.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 211 lines · 67 tokens per session scan A 697e881a397a
octo-html is a skill published in the GitHub repository Mininglamp-OSS/octo-cli (734 stars, last pushed yesterday), licensed Apache-2.0. It adds 67 tokens to every session and 2,436 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
xberg
Extract text, tables, metadata, and images from 97+ document formats (PDF, Office, images, HTML, email, archives, academic) using Xberg CLI.
haypile
Search the user's local documents (PDF, docx, pptx, markdown, text, HTML, mbox email) through Haypile, a local search daemon. Use when the user asks what their files say, wants passages from contracts, papers, or notes, or wants a folder indexed for search. Every result carries a file and page citation. Runs entirely…
gh-skill
Manage agent skills with gh skill. Use this skill to discover, preview, install, update, and publish Agent Skills so an agent can self-manage the skills available in its environment.
officecli-word-form
Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document'…
officecli-data-dashboard
Use this skill to build a multi-element Excel dashboard — Dashboard sheet on open, multiple formula-driven KPI cards, multiple charts, sparklines, and conditional formatting — from CSV or tabular input. Trigger on: 'dashboard', 'KPI dashboard', 'analytics dashboard', 'executive dashboard', 'metrics dashboard', 'CSV to…
gws-sheets
Google Sheets: Read and write spreadsheets.