Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add mission69b/t2000 --skill t2000-swapgit clone --depth 1 https://github.com/mission69b/t2000Wrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mission69b/t2000/t2000-swap)<a href="https://agentmods.dev/skills/mission69b/t2000/t2000-swap"><img src="https://agentmods.dev/badge/skills/mission69b/t2000/t2000-swap/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mission69b/t2000/t2000-swap"><img src="https://agentmods.dev/badge/skills/mission69b/t2000/t2000-swap.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 122 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00093 | $0.01598 |
| Opus 5.5 | $0.00037 | $0.00639 |
| Sonnet 5.5 | $0.00019 | $0.00320 |
| Haiku 4.5 | $0.00009 | $0.00160 |
Grade A, and why
t2000-swap scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 125 lines — stays where its author put it; the contents beside it link to each section on GitHub.
t2000: Swap Tokens
Purpose
Convert between tokens at the best available rate. Cetus Aggregator routes across 20+ DEXs and picks the lowest-price-impact path. Slippage defaults to 1%; configurable up to 5%.
Swaps are NOT gasless. Unlike t2 send USDC / t2 send USDsui, Cetus swap transactions require SUI for gas (typically < $0.01 per swap). Ensure the wallet holds a small SUI balance before swapping.
Rules
- Preview before signing. Always run
t2 swap <amount> <from> <to> --quote(or callt2000_swapin dry-run via the MCP) and surfacepriceImpact+toAmountto the user before broadcasting. - Decline obviously bad swaps. If
priceImpact > 0.5%(50 bps), warn the user and require explicit confirmation. IfpriceImpact > 5%, refuse — that's almost certainly a thin-liquidity trap. - One swap per intent. Cetus aggregator handles multi-hop internally; don't chain
swapcalls. - Don't auto-decide stables. If the user says "swap to USD", ASK whether USDC or USDsui — they're both Sui-native stables.
- Limits apply to every swap (CLI and MCP). Limits are on by default ($25/tx · $100/day); if the swap exceeds a cap (on the from-side USD value) the write throws
LIMIT_EXCEEDED. Use--force(CLI) to override one time.
Command
t2 swap <amount> <from> <to> [--slippage <pct>] [--quote] [--force]
# Examples:
t2 swap 100 USDC SUI # 100 USDC → SUI, default 1% slippage
t2 swap 5 SUI USDC --slippage 2 # 5 SUI → USDC, 2% slippage
t2 swap 50 USDC USDsui # stable-to-stable; usually <0.05% impact
t2 swap 100 USDC SUI --quote # preview only (no signing)
Slippage is capped at 5% (any higher is rejected — that's degenerate liquidity).
Preview (--quote)
t2 swap 100 USDC SUI --quote
Returns (no signing, no execution):
toAmount— estimated output (at current pool state)priceImpact— basis points moved by the traderoute— provider name(s) Cetus selected (e.g. BLUEFIN + CETUS + AFTERMATH)fee— total Cetus protocol fee baked into the quote
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 125 lines · 93 tokens per session scan A dc3bc338479c
t2000-swap is a skill published in the GitHub repository mission69b/t2000 (23 stars, last pushed 1mo ago), licensed MIT. It adds 93 tokens to every session and 1,598 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
x402
HTTP 402 payment protocol for AI agent commerce — three-actor model (Client, Resource Server, Facilitator), ERC-3009 transferWithAuthorization, server middleware (@x402/express), client patterns in TypeScript and Python, facilitator integration, agent-to-agent payments, pricing strategies, and replay protection. Works…
agent-payment-stats
Cross-protocol agent-economy payment metrics from Barker's index. x402 (Base) volume is on-chain verifiable; ACP / AP2 / MPP / AP4M figures are self-reported claims. Separates real vs nominal volume by filtering wash/noise sellers. Use when users ask about x402 volume, agent payment stats, agent economy metrics, or…
tenjin-pay
Quote and pay HTTP endpoints that answer 402 Payment Required, with the wallet the tenjin CLI keeps on this machine. tenjin pay --quote reads the price, the payee and the endpoint's advertised request shape for free. tenjin pay pays one call after the user consents to that quote, and -H 'Name: value' sends a header…
setup-kraken
Use when the user wants to connect their own Kraken account to trade on it through the agent — "set up Kraken", "connect my Kraken", "trade on Kraken", "add/use my Kraken API key", "I want to trade on a CEX", or when moving toward live centralized-exchange trading on Kraken. Guides the user to create a LEAST-PRIVILEGE…
connect-kraken
Use when the user wants to connect their Kraken account to trade through the agent WITHOUT creating or handling an API key — "connect Kraken with OAuth", "log in with Kraken", "connect Kraken without a key", "I don't want to manage a Kraken key". This is the KEYLESS (OAuth) mode: the user consents once in a browser…
basedagents
Register an AI agent on BasedAgents, set a USDC payout wallet, and find, claim, deliver and get paid for tasks. Also post and review tasks as a buyer.