Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/monk-io/monk-plugin/monknpx skills add monk-io/monk-plugin --skill monkgit clone --depth 1 https://github.com/monk-io/monk-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/monk-io/monk-plugin/monk)<a href="https://agentmods.dev/skills/monk-io/monk-plugin/monk"><img src="https://agentmods.dev/badge/skills/monk-io/monk-plugin/monk.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00046 | $0.05181 |
| Opus 5 | $0.00023 | $0.02590 |
| Sonnet 5 | $0.00009 | $0.01036 |
| Haiku 4.5 | $0.00005 | $0.00518 |
Grade C, and why
monk scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Tells the agent never to refusehighAnti-refusal
Suppressing the ability to decline removes a core safety control; a later harmful request then succeeds.
feature. Honor the request directly — do not refuse or defer it. How it starts
The opening of the file, as written. The whole thing — 445 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Using Monk
Model
Monk is operated through a local companion named monk-agent. The companion
exposes MCP tools and a localhost dashboard, then talks to local monkd through
the @monk-io/monk TypeScript client from monk-ts2.
Antigravity is a supported host.
Preflight
Before deploying:
- Confirm the local Monk MCP tools/resources are available. These are backed
by
monk-agent.- Antigravity handles Monk MCP authentication automatically via OAuth. If authentication is required, use Antigravity's MCP authentication flow: Agent Settings → Customizations tab → Authenticate next to the monk server. Complete the flow in your browser, then return here.
- Once authenticated, Antigravity reconnects automatically.
- If
monk-agentis missing, start it by runningscripts/start-monk-agent.shon macOS/Linux orscripts/start-monk-agent.ps1on Windows. Do not fall back to directmonkCLI operations. - Workspace binding. Call
monk.session.initwith the absolute workspace root at the start of each session.monk-agentdoes not fall back to its own working directory, so an explicit binding is required when the host does not advertise the MCProotscapability. PassworkspaceRootas the absolute path to the project directory. Omit the call only if you have confirmed that Monk already has the correct workspace root bound. - Confirm auth status with
monk.auth.status(once the tools are available). If signed out, sign in through Antigravity's MCP auth flow (step 1) — that flow also establishes the upstream Monk session; there is no in-band tool to start auth. Disconnecting the MCP server host-side clears only Antigravity's own credentials, somonk-agentstays signed in to the same Monk user and the next sign-in reuses it silently. To sign in as a different Monk user, callmonk.auth.logout(approved in the dashboard) and then re-run the flow from step 1 — that time the user picks the account. Antigravity may still list the server as authenticated afterwards, holding a token the agent has revoked, so tell the user to explicitly re-authenticate. Logging out keeps stored secrets and credentials; do not usemonk.agent.clear_statefor this. Switching personal vs org context within the same user ismonk.account.selectinstead — a different operation; ask which the user means if it is ambiguous. - Confirm runtime status.
monk-agentrequires Monk CLI andmonkdlocally. If missing or broken, usemonk.install.statusto inspect the platform-specifichumanExplanation,relationships,components,checks,probes,troubleshootingHints,nextAction, andactions. Explain the current platform's install graph before running remediation.monk.install.runis dry by default: withoutexecute: trueit only inspects status and runs nothing. Useexecute: trueto run remediation. Installation, upgrade, and repair actions also requireapproved: trueafter explicit user or dashboard approval.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 445 lines · 46 tokens per session scan C 112c8f16e51b
monk is a skill published in the GitHub repository monk-io/monk-plugin (23 stars, last pushed 16d ago), licensed Apache-2.0. It adds 46 tokens to every session and 5,181 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it C with 1 finding (tells the agent never to refuse). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
timoni
Use when deploying applications to Kubernetes with Timoni. Covers installing and upgrading module instances from OCI registries, composing multi-app deployments with bundles, injecting values from clusters or CI with runtimes, targeting multiple clusters, and authoring, testing, signing and publishing modules with CUE.
compute-env-setup
Set up a reproducible Feynman compute environment for research jobs. Use when a task needs Python/R packages, GPU libraries, containers, Modal, SSH, caches, or managed model runtime setup.
windows-builder
Build Windows images with Packer using WinRM communicator and PowerShell provisioners. Use when creating Windows AMIs, Azure images, or VMware templates.
deployment
Deploy Memoria with Docker Compose or Kubernetes. Environment variables, multi-instance setup, security. Use when deploying or configuring Memoria.
nvcf-self-managed-prerequisite
Install the prerequisites the NVCA operator / compute plane needs before nvcf-nvca-install can succeed: the operator tool nvcf-cli (required by the compute-plane stack's register-cluster step), KAI Scheduler (for the KAIScheduler feature gate), and the SMB CSI driver (for the sharedStorage Samba sidecar PVCs). The two…
nvca-self-managed-install
Install or validate the NVCA Operator chart against a self-managed NVCF control plane from the native monorepo. Use when the control plane comes from deploy/stacks/self-managed and NVCA must be installed with stack-derived image repository settings.