Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/mr-kelly/skillsnpx agentmods add skills/mr-kelly/skills/kelly-messengerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mr-kelly/skills/kelly-messenger)<a href="https://agentmods.dev/skills/mr-kelly/skills/kelly-messenger"><img src="https://agentmods.dev/badge/skills/mr-kelly/skills/kelly-messenger/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mr-kelly/skills/kelly-messenger"><img src="https://agentmods.dev/badge/skills/mr-kelly/skills/kelly-messenger.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 126 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00096 | $0.03470 |
| Opus 5 | $0.00048 | $0.01735 |
| Sonnet 5 | $0.00019 | $0.00694 |
| Haiku 4.5 | $0.00010 | $0.00347 |
Grade A, and why
kelly-messenger scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 206 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Kelly Messenger
App UI Screenshots
Overview
Use this skill as Kelly's unified chat inbox operator: WhatsApp, Discord,
Slack, and Telegram (extensible to WeChat, iMessage, LINE, Messenger)
aggregated into one place, with one composer that queues replies for review
instead of sending them. The AirApp shows a command-desk overview, a unified
inbox with chat transcripts and a reply composer, an outbox review queue for
outgoing replies, account/connector health, and settings. Reading real
messages and sending real replies are both genuine external-platform
operations a browser cannot perform (no secrets, no outbound platform
calls): scripts/sync_messages.mjs pulls new messages from the API
connectors, scripts/ingest_messages.mjs is the single write-path for
agent-browsed or manually-collected payloads, and scripts/send_outbox.mjs
sends approved replies. The AirApp itself only reads Busabase and writes
queued replies/decisions.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 233 B
- assets/screenshots/accounts-zh-CN.webp 130 B
- assets/screenshots/accounts.webp 130 B
- assets/screenshots/chat-zh-CN.webp 130 B
- assets/screenshots/chat.webp 130 B
- assets/screenshots/inbox-zh-CN.webp 130 B
- assets/screenshots/inbox.webp 130 B
- assets/screenshots/outbox-zh-CN.webp 131 B
- assets/screenshots/outbox.webp 131 B
- assets/screenshots/overview-zh-CN.webp 130 B
- assets/screenshots/overview.webp 130 B
- assets/screenshots/thumbs/accounts-zh-CN.webp 130 B
- assets/screenshots/thumbs/accounts.webp 130 B
- assets/screenshots/thumbs/chat-zh-CN.webp 130 B
- assets/screenshots/thumbs/chat.webp 130 B
- assets/screenshots/thumbs/inbox-zh-CN.webp 130 B
- assets/screenshots/thumbs/inbox.webp 130 B
- assets/screenshots/thumbs/outbox-zh-CN.webp 130 B
- assets/screenshots/thumbs/outbox.webp 130 B
- assets/screenshots/thumbs/overview-zh-CN.webp 130 B
- assets/screenshots/thumbs/overview.webp 130 B
- busabase.json 1.1 KB
- content/_folder.json 158 B
- content/accounts/base.json 2.2 KB
- content/conversations/base.json 2.0 KB
- content/kelly-messenger-app/_node.json 178 B
- content/kelly-messenger-app/.busabaseignore 194 B
- content/kelly-messenger-app/app/accent-theme.css 8.0 KB
- content/kelly-messenger-app/app/accent-theme.js 7.3 KB runs code
- content/kelly-messenger-app/app/app.js 20 KB runs code
- content/kelly-messenger-app/app/base-ui.css 13 KB
- content/kelly-messenger-app/app/demo-visuals.css 1.6 KB
- content/kelly-messenger-app/app/demo-visuals.js 3.4 KB runs code
- content/kelly-messenger-app/app/i18n/messages.js 7.7 KB runs code
- content/kelly-messenger-app/app/index.html 4.4 KB
- content/kelly-messenger-app/app/js/busabase-client.js 226 B runs code
- content/kelly-messenger-app/app/js/config.js 7.6 KB runs code
- content/kelly-messenger-app/app/js/connect-gate.js 1.6 KB runs code
- content/kelly-messenger-app/app/js/demo-visuals-data.js 4.8 KB runs code
- content/kelly-messenger-app/app/js/message-views.js 18 KB runs code
- content/kelly-messenger-app/app/js/messenger-model.js 11 KB runs code
- content/kelly-messenger-app/app/js/providers/busabase-provider.js 11 KB runs code
- content/kelly-messenger-app/app/js/providers/demo-provider.js 31 KB runs code
- content/kelly-messenger-app/app/js/providers/index.js 270 B runs code
- content/kelly-messenger-app/app/js/runtime.js 3.4 KB runs code
- content/kelly-messenger-app/app/styles.css 24 KB
- content/kelly-messenger-app/app/vendor/busabase-airapp-gate.css 6.1 KB
- content/kelly-messenger-app/app/vendor/busabase-airapp-gate.js 11 KB runs code
- content/kelly-messenger-app/app/vendor/busabase-airapp.js 552 KB runs code
- content/kelly-messenger-app/app/vendor/busabase-sdk.js 787 KB runs code
- content/kelly-messenger-app/package.json 1.1 KB
- content/kelly-messenger-app/pnpm-lock.yaml 5.2 KB
- content/kelly-messenger-app/pnpm-workspace.yaml 50 B
- content/kelly-messenger-app/scripts/check.mjs 4.2 KB runs code
- content/kelly-messenger-app/server.js 3.1 KB runs code
- content/kelly-messenger-app/test/messenger-model.test.mjs 6.1 KB runs code
- content/messages/base.json 1.2 KB
- content/messages/records.ndjson 1.1 KB
- content/replies/base.json 3.5 KB
- content/settings/base.json 1001 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 206 lines · 96 tokens per session scan A 9878d82e6c06
kelly-messenger is a skill published in the GitHub repository mr-kelly/skills (5 stars, last pushed today), licensed MIT. It adds 96 tokens to every session and 3,470 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
baoyu-wechat-summary
Summarizes WeChat group chat highlights into a structured digest using the local wx-cli binary (https://github.com/jackwener/wx-cli). Generates a normal digest by default; a roast (毒舌) version is opt-in. Maintains per-group history (history.json + history-digests.jsonl), per-user profiles, and per-group fact memory…
execution-discipline
A set of rules for carrying out long, multi-tool coding-agent sessions without wasting work or losing track of progress. It covers waiting for background tasks, handling failed checks, assigning subagents, saving results, and closing each work round cleanly.
okhp3-notion-capture-router
Use this skill whenever an agent needs to export, capture, ingest, summarize, route, deduplicate, or reconcile a conversation or content artifact into Notion. It guides connector-enabled agents through choosing a Notion page versus database destination, resolving a workspace-specific URL or ID, inspecting page content…
unified-taskflow
A task-management workflow for genuinely large, multi-stage jobs that need saved plans, checkpoints, recovery information, and acceptance tracking. A checkpoint is a recorded progress marker used to resume work safely.
okhp3-replit-free-mode-autonomy
Keep Replit project work autonomous and Free Mode-first with bounded execution, checkpointed quota recovery, and quiet upgrade handling. Use when the user asks to maximize Free Mode, avoid repeated upgrade nudges, retry after a five-hour or weekly limit, preserve work across interruptions, or keep routine work moving…
chatgpt-web-bridge
A text bridge between a local coding agent and ChatGPT in a web browser. ChatGPT handles the conversation and planning, while the local side sends messages, receives replies, and can carry out instructions; the web side cannot directly use local files or shell commands.