Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add mxyhi/ok-skills --skill axgit clone --depth 1 https://github.com/mxyhi/ok-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mxyhi/ok-skills/ax)<a href="https://agentmods.dev/skills/mxyhi/ok-skills/ax"><img src="https://agentmods.dev/badge/skills/mxyhi/ok-skills/ax/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mxyhi/ok-skills/ax"><img src="https://agentmods.dev/badge/skills/mxyhi/ok-skills/ax.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00073 | $0.00936 |
| Opus 5 | $0.00036 | $0.00468 |
| Sonnet 5 | $0.00015 | $0.00187 |
| Haiku 4.5 | $0.00007 | $0.00094 |
Grade D, and why
ax scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
# curl reflexes work: -u -I -o -k -m -f --data-raw (and -L/-i/-s are no-ops) Cloud metadata endpointhighServer-side request forgery
One request to 169.254.169.254 can return temporary IAM credentials.
- Do not touch cloud metadata endpoints (169.254.169.254, metadata.google. Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
description: Use the ax CLI instead of curl + throwaway parsing scripts whenever you fetch a URL, explore an unknown web page, or extract structured data from HTML. Trigger whenever you are about to write an inline scrip This is a copy
100% identical to ax — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ax — the AI-era curl: fetch, discover, extract
One command: ax <url|file|-> [selector] [flags]. Never write regex over
HTML, and never use bare curl (it returns nothing on empty bodies).
Cheatsheet
ax https://api.site.example/users # {status, ok, url, redirected, ms, headers, body}
ax https://api.site.example/users -H 'authorization: Bearer x' -X POST -d '{"a":1}'
ax https://api.site.example/users -d @payload.json # @file reads it, implies POST; --data-raw = literal @string
# curl reflexes work: -u -I -o -k -m -f --data-raw (and -L/-i/-s are no-ops)
ax https://site.example --outline # discover: repeating structures
ax https://site.example --locate 'some text' # discover: which selector holds this
ax https://site.example '.card' --count # confirm a hypothesis
ax https://site.example '.card' --row 'title=a, href=a@href, id=@data-id'
ax https://site.example '.private' -H 'authorization: Bearer x' --text
ax https://site.example 'table' --table --where 'Stars >= 30000'
ax https://site.example 'table' --table --where '`Col With Spaces` ~ /x/'
ax https://docs.site.example/guide --md --budget 800 # read docs as markdown
The workflow: fetch/--outline once → --locate/--count to confirm → ONE --row/--table call. Repeat fetches of the same URL are cached ~2min, so probing is free (--fresh to bypass). Parse requests with -H or -u bypass the cache automatically.
Speed discipline
Aim for ≤3 tool calls: one batched look (ax URL --outline; ax URL '.guess' --count),
one extraction call, then answer. Turns cost more than commands — semicolons
are free. Every --row/--table run prints N rows extracted + empty-field counts on stderr — that IS the verification; do not re-probe.
Answer with the data, concisely — no methodology narration.
Output rules
- Default cap 50 results; stderr announces anything hidden.
--limit,--all,--budget <tokens>control it. Rows default to token-cheap TSV; add--jsonif you need JSON. - For automated continuation, use
--json-envelope. Readdata; whenmeta.stateismore, rerun the same command with--offset <meta.next_offset>. Continue only while it ismore; stop oncompleteorpast_end; do not restart from zero or increase the budget. - Errors are one stderr line with a hint — fix the flag, not the approach.
- If ax says "likely a JS-rendered SPA", stop probing selectors — switch to a browser tool; the content is not in the raw HTML.
- For plain text files and non-web work, use your usual tools — ax is for the web.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 67 lines · 73 tokens per session scan D 4acbbc5574e3
ax is a skill published in the GitHub repository mxyhi/ok-skills (485 stars, last pushed 3d ago), licensed Apache-2.0. It adds 73 tokens to every session and 936 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it D with 3 findings (sends data to an external url, cloud metadata endpoint, makes network calls). It is 100% identical to ax, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
browser-testing-with-devtools
Tests in real browsers via Chrome DevTools MCP. Use when building or debugging anything that runs in a browser. Use when you need to inspect the DOM, capture console errors, analyze network requests, profile performance, or verify visual output with real runtime data. Requires the chrome-devtools MCP server to be…
browser_cdp
Use this skill when the user explicitly wants to connect to a running Chrome browser, scan local CDP ports, specify a cdpport, or share a single browser across multiple agents/tools. By default, browseruse already launches the browser using managed CDP; if the user does not want to expose browser history, cookies, or…
browser_cdp
A guide for connecting browser-control tools to an existing Chrome session through its remote debugging interface. It explains scanning ports, attaching to a browser, choosing a port, sharing a browser, and switching to a more private control mode.
browser_visible
A guide to browseruse launch settings for Chromium-based browsers. It covers visible windows, private control, extra browser start options such as incognito mode or a proxy, and choosing a browser executable path.
browser_visible
Use this skill when the user needs to control the browser launch mode for browseruse. By default, browseruse launches the local Chrome/Chromium using managed CDP; headed controls whether the window is visible, and privatemode controls whether CDP is disabled in favor of Playwright.
awesome-content-publisher
Publishes a prepared batch of scheduled posts to the user's own accounts through their live browser (Playwright MCP bridge): bridge and format preflights, per-platform login checks that never automate a login, a persistent ledger that prevents duplicate posts across restarts, timezone-mapped scheduling that can idle…