agentmods.dev

sage-canary-attestation

sage-canary-attestation is a skill for Claude Code, Codex from MythicAgents/sage. It costs 70 tokens per session (2,540 once invoked), scanned A, original, GPL-3.0.

A read-only verification process for a bounded Mythic canary run, which is a small test of the native system. It reconstructs the run from Mythic’s own records and compares them with the expected conversation trace.

In plain words
What is it for?
Use it after a native canary run to rebuild the recorded sequence, compare it with the frozen expected trace, and decide whether the kernel behaved as intended.
Why use it?
It provides an independent check of whether the system behaved correctly without relying only on the system’s own claims. The process uses a read-only Spectator credential and does not alter the records.

Skill for Claude CodeCodex

Which agent this was written for is unclear — body not stored (licence); the path alone says nothing.

not rated 24repo 16d ago A scan 70 tokens GPL-3.0

Good fit Use it after a native canary run to rebuild the recorded sequence, compare it with the frozen expected trace, and decide whether the kernel behaved as intended.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/mythicagents/sage/sage-canary-attestation
View source ↗ MythicAgents/sage
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add MythicAgents/sage --skill sage-canary-attestation
Clone the repo
git clone --depth 1 https://github.com/MythicAgents/sage

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sage-canary-attestation

README.md
[![agentmods](https://agentmods.dev/badge/skills/mythicagents/sage/sage-canary-attestation/github.svg)](https://agentmods.dev/skills/mythicagents/sage/sage-canary-attestation)
Your own site
<a href="https://agentmods.dev/skills/mythicagents/sage/sage-canary-attestation"><img src="https://agentmods.dev/badge/skills/mythicagents/sage/sage-canary-attestation/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for sage-canary-attestation

Your own site · 80×15
<a href="https://agentmods.dev/skills/mythicagents/sage/sage-canary-attestation"><img src="https://agentmods.dev/badge/skills/mythicagents/sage/sage-canary-attestation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 70 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,540 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00070 $0.02540
Opus 5 $0.00035 $0.01270
Sonnet 5 $0.00014 $0.00508
Haiku 4.5 $0.00007 $0.00254

Measured 11d ago against content hash d4bcdd79ec2e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

sage-canary-attestation scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

The scan reads SKILL.md. This mod also ships 2 executable files (scripts/attest_canary.py, scripts/egress_probe.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

intermediate installed, so `curl` works — but Python's `openai`/`httpx` default to **certifi**, which
skills/sage-canary-attestation/SKILL.md · 160 lines

The source is not reproduced here

Licensed GPL-3.0

The repository is licensed GPL-3.0, which this catalogue does not treat as permission to reproduce the file. Read it at the source.

Read it on GitHub

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 160 lines · 70 tokens per session scan A d4bcdd79ec2e

Subscribe to this mod's changes

sage-canary-attestation is a skill published in the GitHub repository MythicAgents/sage (24 stars, last pushed 16d ago), licensed GPL-3.0. It adds 70 tokens to every session and 2,540 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

LLMLangChainSecurityTestingaiai-agentsai-chatbotarize-phoenix
Related

Other skills, from other repositories

systematic-debugging

4-phase root cause debugging: understand bugs before fixing.

NousResearch/hermes-agent · 16 tokens

react-patterns

React 18/19 patterns including hooks discipline, server/client component boundaries, Suspense + error boundaries, form actions, data fetching, state management decision trees, and accessibility-first composition. Use when writing or reviewing React components.

affaan-m/ECC · 49 tokens

rust-testing

Rust testing patterns including unit tests, integration tests, async testing, property-based testing, mocking, and coverage. Follows TDD methodology.

affaan-m/ECC · 31 tokens

golang-testing

Go testing best practices including table-driven tests, test helpers, benchmarking, race detection, coverage analysis, and integration testing patterns. Use when writing or improving Go tests.

affaan-m/ECC · 37 tokens

verification-loop

A comprehensive verification system for Claude Code sessions. Use when verifying a Claude Code session's work before claiming it is complete.

affaan-m/ECC · 27 tokens

mem0-test-integration

Verify a Mem0 integration produced by /mem0-integrate. Runs in the same workspace on the same branch (loose coupling) — installs dependencies, runs the repo's native test suite, then exercises a real end-to-end smoke flow against the user's API key. Produces a scorecard. TRIGGER when: user has just run /mem0-integrate…

mem0ai/mem0 · 207 tokens