Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/olo-dot-io/uni-cli/unicli-claude-codenpx skills add olo-dot-io/Uni-CLI --skill unicli-claude-codegit clone --depth 1 https://github.com/olo-dot-io/Uni-CLIWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00080 | $0.01550 |
| Opus 5 | $0.00040 | $0.00775 |
| Sonnet 5 | $0.00016 | $0.00310 |
| Haiku 4.5 | $0.00008 | $0.00155 |
Grade A, and why
unicli-claude-code scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 174 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Uni-CLI × Claude Code — Reliable Invocation
TL;DR — If the payload contains ANY of: quotes, emoji, newlines, JSON, non-ASCII, or is longer than ~60 chars, PIPE IT. Never inline.
Why this skill exists
Transformers live in TC0. Matching balanced " and ' pairs with arbitrary
nesting is a mod-2 state-tracking problem that TC0 cannot solve in constant
decode depth. Empirically, top LLMs land <43% on 0→1 CLI generation
(CLI-Tool-Bench arXiv:2604.06742) and 62% of agent-tool bugs cluster at the
tool-invocation / execution stages (arXiv:2603.20847).
Uni-CLI gives you THREE invocation channels. One of them (shell-args) inherits the TC0 bottleneck. The other two do not.
The decision rule
| If the payload has … | Use channel |
|---|---|
| Only ASCII, no quotes, <60 chars | shell OK |
| Any quote or backslash | stdin-JSON |
| Emoji / CJK / non-ASCII | stdin-JSON |
| Newlines or inline JSON | stdin-JSON |
| Being reused across multiple invocations | --args-file |
When unsure → stdin-JSON. It never makes things worse.
The three channels
1 — stdin-JSON (preferred for complex payloads)
echo '{"query": "she said \"hi\" 🎉", "limit": 10}' | unicli twitter search
- Uni-CLI auto-detects non-TTY stdin whose body starts with
{ - Precedence: stdin-JSON >
--args-file> shell flags > defaults - Works for EVERY command — no per-adapter opt-in needed
2 — --args-file (preferred when payload is reused)
cat > /tmp/q.json <<'EOF'
{ "query": "machine learning", "limit": 20, "locale": "en_US" }
EOF
unicli arxiv search --args-file /tmp/q.json
- Absolute paths recommended
- JSON only (YAML and TOML deliberately not supported — minimize format ambiguity)
3 — shell args (only for trivial payloads)
unicli hackernews top --limit 5
Fine when every value is ASCII, no quotes, no emoji.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 174 lines · 80 tokens per session scan A 43c40b065721
unicli-claude-code is a skill published in the GitHub repository olo-dot-io/Uni-CLI (270 stars, last pushed 12d ago), licensed Apache-2.0. It adds 80 tokens to every session and 1,550 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
browser-use
Direct browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work.
remote-browser
Controls an isolated Browser Use Cloud browser from a sandboxed machine with the current Browser Use CLI.
opencli-browser
Use when an agent needs to drive a real Chrome window via opencli — inspect a page, fill forms, click through logged-in flows, or extract data ad-hoc. Covers the selector-first target contract, compound form fields, stale-ref handling, network capture, and the agent-native envelopes the CLI returns. Not for writing…
opencli-adapter-author
Use when writing an OpenCLI adapter for a new site or adding a new command to an existing site. Guides end-to-end from first recon through field decoding, adapter coding, and verify. Replaces opencli-oneshot / opencli-explorer. For ad-hoc browser driving (no adapter), see opencli-browser instead; for a top-level…
cloud
Documentation reference for using Browser Use Cloud — the hosted API and SDK for browser automation. Use this skill whenever the user needs help with the Cloud REST API (v2, v3, or v4), browser-use-sdk (Python or TypeScript), X-Browser-Use-API-Key authentication, cloud sessions, browser profiles, profile sync, CDP…
opencli-autofix
Automatically fix broken OpenCLI adapters when commands fail. Load this skill when an opencli command fails — it guides you through collecting a trace artifact, patching the adapter, retrying, and filing an upstream GitHub issue after a verified fix. Works with any AI agent.