Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ooooooooooooooooooop/agent-tools/task-mode-routernpx skills add ooooooooooooooooooop/agent-tools --skill task-mode-routergit clone --depth 1 https://github.com/ooooooooooooooooooop/agent-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ooooooooooooooooooop/agent-tools/task-mode-router)<a href="https://agentmods.dev/skills/ooooooooooooooooooop/agent-tools/task-mode-router"><img src="https://agentmods.dev/badge/skills/ooooooooooooooooooop/agent-tools/task-mode-router.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00088 | $0.00905 |
| Opus 5 | $0.00044 | $0.00452 |
| Sonnet 5 | $0.00018 | $0.00181 |
| Haiku 4.5 | $0.00009 | $0.00090 |
Grade A, and why
task-mode-router scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
任务模式路由
目标
选择能够控制实际风险的最轻执行模式。只负责分类和路由，不代替后续 Skill 执行，也不因为分类而自动写入文件。
分类
小型任务
单文件或单点修改、目标明确、风险低、容易验证和回滚。
处理：直接做最小修改，不引入新抽象、依赖或长流程。
只读审计
用户要求检查、比较、解释、审查或报告状态，未授权文件、仓库、外部系统或配置写入。
处理：只收集证据；不生成额外报告文件，不同步、不清理、不修改策略或配置。
中型任务
涉及多个文件或需要适度判断，可能影响行为，且需要验证。
处理：给出短计划，说明影响面和风险，完成修改并报告验证与回滚方式。
大型任务
多文件功能、架构重构、规则系统变更、长期工作流或需要验收标准的任务。
处理：先明确目标、非目标、约束、影响和验收标准；判定为大型后，主会话立即触发硬熔断（禁止连续本地探查/改写），下一动作必须输出结构化 Brief 并拉起独立 Worker（Subagent）执行。
高风险任务
安装 Skill、MCP、CLI、插件或 hooks；修改用户级/全局配置；删除、移动或改变权限；运行不可信代码；使用浏览器登录状态或敏感页面。
处理：先审计来源、命令、写入路径、权限、上传风险和回滚方式；没有明确授权时停止。
路由顺序
按以下优先级判断：
- 只读请求保持只读，不因“顺便修复”而扩大范围。
- 高风险写入优先于任务规模判断。
- 再区分小型、中型和大型执行深度。
- 大型任务只有在确实需要可恢复锚点、检查点和交接记录时才使用
unified-taskflow。
低风险可逆动作偏好（LOW-RISK REVERSIBLE ACTION BIAS）
同时满足：目标明确、下一步可逆、验证容易 —— 优先 DO，而不是 ASK / PLAN MORE / AUDIT MORE。是否需要询问以 clarify-before-change 意图解析策略为准（可逆假设记录即推进）；是否停止以 execution-discipline 合法停止策略为准。高风险与安全边界判断继续优先于本偏好。
Skill 组合
- 本 Skill 只做模式分类。
- 有实质歧义时交给
clarify-before-change。 - 确定要修改时交给
minimal-implementation控制变更预算。 - 只有大型、跨阶段且需要恢复记录时才交给
unified-taskflow。 - 依赖关系只表示建议组合，不代表自动安装或自动执行。
输出契约
输出以下字段：
模式：small | audit | medium | large | high-risk
依据：触发该模式的事实
允许动作：当前模式可以做什么
禁止动作：当前模式明确不能做什么
下一步：需要调用的 Skill 或最小执行路径
如果证据不足，只指出缺失信息；不要用猜测替代风险分类。
验证
分类完成后检查：模式是否与用户授权一致、是否遗漏高风险写入、是否误把只读审计变成了修改任务。相关示例见 multi-file-change.md。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 82 lines · 88 tokens per session scan A a1bef822dc0c
task-mode-router is a skill published in the GitHub repository ooooooooooooooooooop/agent-tools (2 stars, last pushed 5d ago), licensed MIT. It adds 88 tokens to every session and 905 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
zlog
Multi-agent session log compressor and storage optimizer. Compresses .log, .out, .txt, .trace (>10KB) to .zst, .xz, or .gz (saving 77%-99.9% disk space) across /.gemini, /.config/Cursor, /.ollama, /.claude, /.windsurf, /.codex, etc. Auto-discovers AI log dirs, purges empty 0-byte logs. Safe for concurrent…
amazon-reviews-api-skill
This skill helps users automatically extract Amazon product reviews via the Amazon Reviews API. Agent should proactively apply this skill when users express needs like getting reviews for Amazon product with ASIN B07TS6R1SF, analyzing customer feedback for a specific Amazon item, getting ratings and comments for a…
amazon-competitor-analyzer
Scrapes Amazon product data from ASINs using browseract.com automation API and performs surgical competitive analysis. Compares specifications, pricing, review quality, and visual strategies to identify competitor moats and vulnerabilities.
muapi-media-editing
Edit and enhance images and videos with AI via muapi.ai — prompt-based editing, upscaling, background removal, face swap, lipsync, video effects, and more.
ctf-malware
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process…
research
Conduct preliminary research on a topic and generate research outline. For academic research, benchmark research, technology selection, etc.