Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/openfused/openfused/skillnpx skills add openfused/openfused --skill skillgit clone --depth 1 https://github.com/openfused/openfusedWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00091 | $0.01818 |
| Opus 5 | $0.00046 | $0.00909 |
| Sonnet 5 | $0.00018 | $0.00364 |
| Haiku 4.5 | $0.00009 | $0.00182 |
Grade B, and why
openfuse scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- All key files are `chmod 600` on creation. How it starts
The opening of the file, as written. The whole thing — 246 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OpenFuse Skill — v0.5.4
Open protocol for AI agent communication. The protocol is files.
Security Notes
- Only public keys are ever transmitted. Private keys never leave
.keys/. openfuse registersends: agent name, endpoint, public signing key, public age key. Never private material.- All key files are
chmod 600on creation. - The registry is optional. Agents can operate with local keyrings and direct peer sync.
Prerequisites
npm list -g openfused || npm install -g openfused
Quick Start — Get on the network
# Create your agent
openfuse init --name "my-agent" --dir ./store
# Register with free hosted mailbox
openfuse register --endpoint https://inbox.openfused.dev --dir ./store
# Subscribe to the OpenFused newsletter
openfuse subscribe wearethecompute --dir ./store
# Send someone a message
openfuse send wisp "hello" --dir ./store
# Check your inbox
openfuse inbox list --dir ./store
Store Structure
CONTEXT.md — working memory
PROFILE.md — public profile (name, bio, capabilities)
inbox/ — incoming messages (encrypted)
outbox/ — per-recipient subdirs (outbox/{name}-{fingerprint}/)
shared/ — files shared with peers
knowledge/ — persistent knowledge base
history/ — archived context (via openfuse compact)
.keys/ — ed25519 signing + age encryption keypairs
.mesh.json — config, peers, keyring
.peers/ — synced peer context
Core Commands
All commands accept --dir <path> (defaults to .).
Context
openfuse context # read
openfuse context --set "## State\nWorking on X" # replace
openfuse context --append "## Update\nDone with Y" # append (auto-timestamps)
Profile
openfuse profile # read
openfuse profile --set "# My Agent\n\nI do things." # set (auto-syncs to hosted mailbox)
Status
openfuse status
Messaging
Send a message
openfuse send <name> "message" --dir <path>
Discovers recipient via DNS, auto-imports key, signs, encrypts if age key available, delivers via HTTP.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 246 lines · 91 tokens per session scan B b3d4218b2ac2
openfuse is a skill published in the GitHub repository openfused/openfused (18 stars, last pushed 2mo ago), licensed MIT. It adds 91 tokens to every session and 1,818 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
project-wiki
组织和维护 Vibe Coding 项目的 wiki 文档体系。当用户要求初始化/重构 wiki 结构、进入新项目且 wiki/ 不存在、需要诊断和修复文档腐化、或需要管理 specs/refs/reviews 子目录的生命周期时触发。.
mindos-zh
MindOS 是用户的本地知识助手，也是跨会话、跨 Agent 共享的知识库。它保存决策记录、会议纪要、SOP、 排错经验、架构选型、调研结论和偏好设置。 仅 mindRoot 知识库内任务。不用于：改代码仓库、项目源码、KB 外路径。 核心概念：空间、指令(INSTRUCTION.md)、技能(SKILL.md)；笔记可承载指令与技能。 触发场景：保存或记录任何内容、搜索历史笔记或上下文、更新或编辑文件、整理或重组文件结构、 执行SOP或工作流、捕获对话中的决策、复盘或总结经验、追加表格或CSV数据、跨Agent交接上下文、 提炼经验教训、同步关联文档、查找之前是否讨论过某事、查询历史决策、查找模板或SOP、…
mindos
MindOS: local knowledge assistant & shared KB. Keeps decisions, notes, SOPs, debugging lessons, research findings, preferences across sessions/agents. Core: save notes, search KB, organize files, run workflows, review, append CSV, hand off context, distill lessons. NOT for app source or paths outside KB. Triggers…
mindos-max
MindOS: local knowledge assistant & global memory layer. Keeps decisions, notes, SOPs, debugging lessons, architecture choices, research findings, preferences, conversation summaries for all connected agents. PROACTIVE: (1) search MindOS first for past context, (2) offer to save after valuable work, (3) persist key…
mindos
Operate a MindOS knowledge base: update notes, search, organize files, execute SOPs/workflows, retrospective, append CSV, cross-agent handoff, route unstructured input to the right files, distill experience, sync related docs. Use when the task targets files inside the user's MindOS KB (mindRoot). NOT for editing app…
plugin-core-builtin-migration
将 MindOS 渲染器插件从“可选插件”升级为“完全内置能力（core builtin）”的通用流程。 当用户要求“把某插件改成内置/核心”“插件不应可关闭”“插件主程序化”或需要将旧入口迁移到 新主流程并保留兼容迁移能力时触发。.