Paperclip is a Node.js server and React application for coordinating AI agents as a business team, with goals, organizational roles, budgets, governance, and work tracking in one interface. It is used by people managing multiple agents or autonomous agent organizations across tools such as OpenClaw, Claude Code, Codex, and Cursor. The catalogue includes skills, agents, an MCP add-on, and an instruction for working with Paperclip.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add paperclipai/paperclip --skill paperclip-create-agentgit clone --depth 1 https://github.com/paperclipai/paperclipWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/paperclipai/paperclip/paperclip-create-agent)<a href="https://agentmods.dev/skills/paperclipai/paperclip/paperclip-create-agent"><img src="https://agentmods.dev/badge/skills/paperclipai/paperclip/paperclip-create-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/paperclipai/paperclip/paperclip-create-agent"><img src="https://agentmods.dev/badge/skills/paperclipai/paperclip/paperclip-create-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk warn
- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Data Exfiltration · line 27 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.02378 |
| Opus 5.5 | $0.00018 | $0.00951 |
| Sonnet 5.5 | $0.00009 | $0.00476 |
| Haiku 4.5 | $0.00004 | $0.00238 |
Grade A, and why
paperclip-create-agent scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sS "$PAPERCLIP_API_URL/api/agents/me" \ How it starts
The opening of the file, as written. The whole thing — 214 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Paperclip Create Agent Skill
Use this skill when you are asked to hire/create an agent.
Preconditions
You need either:
- board access, or
- agent permission
can_create_agents=truein your company
If you do not have this permission, keep the current task assigned to yourself
and identify the missing hiring authority. A CEO or manager title does not grant
hiring permission. Do not reassign the task or create an escalation task to bypass
the denial. Use the applicable approval flow when available; otherwise save a
human-input interaction on the current task with resolverPolicy: "human_only"
and continuationPolicy: "wake_assignee", then leave it in_review. Use the
complete human-input payload in the paperclip skill; when the requesting user
owns the decision, address it with their actual addresseeUserId. A human answer
does not itself grant permission: recheck authorization before any hire.
Workflow
Choose the API transport
On Paperclip Runner, use the advertised Paperclip tools. Use get_task_context
and list_agents for identity and team context, then search_api to discover the
configuration, instruction-template, icon, and agent-hires endpoints used below.
Call the discovered operations with call_api; the server supplies company and
authentication context. Read the returned schemas before drafting the hire.
The shell examples below apply to adapters that receive PAPERCLIP_API_URL and
PAPERCLIP_API_KEY. Paperclip Runner does not supply those variables. Do not
search workspace files for a server address or credentials to recreate that path.
If search_api / call_api are unavailable, report that hiring requires the
operator to enable runner API tools for this company. Preserve the proposed hire
in the conversation; do not claim an agent was created or substitute a temporary
subagent for the requested permanent hire.
1. Confirm identity and company context
curl -sS "$PAPERCLIP_API_URL/api/agents/me" \
-H "Authorization: Bearer $PAPERCLIP_API_KEY"
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/agent-instruction-templates.md 1.3 KB
- references/agents/coder.md 746 B
- references/agents/qa.md 672 B
- references/agents/securityengineer.md 1.5 KB
- references/agents/uxdesigner.md 735 B
- references/api-reference.md 3.1 KB
- references/baseline-role-guide.md 1.1 KB
- references/draft-review-checklist.md 1.8 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +7 lines aecb97509c80
- 10d ago Changed · +18 lines 657a7f4349a8
- 22d ago Changed · +1 lines 00e3063a40bb
- 24d ago Changed · +8 lines 66b935b273e2
- 1mo ago Changed · +16 lines 78b3a0ec8bb4
- 1mo ago First seen · 164 lines · 44 tokens per session scan A 22fd6cf94637
paperclip-create-agent is a skill published in the GitHub repository paperclipai/paperclip (107,044 stars, last pushed today), licensed MIT. It adds 44 tokens to every session and 2,378 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
fleetq-connect
Connect an agent to FleetQ over MCP or the REST API, including obtaining credentials via dynamic client registration.
fleetq-manage-workflow
Build, validate, cost, and execute FleetQ visual DAG workflows — including generating one from a natural-language goal.
fleetq-run-experiment
Create, run, monitor, and recover a FleetQ experiment through its 20-state pipeline via MCP tools or the REST API.
atelier
Operate the Atelier software factory (the ADW engine stamped into this repo's adws/). Use when the user says /atelier, wants to create / run / update an ADW or workflow, manage the agent roster in sssf.config.yaml, keep the engine current, or observe running agent workflows. Keywords - atelier, software factory, ADW…
deep-reasoning
Structured multi-step reasoning tool for complex problem solving with branching, hypothesis testing, and evidence tracking.
app-launcher
Launch applications, open URLs in browser, and list running processes. Requires approval for launching applications.