Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/pentagonal-ai/pentagonal/openclaw-skillnpx skills add Pentagonal-ai/pentagonal --skill openclaw-skillgit clone --depth 1 https://github.com/Pentagonal-ai/pentagonalWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00036 | $0.00857 |
| Opus 5 | $0.00018 | $0.00428 |
| Sonnet 5 | $0.00007 | $0.00171 |
| Haiku 4.5 | $0.00004 | $0.00086 |
Grade A, and why
pentagonal scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
bins: ["curl", "jq"] How it starts
The opening of the file, as written. The whole thing — 119 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Pentagonal — Smart Contract Security & Deployment
Use this skill when the user asks about:
- Auditing smart contracts for vulnerabilities
- Generating Solidity or Anchor/Rust smart contracts
- Deploying contracts to EVM or Solana chains
- Checking contract security or finding bugs
- Creating ERC20/ERC721/SPL tokens
Setup
Set PENTAGONAL_API_URL to your Pentagonal instance (default: https://www.pentagonal.ai).
export PENTAGONAL_API_URL="https://www.pentagonal.ai"
Capabilities
1. Generate Smart Contracts
Generate AI-powered smart contracts from natural language descriptions.
# EVM (Solidity)
bash scripts/pentagonal-generate.sh --chain ethereum --prompt "ERC20 token with burn and pause"
# Solana (Anchor/Rust)
bash scripts/pentagonal-generate.sh --chain solana --type program --prompt "Escrow program with time lock"
# Solana (SPL Token)
bash scripts/pentagonal-generate.sh --chain solana --type token --prompt "Governance token with 1B supply"
2. Audit Smart Contracts
Run AI-powered security audits on existing contract code.
# Audit from file
bash scripts/pentagonal-audit.sh --file ./contracts/MyToken.sol
# Audit from stdin
cat contract.sol | bash scripts/pentagonal-audit.sh --stdin
# Audit with specific focus
bash scripts/pentagonal-audit.sh --file ./contracts/MyToken.sol --focus "reentrancy,access-control"
The audit returns findings classified by severity:
- 🔴 Critical — Must fix before deployment
- 🟠 High — Likely exploitable
- 🟡 Medium — Potential issue
- 🔵 Low — Best practice suggestion
- ⚪ Info — Informational note
3. Deploy Contracts
Deploy compiled contracts to supported chains.
Supported EVM Chains:
- Ethereum (Mainnet, Sepolia)
- Polygon (Mainnet, Amoy)
- BSC (Mainnet, Testnet)
- Arbitrum (Mainnet, Sepolia)
- Base (Mainnet, Sepolia)
- Optimism (Mainnet, Sepolia)
- Avalanche (Mainnet, Fuji)
Supported Solana:
- SPL Token creation (Devnet, Mainnet)
- Anchor program deployment (via Solana Playground guided walkthrough)
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 119 lines · 36 tokens per session scan A 28fdc9111697
pentagonal is a skill published in the GitHub repository Pentagonal-ai/pentagonal (1 stars, last pushed 1mo ago), licensed MIT. It adds 36 tokens to every session and 857 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
solidity-language-docs
Solidity 0.8.36 — smart contracts, types, functions, modifiers, events, inheritance, libraries, assembly, ABI.
blockchain-expert
Expert-level blockchain, Web3, smart contracts, DeFi, and cryptocurrency development.
Web3 & Blockchain Development
Production-grade Web3 development with Solidity smart contracts, ethers.js/web3.js integration, DApp architecture, security patterns, and AI-enhanced blockchain development (ChatWeb3, Aider + Gemini 2024).
evm-bytecode-analysis
Analyze supplied deployed EVM runtime bytecode with EVMole or guide a separate application in integrating a published EVMole Rust, Go, Python, or JavaScript binding. Use for unverified-contract inspection, ABI reconstruction from runtime code, selector discovery, storage-access analysis, EVM control-flow inspection…
neus-integrate
Add NEUS access control to a host app. Install the SDK, drop in the gate widget, wire the server check, and test the flow. Use when a developer wants to gate content, sell access, or add proof-based checks to their application.
neus-trust-workflow
Checks identity, permissions, and reusable proofs before sensitive assistant actions. Use when verifying authority, mounting a Trusted Agent, managing Vault secrets, or when the user asks for NEUS Verify.