Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add pipefy/ai-toolkit --skill pipefy-members-email-webhooksgit clone --depth 1 https://github.com/pipefy/ai-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks)<a href="https://agentmods.dev/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks"><img src="https://agentmods.dev/badge/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks"><img src="https://agentmods.dev/badge/skills/pipefy/ai-toolkit/pipefy-members-email-webhooks.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
- Socket pass
- Snyk warn
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.02044 |
| Opus 5.5 | $0.00014 | $0.00818 |
| Sonnet 5.5 | $0.00007 | $0.00409 |
| Haiku 4.5 | $0.00003 | $0.00204 |
Grade A, and why
pipefy-members-email-webhooks scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 128 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Members, Email & Webhooks
MCP clients: read references/mcp.md. CLI users: read references/cli.md. Examples below describe shared operation arguments.
Manage pipe membership, send emails from card inboxes, read inbox replies, and manage webhooks.
Member management
| Operation | Read-only | Purpose |
|---|---|---|
invite_members |
No | Invite one or more users by email + role. |
add_service_account_to_pipe |
No | Attach an existing org service account to a pipe by email + role (iPaaS setup). Check membership afterwards. |
remove_member_from_pipe |
No | Destructive; review and approve first. Check afterwards: org-level permissions can override pipe removal. |
set_role |
No | Change a member's pipe role (member_id = user id). |
List existing members with get_pipe_members from pipefy-pipes-and-cards. Id forms: docs/mcp/tools/identifiers.md#members-email-webhooks.
Steps — invite members
-
Check existing members:
Operation:
get_pipe_members(pipe_id=67890) -
Invite new members:
Operation:
invite_members(pipe_id=67890, members='[{"email":"[email protected]","role_name":"member"},{"email":"[email protected]","role_name":"admin"}]')Before inviting external emails (domain different from the org's known domains), warn the user that this is an external invitation and confirm before proceeding.
Before granting admin role, confirm with the user — admin is the highest pipe-level role.
Steps — add a service account to a pipe (iPaaS setup)
When setting up an iPaaS (Advanced Automations) flow that runs under a service account, the account must be a member of the target pipe, or pipe-scoped calls under its identity fail with a permission error even though the flow looks configured.
- Get the service account's email. Either create one with
create_service_account(organization_uuid, name, role)— which returns the account's email plus its OAuth2 client secret and token endpoint once (store them immediately) — or take the email from your organization's service-account settings. A freshly created account has no pipe access until this step. The pipe role defaults toadmin(a service account running automations usually needs full pipe access); pass a narrower role only when you deliberately want to limit it.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed 2a8c37cc6c81
- 17d ago Changed · -4 lines · -6 tokens per session a0821e49409f
- 1mo ago First seen · 132 lines · 41 tokens per session scan A d08a39040987
pipefy-members-email-webhooks is a skill published in the GitHub repository pipefy/ai-toolkit (51 stars, last pushed yesterday), licensed Apache-2.0. It adds 35 tokens to every session and 2,044 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
clawaimail
Email infrastructure for AI agents — create inboxes, send and receive real emails, search messages, manage threads. Alternative to AgentMail with MCP server, REST API, webhooks, and WebSocket streaming.
fdcnal-usda-fooddata-central-agent
The FoodData Central API provides REST access to FoodData Central (FDC), assisting developers in incorporating nutrient data into their applications. It provides access to Standard Reference (SR) Legacy data, USDA Global Branded Foods Database, Foundation Foods, and FNDDS.
notebooklm
Install, authenticate, troubleshoot, and operate Gemini Notebook through the notebooklm-py CLI or typed async Python API. Use for notebook and source management, grounded chat and research, and artifact generation or download when the user mentions Gemini Notebook, notebooklm-py, the notebooklm CLI, or its Python API.…
commerce-app-migrate
Migrate an Adobe Commerce App Builder project from the Integration Starter Kit or Checkout Starter Kit to the new App Management approach. Run from the root of the App Builder project to be migrated. Pass --auto to skip confirmation prompts (suitable for CI or batch use) — auto mode prints a summary of all Q&A…
huawei-cloud-apig-instance-management
Manage Huawei Cloud APIG (API Gateway, dedicated instances) via hcloud CLI: instance lifecycle (create/list/delete), API groups, API create/update/delete, publish/offline, request throttling policies, signature keys, access control (ACL) policies, and public ingress EIP binding, plus read-only diagnosis of public…
huawei-cloud-smn-dms-message
Manage Huawei Cloud SMN (Simple Message Notification) topics, subscriptions, message templates and message publishing, and manage DMS (Distributed Message Service) Kafka/RabbitMQ/RocketMQ instances and Kafka topics. 15 built-in actions cover query (list topics/subscriptions/message templates/DMS instances/Kafka…