Agentero is a local research workspace that connects papers, structured reading material, Markdown notes, and AI agents in one place. Researchers use it to read and annotate PDFs, extract formulas and figures, organize literature, and collaborate with agents on research tasks while keeping context locally. Its catalogue skills and instruction support agent-assisted research workflows in Agentero.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add poco-ai/Agentero --skill agentero-cligit clone --depth 1 https://github.com/poco-ai/AgenteroWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/poco-ai/agentero/agentero-cli)<a href="https://agentmods.dev/skills/poco-ai/agentero/agentero-cli"><img src="https://agentmods.dev/badge/skills/poco-ai/agentero/agentero-cli/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/poco-ai/agentero/agentero-cli"><img src="https://agentmods.dev/badge/skills/poco-ai/agentero/agentero-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 7 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00105 | $0.01410 |
| Opus 5.5 | $0.00042 | $0.00564 |
| Sonnet 5.5 | $0.00021 | $0.00282 |
| Haiku 4.5 | $0.00011 | $0.00141 |
Grade A, and why
agentero-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 139 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agentero CLI
Role
You use the agentero CLI as a stable machine interface to an Agentero vault.
The CLI is not a chat runtime: no BYOA, no ACP, no paper-reader. Reading and
writing lecture-style NOTES.md is your job (or use the separate
paper-reader skill / desktop manual read workflow).
Prerequisites
- Binary name:
agentero(POSIX). Desktop: 设置 → 关于 → 安装 CLI writes the~/.local/bin/agenterosymlink. If missing from PATH, say so and fall back to reading Vault files directly; do not invent catalog rows. - Prefer always passing
--json(disables interactive prompts). JSON is a compact single line;--prettypretty-prints for humans (avoid in tool loops). - Destructive deletes: pass
-y/--yesunder--json/ non-TTY. - Vault resolution (first wins):
--vault <path>→ envAGENTERO_VAULT→ cwd walk-up (.agentero/catalog.sqlite). When cwd is already the vault, do not start withvault list.
Command discovery
Use describe only when you do not already know the flags:
agentero describe --json # curated op index
agentero describe paper.list --json # one op: input/output/errors/examples
agentero <group> --help # human clap help
Do not invent subcommands. There is no agentero graph. Do not pair
describe with every list/get call.
Hard boundaries
| Do | Do not |
|---|---|
| Call CLI for vault/catalog/import/layout/marks | Spawn coding agents via CLI |
| Read files at returned paths | Assume CLI wrote full lecture NOTES |
| Progressive disclosure L0→L4 | Dump entire PDF/TeX into the prompt by default |
| Skip overwrite of user NOTES on re-import | Force-overwrite without explicit user ask |
Use describe when flags are unknown |
Hand-edit marks/annotations.json or layout-index.json |
Progressive disclosure
- L0 —
AGENTS.md(if present; usually already in context) - L1 — only when discovering the collection:
agentero paper list --json(default rows:id/path/title; add--fields/--fullonly if needed) - L2 —
{paper}/NOTES.mdwhen the user asks about a known paper - L2.5 —
agentero layout list <paper>/agentero mark *(CLI writes mark JSON) - L3 —
{paper}/PAPER.md(if no TeX) - L4 —
{paper}/source/**(TeX preferred when present)
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 28d ago Changed · +1 lines · +2 tokens per session 8168dadfcfa8
- 1mo ago Changed 793b61bd90e0
- 1mo ago Changed · +37 lines 785d4a05478a
- 1mo ago Changed · -66 lines · -14 tokens per session ac967489dfde
- 1mo ago Changed · +2 lines 538d09945e74
- 1mo ago First seen · 165 lines · 117 tokens per session scan A 766ab850df9f
agentero-cli is a skill published in the GitHub repository poco-ai/Agentero (1,032 stars, last pushed today), licensed MIT. It adds 105 tokens to every session and 1,410 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
officecli-academic-paper
Use this skill to build academic-style .docx output: journal / conference / thesis chapters carrying formal citation style (APA, Chicago, IEEE, MLA), numbered equations, figure & table cross-references, footnotes/endnotes, bibliography, or multi-column journal layout. Trigger on: 'research paper', 'journal paper'…
officecli
Create, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool. Use when the user wants to create, inspect, check formatting, find issues, add charts, or modify Office documents.
A set of instructions for working with PDF files, which are documents designed to preserve their layout across devices.
pptx
A set of instructions for working with PowerPoint presentation files, including extracting content, editing slides, and creating decks.
surfsense-data
Work out numbers from spreadsheet and CSV sources (.xlsx, .csv, .tsv) by writing a pandas script that surfsenseanalyzedata runs: totals, averages, trends, rankings, comparisons, cleaning, and charts that can go into a document. Load it whenever the user asks for figures from a table, or a chart of one.
hive.pdf
Read, write, merge, split, rotate, watermark, encrypt, and OCR PDF files using Python (pypdf, pdfplumber, reportlab, pypdfium2) and command-line tools (poppler-utils, qpdf). Use when the user asks to extract text/tables/images from a PDF, create or modify a PDF, combine or split PDFs, OCR a scanned PDF…