Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/poco-ai/agentero/bumpnpx skills add poco-ai/Agentero --skill bumpgit clone --depth 1 https://github.com/poco-ai/AgenteroWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/poco-ai/agentero/bump)<a href="https://agentmods.dev/skills/poco-ai/agentero/bump"><img src="https://agentmods.dev/badge/skills/poco-ai/agentero/bump.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00028 | $0.00530 |
| Opus 5 | $0.00014 | $0.00265 |
| Sonnet 5 | $0.00006 | $0.00106 |
| Haiku 4.5 | $0.00003 | $0.00053 |
Grade A, and why
bump scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Version Bump
升级 Agentero 的应用版本，并确保桌面安装包、CLI 和发布 tag 使用同一个版本号。
用法
选择此 Skill 后提供目标版本，例如 0.1.3 或 0.1.3-beta.1。
执行规则
-
读取当前工作区状态和所有版本来源。不要丢弃或覆盖与版本升级无关的用户改动。
-
校验目标版本是合法的 SemVer；版本参数缺失或不明确时停止并请求明确版本。
-
同步修改以下字段：
package.json的version。src-tauri/tauri.conf.json的version。src-tauri/Cargo.toml的 packageversion。cli/Cargo.toml的 packageversion。src-tauri/ios-project.yml的CFBundleShortVersionString与CFBundleVersion。
Android 不需要手动修改：
tauri android build会从tauri.conf.json的version重新生成src-tauri/gen/android/app/tauri.properties（gitignored）中的versionName与versionCode。 -
如果 Cargo manifest 版本变化，运行必要的 Cargo 元数据/检查命令并确认
Cargo.lock没有保留旧的本地 package 版本。 -
检查版本字段全部等于目标版本，并检查
agentero --version的来源仍然是 CLI package version。 -
检查
AGENTS.md和docs/development/release.md中的发布规则仍与实现一致；只有规则变化时才修改文档，不要伪造版本说明或变更日志。 -
运行最小必要验证：
cargo metadata --no-deps --format-version 1，以及适合当前环境的前端类型检查或构建检查。 -
输出修改文件、验证结果和下一步建议。除非用户明确要求，不创建 commit、tag、Release 或 push。
发布前约束
版本 bump 必须先作为独立提交完成，之后才能创建 v<version> tag。tag 去掉 v 后必须与所有上述版本字段一致。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 37 lines · 28 tokens per session scan A 2f310cdf3efb
bump is a skill published in the GitHub repository poco-ai/Agentero (409 stars, last pushed yesterday), licensed MIT. It adds 28 tokens to every session and 530 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
aatmf-t10-confidentiality-breach
AATMF T10 — Integrity & Confidentiality Breach. System prompt extraction, training-data extraction, model-weight leakage, private-key recovery.
mochi-remind
Handle due reminders — notify the user with natural language and mark them done.
memory
Use when the user asks to remember, recall, forget, update, search, or inspect durable OpenSquilla memory, including profile facts in USER.md and long-term notes in MEMORY.md or memory//.md.
lazarus-group
Adversary-emulation profile for Lazarus Group (G0032, aka Hidden Cobra / Diamond Sleet / Labyrinth Chollima), a North Korean RGB-linked actor conducting espionage, destructive, and financially motivated operations.
sidewinder-rattlesnake
Adversary-emulation profile for SideWinder (G0121 / Rattlesnake / T-APT-04 / Razor Tiger), India's suspected state-sponsored cyber-espionage actor.
ha-data-stores
Map of Hope Agent's local data stores and safe read-only query workflow. Use when the user asks where Hope Agent stores data, wants to inspect sessions/messages/memory/logs/background jobs/knowledge indexes/settings, asks the model to query local app data, or debugging requires checking persisted state. Trigger…