Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Proxy2021/Enso --skill watchlistgit clone --depth 1 https://github.com/Proxy2021/EnsoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/proxy2021/enso/watchlist)<a href="https://agentmods.dev/skills/proxy2021/enso/watchlist"><img src="https://agentmods.dev/badge/skills/proxy2021/enso/watchlist/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/proxy2021/enso/watchlist"><img src="https://agentmods.dev/badge/skills/proxy2021/enso/watchlist.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00022 | $0.00429 |
| Opus 5.5 | $0.00009 | $0.00172 |
| Sonnet 5.5 | $0.00004 | $0.00086 |
| Haiku 4.5 | $0.00002 | $0.00043 |
Grade A, and why
watchlist scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Watchlist
Discover, track, and rate movies and TV series with a personal watchlist and AI-powered recommendations
Available Tools
enso_watchlist_browse (primary)
Browse your watchlist with filtering by status, genre, or rating
Parameters:
status(string): Filter by status: all, to-watch, watching, completed (default: all)sortBy(string): Sort by: title, rating, dateAdded (default: dateAdded)
enso_watchlist_search
Search for movies and TV series by title to add to your watchlist
Parameters:
query(string): Movie or TV series title to search for
enso_watchlist_add
Add a movie or TV series to your watchlist
Parameters:
title(string): Title of the movie/seriesyear(number): Release yeartype(string): movie or tvgenre(string): Genrestatus(string): to-watch, watching, or completed (default: to-watch)notes(string): Personal notes
enso_watchlist_update
Update a watchlist item's status, rating, or notes
Parameters:
itemId(string): ID of the watchlist itemstatus(string): New status: to-watch, watching, completedrating(number): Rating 1-5 (0 to clear)notes(string): Updated notes
enso_watchlist_recommend
Get AI-powered movie/TV recommendations based on your watch history and ratings
Parameters:
mood(string): Optional mood or preference (e.g. 'something light', 'mind-bending sci-fi')
enso_watchlist_remove
Remove an item from your watchlist
Parameters:
itemId(string): ID of the item to remove
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 62 lines · 22 tokens per session scan A c1e06bcef313
watchlist is a skill published in the GitHub repository Proxy2021/Enso (6 stars, last pushed 5mo ago), licensed MIT. It adds 22 tokens to every session and 429 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
solopi-ai
A command-line framework for testing Android apps and devices with SoloPi, including on-device or cloud AI decision models. It manages devices, test cases, recorded interactions, replays, performance history, and evidence.
argent-tv-interact
Control and inspect TV apps via argent, Apple TV (tvOS), Android TV (leanback), and Amazon Fire TV (Vega). Boot the target, read focus, navigate with the D-pad remote, type, screenshot, and on Vega debug the JS runtime (evaluate, console logs, network inspector). Use when a task targets a TV (runtimeKind "tv", or…
manage-prs
Create, review, and merge GitHub pull requests and publish releases using repository Git rules. Use for requests to open a PR, push and create a PR, review PRs, merge a PR, or tag a release and write release notes.
flutter-feature-based-clean-architecture
Organize Flutter apps with modular feature-based clean architecture. Use when creating features under lib/features/ with domain, data, and presentation layers. Do not use for test-only, BlocBuilder, navigation, or spinner requests.
database-redis
Optimize Redis as cache and coordination infrastructure with TTL, eviction, and latency-aware key design. Use when implementing Redis caching, key invalidation, or Redis performance work.
init-project
Turn this boilerplate into a new app by renaming it, removing sample files, and linking it to EAS. Use when starting a new app from this template, or when asked to init, bootstrap, or rename the project.