Ouroboros is a general-purpose AI agent that maintains its identity, memory, and task history across restarts while working on external projects and coordinating specialist agents. It runs as a desktop application or headless command-line tool, using configured remote APIs or a local model for inference. The catalogue skills support working with or modifying Ouroboros.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add razzant/ouroboros --skill windows_computer_usegit clone --depth 1 https://github.com/razzant/ouroborosWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/razzant/ouroboros/windows_computer_use)<a href="https://agentmods.dev/skills/razzant/ouroboros/windows_computer_use"><img src="https://agentmods.dev/badge/skills/razzant/ouroboros/windows_computer_use/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/razzant/ouroboros/windows_computer_use"><img src="https://agentmods.dev/badge/skills/razzant/ouroboros/windows_computer_use.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00034 | $0.01766 |
| Opus 5.5 | $0.00014 | $0.00706 |
| Sonnet 5.5 | $0.00007 | $0.00353 |
| Haiku 4.5 | $0.00003 | $0.00177 |
Grade A, and why
windows_computer_use scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Windows Computer Use (UI Automation)
Reads a Windows window as text - roles, labels, values, states, rectangles -
through UI Automation, and performs actions on named elements through their
UIA patterns. It ships with Ouroboros and is on by default on Windows only
(os: win32); macOS and Linux use the bundled unix_computer_use. It
deliberately does not take screenshots, click at coordinates or send general
keystrokes, so surfaces that expose no UI Automation elements (canvas-drawn
apps, remote desktops, some games) read as empty or partial.
Ported from Yegor Kosyrev's Praxis/Hélène uia.rs/element.rs, keeping
its contracts. See NOTICE for source links, the upstream Apache-2.0
licence and attribution; the contribution's licensing is a separate matter.
Tools
window_list- visible top-level windows that have a title (hwnd, title, class, pid, rect, foreground flag), front to back; untitled windows are left out. It stops atlimit(default 100, at most 500, echoed back); a listing cut there saystruncated_by: [limit]andtotal_known: false. Use it to pick anhwndfor the other tools.window_read- the whole window (or the onehwndnames) as a tree/flat list of elements:role,name,value,automation_id,class,rectwithcenter, and astateblock whose missing keys mean the element does not expose them - not false. Limits (max_nodes,max_depth,max_children_per_node,max_text_chars,timeout_ms) come back in the answer with their ceilings; every cut is named intruncated_byandnotes, includingresult_sizewhen a large reading is cut to what the host relays.backend=win32forces the plain Win32 reader (classic child windows only);autouses UIA then Win32, namingfallback_reason. Each reader has itstimeout_msbudget; the host allows 50 seconds for both plus setup.element_find- search the tree by selector (automation_id,role,name,name_contains,value_contains; AND semantics), returning every match up tolimit.timeout_ms=0(default) means "look now"; a positive value waits for the first match.element_act- do something to the element a selector names:invoke | set_value | toggle | expand | collapse | select | scroll_into_view | focus. The action goes through the element's UIA pattern - there is no fallback to clicking at coordinates; if the element lacks the pattern the refusal lists the patterns it does support.set_valueneedstextas a string:""clears the field, null is refused.
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 113 lines · 34 tokens per session scan A 70bed47f0e71
windows_computer_use is a skill published in the GitHub repository razzant/ouroboros (1,572 stars, last pushed today), licensed MIT. It adds 34 tokens to every session and 1,766 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-22.
Other skills, from other repositories
batch
Execute batch operations on multiple files in parallel. Automatically discovers files, splits into chunks, and processes with parallel worker agents. Use /batch followed by operation and file pattern. For many independent single-turn transforms (translate/rewrite/extract each file into a new file) that can wait…
batch-api
Prepare a many-file, single-turn transform (translate, rewrite, extract) as a plan and submit it to the asynchronous, half-price DashScope Batch API; results are delivered as new files hours later. Invoke explicitly with /batch-api.
loop
Create a loop that runs a prompt now and follows up either on a fixed schedule or through self-paced wakeups. Usage - /loop check the build, /loop 5m check the build, /loop check the PR every 30m. /loop list to show jobs, /loop clear to cancel all.
proof-orchestrator
Manage a stateful, run-directory-based proof project: continuation across runs, run-local source bookkeeping, manual GPT Pro handoff packages when a local attempt stalls, and an optional DeepSeek second opinion as additional evidence only. Use when the user asks for proof-run orchestration, a GPT Pro handoff, or…
google-calendar
Read schedules, check availability, and create or update Google Calendar events when the user asks to work with their calendar.
feishu
Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.