Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/rexleimo/aios/aios-codemap-opsnpx skills add rexleimo/aios --skill aios-codemap-opsgit clone --depth 1 https://github.com/rexleimo/aiosWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rexleimo/aios/aios-codemap-ops)<a href="https://agentmods.dev/skills/rexleimo/aios/aios-codemap-ops"><img src="https://agentmods.dev/badge/skills/rexleimo/aios/aios-codemap-ops.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00060 | $0.01055 |
| Opus 5 | $0.00030 | $0.00528 |
| Sonnet 5 | $0.00012 | $0.00211 |
| Haiku 4.5 | $0.00006 | $0.00105 |
Grade B, and why
aios-codemap-ops scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
| Codex | `~/.codex/config.toml` (`[mcp_servers.code-review-graph]`) | How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CRG Tool Quick Reference
Install/Doctor Targets
aios internal codemap install --client all should make CRG available to the AIOS-supported clients:
| Client | Config written |
|---|---|
| Codex | ~/.codex/config.toml ([mcp_servers.code-review-graph]) |
| Claude Code | <project>/.mcp.json |
| Gemini CLI | <project>/.gemini/settings.json |
| OpenCode | ~/.config/opencode/opencode.json plus plugins/crg-plugin.ts |
If a client cannot see CRG tools, run aios internal codemap doctor --fix --client <client> from the target project, then restart that client.
Structured-plan context candidates
When you know a structured-plan task's implementation target, do not ask a human to hand-author every supporting context reference.
- Call AIOS MCP
aios_plan_taskwithaction: "propose_context", the activetask_id, and workspace-relativetargetswhen the task has no targets yet. - AIOS derives a durable proposal from the target plus CRG callers, callees/imports, and tests. This proposal is reviewable only; it does not alter
.aios/planning/active.json. - Present the refs and reasons to the human. Ask a human to activate all candidates with
aios plan task <id> --confirm-context-candidates, or select a subset by repeating--candidate-ref <ref>; this is an explicit process step, not an identity/authentication boundary. - Only after confirmation may you say that the task has active execution context or invoke context-dependent orchestration.
query_graph patterns
| Pattern | Returns |
|---|---|
callers_of |
Functions that call the target |
callees_of |
Functions called by the target |
imports_of |
Imports from a file/module |
importers_of |
Files that import a file/module |
children_of |
Nodes contained in a file/class |
tests_for |
Tests covering the target |
inheritors_of |
Classes inheriting from target |
file_summary |
All nodes in a file |
refactor_tool modes
| Mode | Action |
|---|---|
rename |
Preview rename across all locations |
dead_code |
Find unreferenced symbols |
suggest |
Community-driven refactoring suggestions |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 97 lines · 60 tokens per session scan B 2377e2e71ae2
aios-codemap-ops is a skill published in the GitHub repository rexleimo/aios (52 stars, last pushed today), licensed MIT. It adds 60 tokens to every session and 1,055 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
citation-verification
This skill provides reference guidance for citation verification in academic writing. Use when the user asks about "citation verification best practices", "how to verify references", "preventing fake citations", or needs guidance on citation accuracy. This skill supports ml-paper-writing by providing detailed…
arxiv
Standardized arXiv skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full arXiv dynamic command map, and safety/rate controls.
douyinv2
Standardized douyinv2 skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full douyinv2 dynamic command map, and safety/rate controls.
Use when handling MediaUse LinkedIn automation tasks, including jobs and people search, timeline and inbox retrieval, profile reads, safe connect/message flows, and Sales Navigator workflows, with Windows install, key onboarding, strict context/auth flow, full dynamic command map, and safety/rate controls.
Standardized Reddit skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full Reddit dynamic command map, and safety/rate controls.
Standardized Twitter/X skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full Twitter/X dynamic command map, and safety/rate controls.