Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/rexleimo/aiosnpx agentmods add skills/rexleimo/aios/aios-offload-recallWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rexleimo/aios/aios-offload-recall)<a href="https://agentmods.dev/skills/rexleimo/aios/aios-offload-recall"><img src="https://agentmods.dev/badge/skills/rexleimo/aios/aios-offload-recall/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rexleimo/aios/aios-offload-recall"><img src="https://agentmods.dev/badge/skills/rexleimo/aios/aios-offload-recall.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00034 | $0.00442 |
| Opus 5 | $0.00017 | $0.00221 |
| Sonnet 5 | $0.00007 | $0.00088 |
| Haiku 4.5 | $0.00003 | $0.00044 |
Grade A, and why
aios-offload-recall scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
AIOS Offload Recall
Use this when prior tool output is likely stored under .aios/offload/ and token use matters.
Recall Order
- Identify the session id from ContextDB, harness status, or the user's handoff.
- Run
node scripts/aios.mjs canvas show --session <id>to inspect the compact task graph. - Search narrowly with
node scripts/aios.mjs refs grep "<pattern>" --session <id>. - Read only the needed node with
node scripts/aios.mjs refs read <node_id>. - Summarize the recalled evidence and keep the
node_idin your notes.
Backfill Existing Logs
If a previous run produced JSONL tool-event logs but no canvas yet, create the index first:
node scripts/aios.mjs canvas backfill --input <events.jsonl> --client <client> --session <id>
Then resume the recall order above. Backfill accepts generic records with fields like tool, input, output,
or Claude-style tool_name, tool_input, tool_response.
Rules
- Do not load every ref file unless the user explicitly asks for a full audit.
- Do not treat the canvas as complete evidence; it is an index over raw refs.
- If a node may contain secrets, use
aios privacy read --file <path>before sharing content. - Savings are future-context savings: canvas/node_id replaces raw log replay during resume or recall.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 44 lines · 34 tokens per session scan A b9a362a1d36d
aios-offload-recall is a skill published in the GitHub repository rexleimo/aios (52 stars, last pushed yesterday), licensed MIT. It adds 34 tokens to every session and 442 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
durable-session-state
Persist plans, scope decisions, evidence, and reviewer/critic verdicts to durable files during long or multi-phase tasks so work survives context compaction, session resumes, and handoffs. Use for swarm-mode tasks, before context grows large, when recording approval gates, and when resuming after compaction or a…
obsidian
Use the official Obsidian CLI (v1.12+) to manage vaults, notes, daily notes, search, tasks, tags, properties, links, templates, sync, publish, and workspaces. Use when the user mentions Obsidian, vaults, notes, or wants to automate note-taking and knowledge base workflows.
memory-state
State variables the Sentinel must keep across ticks (last order sent, freeze flag, FATAL streak, per-state counters, emergency history, cooldowns). Use this skill on every tick to update memory and decide if a new order is required (edge-triggered).
captain-diary
Daily handoff diary for the Captain. The Captain is restarted often (context-refresh, new work window, reboot) and otherwise loses the day's hard-won pacing lessons — repeating the same mistakes (e.g. 3 Scouts at once → an unbrakable spike → a 5h coast to repay the debt). Read the PREVIOUS day's notes at startup…
context-search
A continuity workflow for finding context from earlier coding-agent sessions. It can inspect continuation notes and session records when a task refers to previous work.
powerskills-workiq
Microsoft 365 automation via Work IQ (Graph-backed CLI). Ask natural-language questions against Outlook mail, calendar, Teams messages, SharePoint, OneDrive, and People. Fetch entities by URL, run OpenAPI actions (sendMail, copy, move), call functions (getSchedule, delta, reminderView), list Work IQ agents. Use when…