Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rexleimo/aios --skill baselinegit clone --depth 1 https://github.com/rexleimo/aiosWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rexleimo/aios/baseline)<a href="https://agentmods.dev/skills/rexleimo/aios/baseline"><img src="https://agentmods.dev/badge/skills/rexleimo/aios/baseline.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.00850 |
| Opus 5 | $0.00030 | $0.00425 |
| Sonnet 5 | $0.00012 | $0.00170 |
| Haiku 4.5 | $0.00006 | $0.00085 |
Grade B, and why
aios-codemap-ops scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
| Codex | `~/.codex/config.toml` (`[mcp_servers.code-review-graph]`) | How it starts
The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CRG Tool Quick Reference
Install/Doctor Targets
aios internal codemap install --client all should make CRG available to the AIOS-supported clients:
| Client | Config written |
|---|---|
| Codex | ~/.codex/config.toml ([mcp_servers.code-review-graph]) |
| Claude Code | <project>/.mcp.json |
| Gemini CLI | <project>/.gemini/settings.json |
| OpenCode | ~/.config/opencode/opencode.json plus plugins/crg-plugin.ts |
If a client cannot see CRG tools, run aios internal codemap doctor --fix --client <client> from the target project, then restart that client.
query_graph patterns
| Pattern | Returns |
|---|---|
callers_of |
Functions that call the target |
callees_of |
Functions called by the target |
imports_of |
Imports from a file/module |
importers_of |
Files that import a file/module |
children_of |
Nodes contained in a file/class |
tests_for |
Tests covering the target |
inheritors_of |
Classes inheriting from target |
file_summary |
All nodes in a file |
refactor_tool modes
| Mode | Action |
|---|---|
rename |
Preview rename across all locations |
dead_code |
Find unreferenced symbols |
suggest |
Community-driven refactoring suggestions |
Confidence tiers
| Tier | Meaning |
|---|---|
EXTRACTED |
Certain — directly parsed from code |
INFERRED |
Likely — deduced from patterns |
AMBIGUOUS |
Guess — low confidence |
detail_level
- minimal (default): summary + counts + key entity names
- standard: full output with node/edge details
Always start with minimal. Escalate to standard only when insufficient.
Key tool parameters
| Tool | Key params |
|---|---|
get_minimal_context |
task (required) |
detect_changes |
base, detail_level, changed_files |
get_impact_radius |
changed_files, max_depth, detail_level |
get_review_context |
base, detail_level, include_source |
get_affected_flows |
changed_files, base |
semantic_search_nodes |
query, kind, limit |
query_graph |
pattern, target, detail_level |
traverse_graph |
query, mode (bfs/dfs), depth, token_budget |
find_large_functions |
min_lines, kind, file_path_pattern |
get_architecture_overview |
(none) |
get_hub_nodes |
top_n |
get_bridge_nodes |
top_n |
get_knowledge_gaps |
(none) |
get_surprising_connections |
top_n |
get_suggested_questions |
(none) |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 88 lines · 60 tokens per session scan B e74184c2678f
aios-codemap-ops is a skill published in the GitHub repository rexleimo/aios (52 stars, last pushed yesterday), licensed MIT. It adds 60 tokens to every session and 850 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
include-test-files-that-assert-on-behavior-being-changed-in-decl
When delegating a task affected by this skill, include.
critic-gate
Full execution protocol for MODE: CRITIC-GATE -- plan critic review, revision loops, and hard stop before execution.
swarm-pr-review
Thin adapter for the canonical swarm-pr-review skill. The authoritative workflow lives in .opencode and this file only preserves the mirror contract for Codex-side skill discovery.
auto-review
A code-review skill that examines changed code using the TRUST 5 criteria and automated checks. It can review files, commit ranges, or changes assigned a risk level, with optional review strategies and providers.
ax-annotation
@AX code annotation workflow skill for agent-driven tag application.
ddd
A development method for improving existing code while preserving its current behavior. It follows an analyze, preserve, and improve cycle, using tests and small changes to reduce unintended effects.