Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/rexleimo/aios/search-firstnpx skills add rexleimo/aios --skill search-firstgit clone --depth 1 https://github.com/rexleimo/aiosWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rexleimo/aios/search-first)<a href="https://agentmods.dev/skills/rexleimo/aios/search-first"><img src="https://agentmods.dev/badge/skills/rexleimo/aios/search-first.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00038 | $0.00640 |
| Opus 5 | $0.00019 | $0.00320 |
| Sonnet 5 | $0.00008 | $0.00128 |
| Haiku 4.5 | $0.00004 | $0.00064 |
Grade A, and why
search-first scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Search First
Trigger
Use this skill before you:
- Add a new feature or workflow step
- Introduce a new dependency, MCP server, or CLI integration
- Write a new utility/helper that might already exist
- Copy patterns from another repo (porting)
Outcome
Pick one of: Adopt, Extend, Compose, Build, with a short justification and evidence.
Workflow (Fast)
-
Define the need
- What is the smallest outcome that solves the problem?
- Constraints: platform (macOS/Linux/Windows), clients (codex/claude/gemini/opencode), offline needs, security posture.
-
Search locally (before the internet)
- CRG (if codemap installed):
semantic_search_nodes(query="<keyword>")thenquery_graph(pattern="callers_of"|"callees_of"|"tests_for", target="<name>")— returns structural context that text search cannot provide - Code:
rg -n "<keyword>"in the repo (fallback when CRG doesn't cover what you need) - Scripts: check
scripts/for existing lifecycle/doctor commands. - Docs: check
README*anddocs/.
- CRG (if codemap installed):
-
Search existing skills
- Repo-local:
.codex/skills,.claude/skills,.agents/skills. - Global:
~/.codex/skills,~/.claude/skills,~/.gemini/skills,~/.config/opencode/skills. - Prefer reusing an existing skill name over creating a near-duplicate.
- Repo-local:
-
Search the ecosystem (when needed)
- Prefer official docs and primary sources (project docs, RFCs, standards).
- Prefer maintained, well-scoped libraries over bespoke code.
- For agent tooling, check if an MCP server already provides the capability.
-
Decide
- Adopt: exact match, maintained, acceptable license.
- Extend: mostly fits; add thin wrapper/adapter.
- Compose: 2-3 small pieces together beat 1 big framework.
- Build: no good option; implement minimal + document why.
-
Record evidence
- Note what you searched, what you found, and why you chose the approach.
- If a decision affects cross-CLI behavior, add it to a
docs/plans/artifact.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 58 lines · 38 tokens per session scan A d85001253067
search-first is a skill published in the GitHub repository rexleimo/aios (52 stars, last pushed 5d ago), licensed MIT. It adds 38 tokens to every session and 640 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
arxiv
Standardized arXiv skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full arXiv dynamic command map, and safety/rate controls.
douyinv2
Standardized douyinv2 skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full douyinv2 dynamic command map, and safety/rate controls.
Use when handling MediaUse LinkedIn automation tasks, including jobs and people search, timeline and inbox retrieval, profile reads, safe connect/message flows, and Sales Navigator workflows, with Windows install, key onboarding, strict context/auth flow, full dynamic command map, and safety/rate controls.
Standardized Reddit skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full Reddit dynamic command map, and safety/rate controls.
Standardized Twitter/X skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full Twitter/X dynamic command map, and safety/rate controls.
xiaohongshu
Standardized Xiaohongshu skill for MediaUse. Includes Windows install, key onboarding, strict context/auth flow, full Xiaohongshu dynamic command map, and safety/rate controls.