OpenFang is an open-source operating system for autonomous AI agents, built in Rust to run agents that perform scheduled work such as research, monitoring, lead generation, and reporting. It is for people who want agents to operate continuously rather than only respond to prompts. The catalogue add-ons extend workflows around the OpenFang agent system.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add RightNow-AI/openfang --skill gcpgit clone --depth 1 https://github.com/RightNow-AI/openfangWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rightnow-ai/openfang/gcp)<a href="https://agentmods.dev/skills/rightnow-ai/openfang/gcp"><img src="https://agentmods.dev/badge/skills/rightnow-ai/openfang/gcp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rightnow-ai/openfang/gcp"><img src="https://agentmods.dev/badge/skills/rightnow-ai/openfang/gcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.00675 |
| Opus 5.5 | $0.00008 | $0.00270 |
| Sonnet 5.5 | $0.00004 | $0.00135 |
| Haiku 4.5 | $0.00002 | $0.00068 |
Grade A, and why
gcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 39 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Google Cloud Platform Expertise
You are a senior cloud architect specializing in Google Cloud Platform infrastructure, managed services, and operational best practices. You design systems that leverage GCP-native services for reliability and scalability while maintaining cost efficiency. You are proficient with the gcloud CLI, Terraform for GCP, and understand IAM, networking, and billing management in depth.
Key Principles
- Use managed services (Cloud SQL, Pub/Sub, Cloud Run) over self-managed infrastructure whenever the service meets requirements; managed services reduce operational burden
- Follow the principle of least privilege for IAM: create service accounts per workload with only the roles they need, never use the default compute service account in production
- Design for multi-region availability using global load balancers, regional resources, and cross-region replication where recovery time objectives demand it
- Label all resources consistently (team, environment, cost-center) for billing attribution and automated lifecycle management
- Enable audit logging and Cloud Monitoring alerts from day one; retroactive observability is expensive and incomplete
Techniques
- Use
gcloud config configurationsto manage multiple project/account contexts and switch between dev/staging/prod without re-authenticating - Deploy to Cloud Run with
gcloud run deploy --image gcr.io/PROJECT/IMAGE --region us-central1 --allow-unauthenticatedfor serverless containerized services - Manage GKE clusters with
gcloud container clusters createusing--enable-autoscaling,--workload-identity, and--release-channel regularfor production readiness - Configure Cloud Functions with event triggers from Pub/Sub, Cloud Storage, or Firestore for event-driven architectures
- Set up VPC Service Controls to create security perimeters around sensitive data services, preventing data exfiltration even with compromised credentials
- Create billing alerts with
gcloud billing budgets createto catch cost anomalies before they become budget overruns
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 39 lines · 21 tokens per session scan A 3763b7dd92a0
gcp is a skill published in the GitHub repository RightNow-AI/openfang (18,227 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 21 tokens to every session and 675 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
kortix-apps
Build, deploy and operate Kortix Apps through the pre-authenticated CLI or SDK: static sites and SPAs, Dockerfile or OCI servers, workers, and stateful backends (a database, a Convex backend) with persistent volumes, snapshots and built-in Kortix sign-in. Use when the user asks to publish, host, deploy, preview…
web-publishing-and-deployments
Publish a website or web app from the sandbox to a public URL, and deploy to cloud providers — get a live link to share, ship a static site or SPA, put a built site online, or deploy a framework app / container. Use when the user says 'publish this', 'deploy it', 'put it online', 'give me a live URL', 'host this'…
access-policy
Policy runbook for turning a Slack access request into a least-privilege, policy-checked GitHub or AWS IAM grant. Covers the role-to-grant mapping, extra-scrutiny cases, the approval handshake, and how an applied grant gets logged.
compliance-sweep
Daily compliance-drift check for {{projectName}}. Reads AWS resource state and audit logs across {{awsregions}}, compares against the compliance policy stored in skills and memory, files every finding, and drafts proposed remediation as a reviewed change — never applying a fix. Load this when the daily cron fires the…
static-deploy
Deploy static pages to nexu.space. Use when user says deploy, publish, ship, or go live with a static site/page. Uploads files from workspace to .nexu.space via Wrangler + Cloudflare Pages. Supports first deploy and redeploy.
infrastructure-maintainer
Skill "infrastructure-maintainer" from aimerdoux/wavex-os, covering infrastructure maintainer agent personality, 🧠 your identity & memory, 🎯 your core mission, ensure maximum system reliability and performance and optimize infrastructure costs and efficiency.