OpenExecutive is an AI-based virtual executive team that presents one executive persona while using specialist agents for areas such as strategy, finance, people operations, legal work, and operations. It is intended for leaders and managers who need support with decisions, governance, approvals, workplace knowledge, and drafting communications for review. The catalogue contains skills, hooks, a setting, an agent, and an instruction for working with OpenExecutive.
Borrowing it
Nothing to install: this file belongs to SenteLabsAI/OpenExecutive. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/SenteLabsAI/OpenExecutive/main/.claude/skills/openexec-api/SKILL.mdgit clone --depth 1 https://github.com/SenteLabsAI/OpenExecutiveWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sentelabsai/openexecutive/openexec-api)<a href="https://agentmods.dev/skills/sentelabsai/openexecutive/openexec-api"><img src="https://agentmods.dev/badge/skills/sentelabsai/openexecutive/openexec-api/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sentelabsai/openexecutive/openexec-api"><img src="https://agentmods.dev/badge/skills/sentelabsai/openexecutive/openexec-api.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.02075 |
| Opus 5.5 | $0.00000 | $0.00830 |
| Sonnet 5.5 | $0.00000 | $0.00415 |
| Haiku 4.5 | $0.00000 | $0.00208 |
Grade A, and why
openexec-api scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
description: Interact with the Open Executive FastAPI backend via curl. Use this skill when the user asks to hit /chat, /today, /people, /scheduled_actions, /architecture/*, /health/*, /fixtures/*, /audit/*, or any HTTP How it starts
The opening of the file, as written. The whole thing — 153 lines — stays where its author put it; the contents beside it link to each section on GitHub.
openexec-api
Curl recipes against the FastAPI backend — for hitting HTTP routes, not for inspecting SQLite or tailing logs on a host.
Base URLs
export OE_API=http://localhost:8000 # local (`make dev` must be running) — the default
export OE_API=https://<your-host> # a deployed environment
All recipes below use $OE_API. If it is unset and the user doesn't specify, assume http://localhost:8000.
Auth
-H "x-api-key: $BACKEND_SHARED_SECRET"
Rules:
-
Never expand
$BACKEND_SHARED_SECRETinto the literal value in commands you print, in PRs, or in commit messages. -
Never write the value to a file. Do not read from
.envto "help" — if the env var isn't exported, ask the user to export it before proceeding. -
For routes that vary by caller, optionally add
-H "x-caller-email: <user's-own-email>". Never put someone else's email there — the backend uses that header to resolve the caller's Person row and pull their per-person Honcho memory. -
Signed callers. When the API has
CALLER_ASSERTION_PUBLIC_KEYSset, a barex-caller-emailis refused (401 caller_assertion_required), and a request with onlyx-api-keyis a service that is never the owner. Owner-only routes refuse it. Then ask the user to export the UI'sCALLER_ASSERTION_PRIVATE_KEYand sign each request instead of sendingx-caller-email. Treat that key like the shared secret: never expand, print or store it.-H "x-caller-assertion: $(uv run --with cryptography python scripts/mint-caller-assertion.py GET /today)"Each assertion covers one request: the same method, the exact path and query, within 30 seconds, once. So mint one per call. It signs as the operator (the owner);
--email <user's-own-email>signs as that user.
Safety tiers
- Green — auto-run. All
GETrequests, and the cheap idempotent regenerate POSTs. - Yellow — confirm once per session. Writes that change durable state but are reversible (e.g. archiving a Person, deleting a scheduled action).
- Red — print the curl, wait for explicit "go," no chaining.
POST /fixtures/reset,POST /fixtures/{name}/load,POST /fixtures/unload,POST /fixtures/snapshot,POST /chat(impersonates the user — generally don't invoke from Claude).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 28d ago Changed · +7 lines 3739d21ed77f
- 1mo ago Changed 44c63a6767bf
- 2mo ago First seen · 146 lines · 0 tokens per session scan A 4b2485bfa3ad
openexec-api is a skill published in the GitHub repository SenteLabsAI/OpenExecutive (5,703 stars, last pushed today), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 2,075 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
telephony
Provision Twilio numbers, SMS/MMS, and AI outbound calls.
serving-llms-vllm
Use when deploying production LLM APIs, optimizing inference latency/throughput, or serving models with limited GPU memory. Supports OpenAI-compatible endpoints, quantization (GPTQ/AWQ/FP8), and tensor parallelism.
har-derived-api-client
Record a site's XHR into a HAR, derive an HTTP client.
django-patterns
Django architecture patterns, REST API design with DRF, ORM best practices, caching, signals, middleware, and production-grade Django apps.
backend-patterns
Backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes. Use when building or reviewing Node.js, Express, or Next.js API routes and their data access.
fastmcp
Build, test, and deploy Python MCP servers.