Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add sergeyklay/.agents --skill search-webgit clone --depth 1 https://github.com/sergeyklay/.agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sergeyklay/.agents/search-web)<a href="https://agentmods.dev/skills/sergeyklay/.agents/search-web"><img src="https://agentmods.dev/badge/skills/sergeyklay/.agents/search-web/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sergeyklay/.agents/search-web"><img src="https://agentmods.dev/badge/skills/sergeyklay/.agents/search-web.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Data Exfiltration · line 24 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 24 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 64 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 114 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00216 | $0.01889 |
| Opus 5.5 | $0.00086 | $0.00756 |
| Sonnet 5.5 | $0.00043 | $0.00378 |
| Haiku 4.5 | $0.00022 | $0.00189 |
Grade A, and why
search-web scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -X POST "https://api.keenable.ai/v1/search/public" \ How it starts
The opening of the file, as written. The whole thing — 117 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Keenable Keyless Web Search
Two endpoints on https://api.keenable.ai, both usable with no key and no account:
| Operation | Method | Path | Returns |
|---|---|---|---|
| Search | POST |
/v1/search/public |
Ranked results with title, url, description, snippet |
| Fetch | GET |
/v1/fetch/public |
Page content as markdown |
Both require the header X-Keenable-Title, whose value is any non-empty string identifying the calling application - the examples below use agent-skills. It has no default; omitting it returns 400 Missing app identifier.
Search
curl -s -X POST "https://api.keenable.ai/v1/search/public" \
-H "X-Keenable-Title: agent-skills" \
-H "Content-Type: application/json" \
-d '{"query":"model context protocol spec"}'
Body parameters. query is the only required one; the API rejects unknown parameters with 400, so send only names from this table:
| Parameter | Type | Bounds / format | Effect |
|---|---|---|---|
query |
string | required | The search query |
site |
string | bare domain, e.g. docs.python.org |
Restrict results to one domain |
max_results |
integer | 1–50, default 10 | Number of results |
snippet_max_length |
integer | 180–10000 | Characters of snippet per result |
published_after |
string | YYYY-MM-DD or ISO 8601 |
Only pages published after this date |
published_before |
string | YYYY-MM-DD or ISO 8601 |
Only pages published before this date |
acquired_after |
string | YYYY-MM-DD or ISO 8601 |
Only pages indexed after this date |
acquired_before |
string | YYYY-MM-DD or ISO 8601 |
Only pages indexed before this date |
query_time |
string | ISO 8601 | Search the index as it stood at that moment |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed 424c530613f8
- 1mo ago First seen · 117 lines · 216 tokens per session scan A f2ba6648ee4d
search-web is a skill published in the GitHub repository sergeyklay/.agents (6 stars, last pushed 5d ago), licensed Apache-2.0. It adds 216 tokens to every session and 1,889 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
autodoc-next-prospectus-audit
Audit one local prospectus PDF, DOC, or DOCX through PDRouter and download the annotated document with AutoDoc NEXT2.0.
ChatDOC Studio--KnowledgeMate
Create and operate ChatDOC Studio knowledge bases through pdrouter using a Bearer API key and JavaScript helpers. Use when Codex needs to upload one or more PDF/DOC/DOCX files, skip failed files without aborting the whole job, create a knowledge base from successful uploads, or call the ChatDOC Studio knowledge-base…
PDFlux-PDF2Markdown
Convert unstructured documents into LLM-ready structured data. Supports PDF, Word, PPT, and images; extracts paragraphs, formulas, tables, charts, and other elements in one step; generates up to 8 levels of headings; and outputs Markdown organized in reading order. Useful for field extraction, comparison and…
Calliper-Compare2Markdown
Compare two local documents and convert differences into LLM-ready Markdown in one synchronous call. Supports PDF, Word, PPT, and image documents accepted by Calliper, and returns a structured markdown diff table suitable for change review, clause comparison, downstream extraction, and rule-based validation.
war-room
Multi-agent research war room. Personas debate in sequential turns through two phases — ideation and proposal writing. Persona persistence and drift detection are enforced every turn via the persistent-persona skill.
system-info
Probe system resources — CPU, RAM, disk, GPU/CUDA/MPS — and translate findings into experiment design recommendations. Run this at the start of any compute-intensive project.