Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Snaplii-Inc/agent-to-merchant-payments --skill snaplii-autopilotgit clone --depth 1 https://github.com/Snaplii-Inc/agent-to-merchant-paymentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/snaplii-inc/agent-to-merchant-payments/snaplii-autopilot)<a href="https://agentmods.dev/skills/snaplii-inc/agent-to-merchant-payments/snaplii-autopilot"><img src="https://agentmods.dev/badge/skills/snaplii-inc/agent-to-merchant-payments/snaplii-autopilot/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/snaplii-inc/agent-to-merchant-payments/snaplii-autopilot"><img src="https://agentmods.dev/badge/skills/snaplii-inc/agent-to-merchant-payments/snaplii-autopilot.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00174 | $0.02309 |
| Opus 5.5 | $0.00070 | $0.00924 |
| Sonnet 5.5 | $0.00035 | $0.00462 |
| Haiku 4.5 | $0.00017 | $0.00231 |
Grade A, and why
snaplii-autopilot scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 70 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Snaplii Autopilot — buy + redeem + order, end to end
This skill completes the full Agent-to-Merchant flow: buy a Snaplii gift card (prepaid, capped, cashback) → get its redemption code → open the merchant/delivery site in the browser → add the gift card → place the order. The snaplii-cli skill in this plugin (file ../snaplii-cli/SKILL.md) holds the full gift-card rules; this file carries enough of them to run the flow on its own and adds the browser part.
Auth
Every Snaplii operation, including browsing and quotes, needs has_valid_token=true from snaplii_config_show. Check it before step 1 and again after any login. When it is false, call snaplii_connect and act on its result and message: authenticated (the plugin's Snaplii API key option logged in, or the user entered the key on the secure Snaplii page Claude Code opened; if the option's key was rejected, the user fixes or clears it with /plugin configure and restarts Claude Code), pending (the page is open; once the user has submitted, call snaplii_connect again within 2 minutes), card_requested (a secure card appears in the chat; wait for the user to type the key there), or use_terminal_or_chat_key and the other fallbacks (the message names what is left: normally the exact snaplii init command for the user's own terminal window, or pasting the key in chat for snaplii_init when the user chooses it or the message says a terminal login cannot reach this server). Never run init through the Bash tool or pass the key yourself. On auth_required, reauth_required or HTTP 401, return here; a plain 403 is a scope error, not a login trigger. The snaplii-cli skill's Auth section has the full branches.
Requirements
- Snaplii tools: the
snaplii_*MCP tools this plugin registers. If the Snaplii MCP server is disabled or its tools are not loaded, use thesnapliiCLI at~/.snaplii-env/bin/snaplii(Windows:%USERPROFILE%\.snaplii-env\Scripts\snaplii.exe); thesnaplii-cliskill's Tool reference maps each tool to its command and flags, andsnaplii <command> --helpshows them too. Thesnaplii-cliskill covers installing it. The user runssnaplii initin their own terminal window; never run it through the Bash tool. - A browser: in Claude Code, Claude in Chrome: the Claude browser extension in the user's own Chrome or Edge, connected with
claude --chromeor/chrome. It opens tabs in the user's browser and shares its login state. A browser MCP server such as Chrome DevTools MCP or Playwright MCP also works.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 70 lines · 174 tokens per session scan A 06b7bca6d210
snaplii-autopilot is a skill published in the GitHub repository Snaplii-Inc/agent-to-merchant-payments (813 stars, last pushed today), licensed Apache-2.0. It adds 174 tokens to every session and 2,309 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-19.
Other skills, from other repositories
alibaba-supplier-outreach
Codex-native supplier sourcing and outreach workflow for Alibaba using LaunchFast research. Use when the user wants supplier shortlists, outreach messages, reply triage, or negotiation support. Requires supplierresearch. Browser automation is optional but useful when the user wants Codex to interact with Alibaba…
amazon-search-listing
Amazon search and category listing scraper: extract product listings from any Amazon search results page, keyword search URL, or category browse page and return per-item cards (asin, title, url, image, price, listPrice, stars, reviewCount, badges, isAmazonChoice, isBestSeller, isSponsored, delivery, boughtInPast…
ebay-search-listing
Extracts product listings from any eBay search or category page URL, returning per-item cards (itemNumber, url, title, subtitle, caption, price, priceWithCurrency, currency, wasPrice, bids, shipping, seller, sellerFeedbackCount, sellerPositiveRating, reviewsCount, starRating, image) plus pagination state (currentPage…
etsy-product-detail
Etsy product detail scraper: given an Etsy listing URL, returns full product detail including listingId, title, priceCurrent, priceOriginal, currency, images (all), description, shopName, shopUrl, rating, reviewCount, favorites, inCartCount, variations (with per-option price ranges), highlights, listedDate…
walmart-product-detail
Walmart product detail page extractor: given a walmart.com product URL (walmart.com/ip/...), extract full product data including itemId, title, brand, model, UPC, price, wasPrice, currency, availability, category path, seller info, all images, shortDescription, longDescription, product highlights, full specifications…
amazon-bestseller-listing
Amazon Best Sellers listing scraper: extract product cards from any Amazon Best Sellers (zgbs) or /gp/bestsellers/ category page — returns rank (position on chart), asin, title, url, image, imageAlt, price, stars, reviewCount, ratingRaw per item, plus category metadata (categoryName, categoryFullName, categoryUrl) and…