Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Snowflake-Labs/cocoplus --skill cocoplus-consolegit clone --depth 1 https://github.com/Snowflake-Labs/cocoplusWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/snowflake-labs/cocoplus/cocoplus-console)<a href="https://agentmods.dev/skills/snowflake-labs/cocoplus/cocoplus-console"><img src="https://agentmods.dev/badge/skills/snowflake-labs/cocoplus/cocoplus-console/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/snowflake-labs/cocoplus/cocoplus-console"><img src="https://agentmods.dev/badge/skills/snowflake-labs/cocoplus/cocoplus-console.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00045 | $0.00645 |
| Opus 5.5 | $0.00018 | $0.00258 |
| Sonnet 5.5 | $0.00009 | $0.00129 |
| Haiku 4.5 | $0.00005 | $0.00064 |
Grade A, and why
cocoplus-console scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 65 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Your objective is to manage CocoConsole, the read-only browser dashboard for CocoPlus 2.0.
Pre-flight Check
Check that .cocoplus/ exists.
If not: output "CocoPlus not initialized in this directory. Run $pod init to begin." Then stop.
Command Forms
$cocoplus console
- Read
.cocoplus/lifecycle/console-state.jsonif it exists. - If it says a console is running, output:
CocoConsole running at http://localhost:<port>. Opening browser. - If no running console is recorded, run:
invoke cocoplus-console.js - The server writes
.cocoplus/lifecycle/console-state.jsonwithrunning,port,url,pid,started_at, and panel list. - The Safety panel reads
.cocoplus/lifecycle/policy-decisions.jsonland shows the Policy Decision Log. Default view includesdenyandinstruct; the browser toggle revealsallowdecisions whenpolicy_log_all = trueproduced them. - Open
http://localhost:<port>/in the browser when the host permits browser opening.
$cocoplus console status
Read .cocoplus/lifecycle/console-state.json and report:
- URL
- PID
- Start time
- Panels
If absent, output: CocoConsole is not running for this project.
$cocoplus console stop
Read .cocoplus/lifecycle/console-state.json.
If pid exists, stop that process using the host-safe process stop mechanism.
Then rewrite the state file with running: false and stopped_at.
Read-only Boundary
CocoConsole never edits project files, changes configuration, resumes flows, approves gates, or invokes CocoPlus commands. It reads .cocoplus/ artifacts and Snowflake observability data only when an SDK-backed reader is explicitly configured.
Exit Criteria
-
$cocoplus consoleproduces a local URL. -
.cocoplus/lifecycle/console-state.jsonrecords the running instance. - Dashboard panels are read-only.
- Policy Decision Log is read-only and never clears, approves, or edits runtime policy decisions.
Anti-Rationalization
| Shortcut / Temptation | Why It Fails |
|---|---|
| Treat the skill as complete because the file exists | Skill contracts must describe observable behavior and verification, not just command names. |
| Skip artifact and safety checks for a small command | Small commands still mutate state or guide execution; preserve the same gates. |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 65 lines · 45 tokens per session scan A f4a0a52cb4da
cocoplus-console is a skill published in the GitHub repository Snowflake-Labs/cocoplus (726 stars, last pushed 20d ago), licensed MIT. It adds 45 tokens to every session and 645 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
glyph
Render an answer as ASCII art plus semantic emojis inline with no setup questions: one render per reply, verdict first. Use for any answer with shape: status, inventories, audits, budgets, comparisons, rankings, pipelines, 'what is using X', or any ad-hoc 'show me X visually' ask. Not for definitions, conceptual…
markedit-tools
Provides tools for managing MarkEdit, a macOS markdown editor.
daily-life-discovery
Guide a consent-based conversation that helps a person discover how an AI agent could improve their day-to-day life: routines, friction, attention, decisions, relationships, learning, and small experiments. Use when someone asks for a daily check-in, wants the agent to learn how they work, says "grill me," wants a…
slack
Operate Slack workspaces from a terminal or agent: list channels, read messages, follow threads, search message history, list files, and verify inbound webhook signatures — with a bundled slack-cli script that is read-only by default and gates every send behind a --dry-run/--yes confirmation. Use when an agent needs…
notion
Operate Notion from a terminal or agent: retrieve pages, query databases, search pages and databases, and update page properties — with a bundled notion-cli script that is read-only by default and gates every create or update behind a --dry-run/--yes confirmation. Use when an agent needs to read Notion content, answer…
workflow-architect
Discover your actual workflow through conversation or observation, then generate a tailored skills bundle that encodes it as loadable agent skills with trigger conditions. Use when you want to understand your own process, formalize it, or share it with collaborators. Also use when a session feels aimless — this skill…