Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add sonichi/sutando --skill tutorialgit clone --depth 1 https://github.com/sonichi/sutandoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sonichi/sutando/tutorial)<a href="https://agentmods.dev/skills/sonichi/sutando/tutorial"><img src="https://agentmods.dev/badge/skills/sonichi/sutando/tutorial/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sonichi/sutando/tutorial"><img src="https://agentmods.dev/badge/skills/sonichi/sutando/tutorial.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00108 | $0.02556 |
| Opus 5.5 | $0.00043 | $0.01022 |
| Sonnet 5.5 | $0.00022 | $0.00511 |
| Haiku 4.5 | $0.00011 | $0.00256 |
Grade A, and why
tutorial scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 167 lines — stays where its author put it; the contents beside it link to each section on GitHub.
tutorial
Two modes. Pick by where the request came from.
Voice mode
When the owner says "tutorial", "walk me through" or "show me what you can do" (voice or text):
- Read
<workspace>/notes/first-time-tutorial.md. - Deliver the first section as a voice-friendly summary (1–2 sentences).
- Wait for them to try it; when they come back, deliver the next section.
- Continue until done or they say stop.
Keep each step conversational and brief: this is spoken, not read. Say what to try and skip setup details unless asked. A section that needs an app they have not connected (email, phone, the morning briefing) gets one sentence on connecting it, not the full step.
AG2 Space mode: the Getting started page
Used when an owner message in their AG2 Space DM has a line that is exactly /tutorial, or the owner
asks for the tutorial there. The setup app ends the automatic first-contact message with that line,
so the page follows the first greeting; the owner can send /tutorial again at any time. Run the
script below by its path: a core that cannot find skills by name still has it. The line asks for
this page and nothing else.
The greeting comes first. Send the first-contact reply in the DM before anything here. The page is extra: if any step below fails, the greeting stands. Do not edit, retract or repeat it, and do not retry the page in the same turn.
-
Your name, never the owner's, and never a reason to stop. Use
ag2.whoami'sdisplay_namewhen it has one. When it is null, pass--name auto, which falls back in this order:- your Matrix profile displayname from your homeserver;
- a name made from your mxid's localpart (
@chi-air-blue.agent:…givesChi Air Blue); Sutando.
Your mxid is
$AGENT_MXID, else the AG2 Space channel env file's, else--agent-mxid. -
Tailor the prompts when you know the owner's work. You know it when either:
- the first-contact message has a line
I picked: <labels>., for exampleI picked: Founder, Product Manager.. These are the persona labels the owner chose at onboarding, or their slugs when the client had no labels; or user_profile.mdalready says what they do.
- the first-contact message has a line
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/commons-surfaces.jpg 23 KB
- assets/composer-mention.jpg 3.5 KB
- assets/mobile-pairing.jpg 32 KB
- assets/new-room-dialog.jpg 32 KB
- assets/room-header-call.jpg 6.8 KB
- assets/room-header-commons.jpg 3.0 KB
- assets/room-list-add.jpg 1.6 KB
- assets/room-list-top.jpg 4.0 KB
- assets/room-menu-invite.jpg 15 KB
- assets/settings-integrations.jpg 10.0 KB
- assets/user-card-plug.jpg 2.7 KB
- manifest.json 497 B
- scripts/getting_started.py 28 KB runs code
- scripts/tour_page.py 31 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 167 lines · 108 tokens per session scan A dc39da2cc9e6
tutorial is a skill published in the GitHub repository sonichi/sutando (397 stars, last pushed today), licensed MIT. It adds 108 tokens to every session and 2,556 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-17.
Other skills, from other repositories
app-builder
Build and edit small, personal visual tools and artifacts — dashboards, trackers, calculators, data visualizations, charts, simple landing pages, and slide decks the user wants for THEMSELVES. This is the right skill whenever the user asks to "visualize this," "make a chart," or "build an artifact" for their own use…
gmail
Manage Gmail email — drafting, sending, organizing, filters, vacation replies, and inbox analysis.
assistant-migration
Migrate from ChatGPT, Claude, OpenClaw, Hermes, Manus, and other AI assistants into Vellum by inspecting their data exports, conversation archives, files, prompts, custom instructions, memory, saved memories, tools, GPTs, workflows, integrations, and relationships, then mapping as much as safely possible into Vellum…
vellum-memory-v3-migration
One-time migration of an existing memory-v2 concept corpus into the memory-v3 section-grain "wiki" — topical articles with a stand-alone lead and queryable sections — with loss-proof staging, assistant-reviewed authoring, and a retrieval-eval gate before cutover.
media-processing
Ingest and process media files (video, audio, image).
llm-cost-optimizer
Analyze and reduce LLM spend: read usage breakdowns by call site, model, and inference profile, understand single-winner profile resolution, and pin call sites to managed profiles (Balanced / Quality / Budget / Fast) only where they should deviate from shipped defaults.