Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/sophymarine/openregistrynpx agentmods add skills/sophymarine/openregistry/malaysia-ssmWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sophymarine/openregistry/malaysia-ssm)<a href="https://agentmods.dev/skills/sophymarine/openregistry/malaysia-ssm"><img src="https://agentmods.dev/badge/skills/sophymarine/openregistry/malaysia-ssm/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sophymarine/openregistry/malaysia-ssm"><img src="https://agentmods.dev/badge/skills/sophymarine/openregistry/malaysia-ssm.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00900 |
| Opus 5 | $0.00000 | $0.00450 |
| Sonnet 5 | $0.00000 | $0.00180 |
| Haiku 4.5 | $0.00000 | $0.00090 |
Grade A, and why
Malaysia — SSM Lookup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 73 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Malaysia — SSM Lookup
Live, direct-to-government access to Suruhanjaya Syarikat Malaysia (SSM) — Companies Commission of Malaysia.
Single-country variant of the cross-border Cross-Border UBO Chain Walker. Use this skill when the user is explicitly focused on Malaysia.
What you get
- Direct query to SSM. Every tool call hits Suruhanjaya Syarikat Malaysia (SSM) — Companies Commission of Malaysia at the moment you ask. No nightly scrape, no aggregator middle layer.
- Unmodified responses. Field names, status codes, and (where available) raw filing bytes are returned exactly as the registry's own system emits them.
- Native ID format support. 12-digit SSM registration number (e.g.
199301015245) or older 6-digit company number. - Sample entity: Maybank Bhd (Malayan Banking Berhad).
Available tools (jurisdiction = MY)
search_companies, get_company_profile
For every tool, pass jurisdiction: "MY" (case-insensitive).
Example prompts
Find Maybank Bhd's SSM record and confirm operating status
Look up Petronas Sdn Bhd
Confirm the registration status of Genting Bhd
Workflow
Step 1 — Resolve the entity
search_companies({ jurisdiction: "MY", query: "<name or ID>" })
get_company_profile({ jurisdiction: "MY", company_id: "<id>" })
Step 2 — Pull the relevant register slice
Pick from the available tools list above. For UBO walks across borders, return to the Cross-Border UBO Chain Walker.
Quirks specific to Malaysia
- SSM open data is basic-status only — full filings, officers, shareholders are paid via SSM e-Info / MBRS.
Sdn Bhd(Sendirian Berhad) = private limited;Bhd(Berhad) = public.- 12-digit SSM number = year (4) + counter (8); pre-2017 entities have 6-digit legacy numbers — both still in use.
- Malaysian UBO register (RBO) is access-controlled to AML-obliged entities; not in this dataset.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 73 lines · 0 tokens per session scan A e2dc2065061e
Malaysia — SSM Lookup is a skill published in the GitHub repository sophymarine/openregistry (17 stars, last pushed 4d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 900 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
corporate-ownership-investigation
Trace who ultimately owns or controls a company, screen it for sanctions, and report the result without overclaiming. Use when asked "who owns X", "who is behind X", "is X sanctioned", "is X connected to Y", "what does X own", or when doing KYC/AML/due-diligence, counterparty checks, supply-chain screening, or…
qcc-executive-background
A Chinese company and executive background-check workflow examines a named person together with a company's Unified Social Credit Code, the identifier used for Chinese businesses.
qcc-risk-screen
A full risk-screening workflow for Chinese companies using Qichacha, a business-information service. It checks legal, enforcement, tax, bankruptcy, ownership, operating, and other company-risk records.
qcc-basic-profile
A workflow for Qichacha, a Chinese company-information service, that gathers a basic business summary in one pass. It covers registration, contacts, key people, tax and invoice details, branches, listings, and annual reports.
qcc-ipr-portfolio
A Chinese-language workflow for listing a company's intellectual-property and online assets. It covers patents, trademarks, copyrights, integrated-circuit layouts, standards, licenses, websites, apps, online shops, and social-media accounts.
qcc-ownership-trace
A workflow for tracing a company's ownership, including its controlling person, direct shareholders, investments, beneficial owners, and registration changes.