Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ssheleg/sheleg-dev/google-authnpx skills add ssheleg/sheleg-dev --skill google-authgit clone --depth 1 https://github.com/ssheleg/sheleg-devWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ssheleg/sheleg-dev/google-auth)<a href="https://agentmods.dev/skills/ssheleg/sheleg-dev/google-auth"><img src="https://agentmods.dev/badge/skills/ssheleg/sheleg-dev/google-auth.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00185 | $0.02201 |
| Opus 5 | $0.00093 | $0.01100 |
| Sonnet 5 | $0.00037 | $0.00440 |
| Haiku 4.5 | $0.00018 | $0.00220 |
Grade A, and why
google-auth scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
const res = await client.fetch(url); How it starts
The opening of the file, as written. The whole thing — 269 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Google Authentication for Node.js & Python
Libraries
Node.js
google-auth-library— core auth library (OAuth2Client, GoogleAuth, JWT, Compute, Impersonated)googleapis— Google API client (wraps google-auth-library)
npm install google-auth-library
npm install googleapis
The client.fetch() calls below require google-auth-library ≥ 10.1.0 (the
fetch-compatible API landed in 10.1.0, 2025-06-12); on 9.x use
client.request() with the same arguments. Checked 2026-08-31: latest is 11.x
and keeps both methods.
Python
google-auth— core auth library (google.oauth2, google.auth, credentials, transport)google-auth-oauthlib— OAuth 2.0 user-credential flow helpers (Flow, InstalledAppFlow)google-api-python-client— Google API client (wraps google-auth)
pip install google-auth
pip install google-auth-oauthlib
pip install google-api-python-client
Authentication Methods Overview
| Method | Use Case | Node.js Key Class | Python Key Module / Class |
|---|---|---|---|
| ADC | Same identity for all users, server-to-server | GoogleAuth |
google.auth.default() |
| OAuth 2.0 | Actions on behalf of end users | OAuth2Client |
google_auth_oauthlib.flow.Flow |
| Sign In with Google (GIS) | User sign-in/sign-up on websites — the google-signin skill's ground | GIS JS SDK + verifyIdToken() |
GIS JS SDK + id_token.verify_oauth2_token() |
| JWT / Service Account | Server-to-server, single identity | JWT |
service_account.Credentials |
| API Key | Public data, no user context | OAuth2Client({ apiKey }) |
passed to googleapiclient.discovery.build(developerKey=) |
| Compute | On GCP with attached service account | Compute |
google.auth.compute_engine.Credentials |
| Workload Identity Federation | AWS/Azure/OIDC → GCP without SA keys | ExternalAccountClient |
google.auth.identity_pool.Credentials / google.auth.aws.Credentials |
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 269 lines · 185 tokens per session scan A 9502e655a502
google-auth is a skill published in the GitHub repository ssheleg/sheleg-dev (2 stars, last pushed 3d ago), licensed MIT. It adds 185 tokens to every session and 2,201 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
clone-website
Reverse-engineer and clone a website in one shot — extracts assets, CSS, and content section-by-section and proactively dispatches parallel builder agents in worktrees as it goes. Use this whenever the user wants to clone, replicate, rebuild, reverse-engineer, or copy any website. Also triggers on phrases like "make a…
prettify
Iteratively improves the visual design of an existing page — making it more sophisticated, richer, and prettier — without redesigning from scratch. Works on any page or UI surface: landing pages, marketing pages, pricing, docs, dashboards, admin views, settings, modals, empty states, etc. Use when the user says…
rebase-themes
Rebase all theme- branches onto main, resolving conflicts while preserving each theme's visual identity. Force-pushes directly to theme branches with backup tags. Run as a scheduled task or one-off.
propagate-template
Propagate the template's current main into forked AI-store repos (yns-store- in the tenants org), updating every file the store never customized and reporting the rest. Content-level reconcile — store repos share NO git history with the template. Use for "template rebase", "propagate template", "sync store repos"…
frontend-design
Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, artifacts, posters, or applications. Generates creative, polished code that avoids generic AI aesthetics.
audit
Perform comprehensive audit of interface quality across accessibility, performance, theming, and responsive design. Generates detailed report of issues with severity ratings and recommendations.