Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TikHub/tikhub-plugin --skill tikhub-endpoint-discoverygit clone --depth 1 https://github.com/TikHub/tikhub-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tikhub/tikhub-plugin/tikhub-endpoint-discovery)<a href="https://agentmods.dev/skills/tikhub/tikhub-plugin/tikhub-endpoint-discovery"><img src="https://agentmods.dev/badge/skills/tikhub/tikhub-plugin/tikhub-endpoint-discovery/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tikhub/tikhub-plugin/tikhub-endpoint-discovery"><img src="https://agentmods.dev/badge/skills/tikhub/tikhub-plugin/tikhub-endpoint-discovery.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00103 | $0.00674 |
| Opus 5 | $0.00051 | $0.00337 |
| Sonnet 5 | $0.00021 | $0.00135 |
| Haiku 4.5 | $0.00010 | $0.00067 |
Grade A, and why
tikhub-endpoint-discovery scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **REST** → `curl "https://api.tikhub.io{path}?param=..." -H "Authorization: Bearer $TIKHUB_API_KEY"` (see `tikhub-rest-api`). How it starts
The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.
TikHub — Endpoint Discovery
TikHub has 1,100+ endpoints. This skill finds the one you need, then hands off to a calling path.
Setup gate
# The bundled index is searchable offline — no key needed to FIND an endpoint.
# But CALLING any endpoint you find requires a key:
[ -z "${TIKHUB_API_KEY:-}" ] && echo "Index search works without a key; to actually call an endpoint, set TIKHUB_API_KEY (see tikhub-onboarding)."
Use the bundled search CLI
bin/tikhub-find-endpoint (on PATH when the plugin is enabled) searches a trimmed index of
every endpoint (method, path, tag, summary, params):
# goal-based search, scoped to a platform
tikhub-find-endpoint "one video" --platform tiktok
tikhub-find-endpoint "user posts" --platform douyin
tikhub-find-endpoint "comments" --platform youtube --method GET
# no platform filter — search everything
tikhub-find-endpoint "trending hashtag"
tikhub-find-endpoint "price calculate" # find the pricing/credit endpoints
Output lines look like:
GET /api/v1/tiktok/app/v3/fetch_one_video [TikTok-App-V3-API] params: aweme_id
The index lives at references/openapi-index.json and is regenerated with
python3 scripts/build-openapi-index.py when the API version changes.
Map a result to a calling path
Given GET /api/v1/{platform}/{api}/{action}:
- REST →
curl "https://api.tikhub.io{path}?param=..." -H "Authorization: Bearer $TIKHUB_API_KEY"(seetikhub-rest-api). - SDK →
client.{platform}_{api}.{action}(...)(seetikhub-python-sdk). - MCP → the matching
tikhub-{platform}server tool, if that platform is enabled (seetikhub-mcp).
Platforms without a dedicated skill
For LinkedIn, Reddit, Bilibili, Weibo, WeChat, Kuaishou, Zhihu, Lemon8, Toutiao, Xigua, PiPiXia, and Temp-Mail, discovery + REST/SDK/MCP is the path — there are no v1 platform skills.
Red flags
- Guessing endpoint paths instead of searching the index (paths and param names are specific).
- Forgetting param names — the CLI prints them; pass them exactly.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 58 lines · 103 tokens per session scan A 3b867a7f57a2
tikhub-endpoint-discovery is a skill published in the GitHub repository TikHub/tikhub-plugin (6 stars, last pushed 2mo ago), licensed MIT. It adds 103 tokens to every session and 674 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
data-engineering
Builds and operates data pipelines — ingestion, transformation, orchestration, quality testing, and reliability of data delivery. Use this to design or debug a pipeline, decide batch versus streaming, add data quality checks, handle late or duplicate data, or work out why a dashboard's numbers changed without anyone…
api-design
Designs interfaces that survive their consumers — resource modeling, errors, versioning, pagination, and compatibility. Use this to design a new API, review one before it ships, decide how to version or deprecate, fix an interface consumers keep misusing, or work out whether a change is breaking.
api-design
API contract design for REST and GraphQL, covering resource shape, URL and header versioning with deprecation windows, RFC 9457 Problem Details error handling, and OpenAPI specs. Use when specifying the wire contract an endpoint exposes, choosing a versioning scheme, or standardizing error response bodies across…
python-backend
Production Python async patterns including asyncio TaskGroup, FastAPI dependency injection and middleware, SQLAlchemy 2.0 async sessions, and database connection pool tuning. Python 3.11+ runtime concerns such as ExceptionGroup, cancellation semantics, and session rollback. Use when building async services, wiring…
async-jobs
Async job processing patterns for background tasks, Celery workflows, task scheduling, retry strategies, and distributed task execution. Use when implementing background job processing, task queues, or scheduled task systems.
database-patterns
Database design and migration patterns for Alembic migrations, schema design (SQL/NoSQL), and database versioning. Use when creating migrations, designing schemas, normalizing data, managing database versions, or handling schema drift.