Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add toflow-ai/toflow-mcp --skill toflow-manage-activitiesgit clone --depth 1 https://github.com/toflow-ai/toflow-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/toflow-ai/toflow-mcp/toflow-manage-activities)<a href="https://agentmods.dev/skills/toflow-ai/toflow-mcp/toflow-manage-activities"><img src="https://agentmods.dev/badge/skills/toflow-ai/toflow-mcp/toflow-manage-activities/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/toflow-ai/toflow-mcp/toflow-manage-activities"><img src="https://agentmods.dev/badge/skills/toflow-ai/toflow-mcp/toflow-manage-activities.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00055 | $0.00433 |
| Opus 5.5 | $0.00022 | $0.00173 |
| Sonnet 5.5 | $0.00011 | $0.00087 |
| Haiku 4.5 | $0.00006 | $0.00043 |
Grade A, and why
toflow-manage-activities scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
toflow — Notes, Tasks, and Calls
Lightweight activity records attached to CRM people, companies, or deals.
Notes
list_notes/get_note— review existing notes on a record before adding a new one, to avoid duplicating context already captured.create_note— link it to a person, company, or deal. Use this to capture meeting summaries, research findings, or context about a contact.update_note— correct or expand a note after creation.delete_note— confirm with the user before deleting.
Tasks
list_tasks/get_task— review open tasks or confirm a task's current state before updating it.create_task— link to a person, company, or deal; assign it to a team member (seelist_workspace_membersintoflow-get-started) and set a due date.update_task— mark complete, reassign, or change the due date.delete_task— confirm with the user before deleting.
Calls
list_calls/get_call— review call history for a contact or find a specific record.log_call— log a completed call or schedule a future one. Link it to a person or company; include outcome and notes to keep the CRM record complete.update_call— add notes after a call or correct an entry.delete_call— confirm with the user before deleting.
Guardrails
- Always link a note/task/call to the relevant person, company, or deal rather than leaving it unattached, unless the user explicitly wants a standalone record.
- All deletes here are destructive from the user's point of view — confirm before calling any of them.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 35 lines · 55 tokens per session scan A f394d43978a1
toflow-manage-activities is a skill published in the GitHub repository toflow-ai/toflow-mcp (6 stars, last pushed 5d ago), licensed MIT. It adds 55 tokens to every session and 433 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-10.
Other skills, from other repositories
job-posting-intent
Detect buying intent from job postings. When a company posts a job in your problem area, they've allocated budget and are actively thinking about the problem. This skill finds those companies, qualifies them, extracts personalization context, and outputs everything to a Google Sheet. Does NOT do outreach — just…
contact-cache
Track all identified/contacted people across strategies. CSV-backed contact database with dedup by LinkedIn URL or email. Prevents duplicate outreach when running strategies on a recurring cadence.
afrexai-lead-hunter
Enterprise-grade B2B lead generation, enrichment, scoring, and outreach sequencing for AI agents. Find ideal prospects, enrich with verified data, score against your ICP, and generate personalized outreach — all autonomously.
deepline-org-chart
Build an interactive account org chart, leadership map, buying committee, or manager/report neighborhood around a person. Use for decision makers, reporting-line candidates, stakeholder mapping, and warm intro paths. Skip standalone email lookup and unrelated cross-company prospecting.
luma-event-campaign
DRAFT. Use when running a Luma-centered GTM event campaign: pull/export guests, enrich and score, draft invites and social, stage email+LI sequences paused for approval, and wire registration sync. Not installed by deepline skills.
event-ops-score-and-door
DRAFT. Score Luma/RSVP lists, approve against capacity, produce host-hit shortlists and day-of door packs. Systems framing — not a marketing CSV dump. Not installed by deepline skills.