Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/TOKTOKHAN-DEV/agent-companynpx agentmods add skills/toktokhan-dev/agent-company/fallback-imageWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/toktokhan-dev/agent-company/fallback-image)<a href="https://agentmods.dev/skills/toktokhan-dev/agent-company/fallback-image"><img src="https://agentmods.dev/badge/skills/toktokhan-dev/agent-company/fallback-image/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/toktokhan-dev/agent-company/fallback-image"><img src="https://agentmods.dev/badge/skills/toktokhan-dev/agent-company/fallback-image.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00002 | $0.00544 |
| Opus 5.5 | $0.00001 | $0.00218 |
| Sonnet 5.5 | $0.00000 | $0.00109 |
| Haiku 4.5 | $0.00000 | $0.00054 |
Grade A, and why
fallback-image scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
fallback-image
순서를 지킨다. 위에서부터 시도하고, 임의로 건너뛰지 않는다.
1. 이미지 없이 진행 (기본값)
커버는 발행 필수 요소가 아니다. cover를 비운 채로 두고 사람에게 보고한다.
imagegen 실패 (3회 시도). 커버 없이 진행합니다.
필요하시면 직접 첨부해 주세요 — 경로: apps/web/public/images/posts/<slug>.png
감사에서 [images] cover는 info 레벨이라 발행을 막지 않는다. 이게 정상 동작이다.
2. 사용자에게 요청
사람이 이미지를 주겠다고 하면, 어떤 이미지가 필요한지 구체적으로 설명하고 기다린다.
cp <받은 이미지> apps/web/public/images/posts/<slug>.png
node scripts/set-cover.mjs \
--slug <slug> \
--src "/images/posts/<slug>.png" \
--alt "<보이는 것을 설명>" \
--source user-upload
3. 웹 검색
라이선스가 명확한 이미지만. 확인할 수 없으면 쓰지 않는다.
node scripts/set-cover.mjs \
--slug <slug> \
--src "/images/posts/<slug>.png" \
--alt "<설명>" \
--source web-search \
--origin "<원본 URL>" \
--license "<라이선스 표기>"
--license 없이는 스크립트가 거부하고, 감사에서도 error로 잡힌다. 우회하지 않는다 —
출처 불명 이미지가 들어가는 것보다 이미지가 없는 편이 낫다.
허용되는 출처는 넷뿐
codex-imagegen | user-upload | web-search | none
set-cover.mjs가 이 외의 값을 거부한다. 다른 값이 필요하다고 느껴지면 정책을 잘못 이해한 것이다.
하지 않을 것
- 다른 이미지 생성 모델이나 API를 찾지 않는다.
- SVG나 CSS로 이미지를 흉내 내 커버 자리에 넣지 않는다.
- 라이선스를 추측해서 기록하지 않는다. 모르면 그 이미지를 쓰지 않는다.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 66 lines · 2 tokens per session scan A 0077ab7317e7
fallback-image is a skill published in the GitHub repository TOKTOKHAN-DEV/agent-company (85 stars, last pushed 2mo ago), licensed MIT. It adds 2 tokens to every session and 544 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
backlog
Seed a backlog from the project's documents: the Product Owner reads docs/ (plus the constitution and ROADMAP.md), proposes an ordered list of feature-sized items each traced to a source section, the user edits the list, and on explicit confirmation each item is filed as a GitHub issue that /story-time can import. Use…
backend-developer
Backend Developer (/be, alias: James, /james) - Senior Backend Developer with 10+ years experience. Covers Java/Spring Boot (default), Kotlin, Python/FastAPI, PHP/Laravel, Quarkus, and Kafka/messaging - detects the project's stack and loads the matching reference. Use when implementing server features, REST APIs…
java
Java language and JVM engineering standards — records and sealed-type modelling, JSpecify null-safety with NullAway as a build error, immutability, virtual threads and modern concurrency, Error Prone/ArchUnit/PIT build gates, JUnit 6 testing doctrine, and boundary security. Load whenever writing, refactoring, or…
sql
SQL and relational-database engineering with dialect branches for Postgres, MySQL, Oracle, and SQLite. Load whenever writing, editing, or reviewing SQL: a .sql file, a schema migration, a raw query embedded in application code, index/EXPLAIN/tuning work, or stored procedures/triggers. NOT for ORM entity mapping where…
typescript
JavaScript/TypeScript language engineering — the strictest-profile type system (discriminated unions, branded types, satisfies), parse-don't-validate boundaries with Zod, ESM and the Node runtime, typescript-eslint discipline (no floating promises), and Vitest/MSW/fast-check testing. Load whenever writing, editing, or…
product-owner
Product Owner (/po, alias: Max, /max) - Senior PO with 10+ years agile experience. Use when defining product vision, creating/prioritizing backlog, writing user stories with acceptance criteria, making scope decisions, validating features against business goals, or planning releases and sprints.