Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/TOKTOKHAN-DEV/agent-companynpx agentmods add skills/toktokhan-dev/agent-company/fallback-imageWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/toktokhan-dev/agent-company/fallback-image)<a href="https://agentmods.dev/skills/toktokhan-dev/agent-company/fallback-image"><img src="https://agentmods.dev/badge/skills/toktokhan-dev/agent-company/fallback-image.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00002 | $0.00544 |
| Opus 5 | $0.00001 | $0.00272 |
| Sonnet 5 | $0.00000 | $0.00109 |
| Haiku 4.5 | $0.00000 | $0.00054 |
Grade A, and why
fallback-image scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
fallback-image
순서를 지킨다. 위에서부터 시도하고, 임의로 건너뛰지 않는다.
1. 이미지 없이 진행 (기본값)
커버는 발행 필수 요소가 아니다. cover를 비운 채로 두고 사람에게 보고한다.
imagegen 실패 (3회 시도). 커버 없이 진행합니다.
필요하시면 직접 첨부해 주세요 — 경로: apps/web/public/images/posts/<slug>.png
감사에서 [images] cover는 info 레벨이라 발행을 막지 않는다. 이게 정상 동작이다.
2. 사용자에게 요청
사람이 이미지를 주겠다고 하면, 어떤 이미지가 필요한지 구체적으로 설명하고 기다린다.
cp <받은 이미지> apps/web/public/images/posts/<slug>.png
node scripts/set-cover.mjs \
--slug <slug> \
--src "/images/posts/<slug>.png" \
--alt "<보이는 것을 설명>" \
--source user-upload
3. 웹 검색
라이선스가 명확한 이미지만. 확인할 수 없으면 쓰지 않는다.
node scripts/set-cover.mjs \
--slug <slug> \
--src "/images/posts/<slug>.png" \
--alt "<설명>" \
--source web-search \
--origin "<원본 URL>" \
--license "<라이선스 표기>"
--license 없이는 스크립트가 거부하고, 감사에서도 error로 잡힌다. 우회하지 않는다 —
출처 불명 이미지가 들어가는 것보다 이미지가 없는 편이 낫다.
허용되는 출처는 넷뿐
codex-imagegen | user-upload | web-search | none
set-cover.mjs가 이 외의 값을 거부한다. 다른 값이 필요하다고 느껴지면 정책을 잘못 이해한 것이다.
하지 않을 것
- 다른 이미지 생성 모델이나 API를 찾지 않는다.
- SVG나 CSS로 이미지를 흉내 내 커버 자리에 넣지 않는다.
- 라이선스를 추측해서 기록하지 않는다. 모르면 그 이미지를 쓰지 않는다.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 66 lines · 2 tokens per session scan A 0077ab7317e7
fallback-image is a skill published in the GitHub repository TOKTOKHAN-DEV/agent-company (75 stars, last pushed 11d ago), licensed MIT. It adds 2 tokens to every session and 544 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
sc-skill
Capture deterministic macOS screenshots for testing, docs, release notes, and marketing assets. Use when asked to automate app screenshots, batch-generate screenshot sets, standardize window sizing/composition, or choose between Peekaboo and native macOS screenshot tooling.
memstack-content-youtube-script
Use this skill when the user says 'YouTube script', 'video script', 'write script for YouTube', 'YouTube video outline', or is creating scripted content for a YouTube video with hooks, chapters, and CTAs. Do NOT use for TikTok/Reels short-form scripts or webinar presentations.
memstack-content-tiktok-script
Use this skill when the user says 'TikTok script', 'TikTok video', 'Reels script', 'Shorts script', 'short-form video', or needs timestamped scripts with hooks, visual cues, and captions for 15-60 second videos. Do NOT use for Twitter threads or webinar scripts.
memstack-marketing-facebook-ad
Use this skill when the user says 'facebook ad', 'FB ad', 'Meta ad', 'Instagram ad', or needs social media ad copy with targeting, creative direction, and A/B test plans for Meta Ads Manager. Do NOT use for Google search ads or organic social content.
presentation-creator
Builds decks with a story spine, house visual system, setting-specific density, and speaker notes. Use when asked to "create a presentation", "write a pitch deck", or "turn this doc into slides". Defaults to Marp; use an available presentation tool for editable PowerPoint. For product UI use ui-design.
talk-stage5-script
Produces a complete 5-act pitch with speaker notes, a slide-by-slide specification, and a ready-to-paste Kimi prompt for AI slide generation. Requires validated angle and title from Stage 4. Use when you have a confirmed talk angle and need the full script, slide spec, and AI-generated presentation prompt.