Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TOKTOKHAN-DEV/agent-company --skill wire-sdkgit clone --depth 1 https://github.com/TOKTOKHAN-DEV/agent-companyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/toktokhan-dev/agent-company/wire-sdk)<a href="https://agentmods.dev/skills/toktokhan-dev/agent-company/wire-sdk"><img src="https://agentmods.dev/badge/skills/toktokhan-dev/agent-company/wire-sdk/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/toktokhan-dev/agent-company/wire-sdk"><img src="https://agentmods.dev/badge/skills/toktokhan-dev/agent-company/wire-sdk.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00002 | $0.00629 |
| Opus 5.5 | $0.00001 | $0.00252 |
| Sonnet 5.5 | $0.00000 | $0.00126 |
| Haiku 4.5 | $0.00000 | $0.00063 |
Grade A, and why
wire-sdk scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
wire-sdk
SDK 는 @apps-in-toss/web-framework 에서 도메인별로 가져온다.
import { Device, Storage, Share, Screen, SafeArea } from '@apps-in-toss/web-framework';
전체 목록: https://developers-apps-in-toss.toss.im/documentation/sdk/domains-api.md
권한이 필요한 기능
두 가지를 반드시 지킨다. 둘 다 심사 항목이다.
- 권한을 요청하기 전에 왜 필요한지 먼저 알린다
- 권한이 거부돼도 기능이 끝까지 동작한다 (대체 경로를 만든다)
// 위치 권한이 거부되면 수동 입력으로 진행한다
const location = await Device.getLocation().catch(() => null);
if (location == null) {
navigate('/address-manual');
return;
}
granite.config.ts 의 permissions 에 실제로 쓰는 것만 적는다. 쓰지 않는 권한을 요청하면
반려된다.
저장소
await Storage.setItem('key', value);
const saved = await Storage.getItem('key');
"앱을 재시작해도 유지된다" 는 수용 기준이 있으면 여기에 저장한다. 메모리 상태로는 충족하지 못한다.
공유
await Share.createLink({ /* ... */ });
intoss:// 만 쓴다. intoss-private:// 는 금지이고 preflight 가 error 로 잡는다.
Safe Area
CSS 의 env(safe-area-inset-*) 로 1차 대응이 되어 있다. 런타임 값이 필요하면:
const insets = await SafeArea.getSafeAreaInsets();
화면 닫기
Screen.close();
첫 화면의 뒤로가기에 연결한다. 하위 화면에서 부르면 사용자가 흐름 중간에 튕겨 나간다.
소켓
wss:// 만 쓴다. ws:// 는 preflight 가 error 로 잡는다.
하지 말아야 할 것
- 브라우저 히스토리를 조작하는 리다이렉트
eval·new Function· 원격 코드 로딩- 다른 앱 설치 유도, 자사 웹으로 보내기
완료 확인
pnpm typecheck
pnpm preflight
출력
- 붙인 SDK 도메인과 이유
granite.config.ts에 추가한 권한 (있다면)- 권한 거부 시 대체 경로
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 92 lines · 2 tokens per session scan A 70bf342941ff
wire-sdk is a skill published in the GitHub repository TOKTOKHAN-DEV/agent-company (85 stars, last pushed 2mo ago), licensed MIT. It adds 2 tokens to every session and 629 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
frontend-developer
Frontend Developer (/fe, alias: Finn, /finn) - Senior Frontend Developer with 10+ years web and mobile experience. Covers React/Next.js (default), Angular, Vue/Nuxt, Flutter/Dart, and JavaFX desktop - detects the project's framework and loads the matching stack reference. Use when implementing UI components, state…
native-mobile-developer
Native Mobile Developer (/ios, /android) — builds true native apps: iOS with Swift/SwiftUI and Android with Kotlin/Jetpack Compose. Use when implementing native iOS or Android features, SwiftUI/Compose UI, platform APIs (notifications, camera, background, widgets), App Store/Play Store concerns, or native…
svc-mobile-android
Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis. Use when target is an APK/Android app. Triggers - APK, Android, mobile app, decompiled, smali, jadx, apktool.
svc-mobile-ios
Pair with svc-mobile-android concepts — same audit axes, Apple-specific mechanics.
swift-patterns
Swift/iOS: SwiftUI, Combine, async/await, actors, SPM, Core Data, UIKit interop. Triggers: Swift, SwiftUI, Combine, iOS, Xcode, actor, Core Data, @MainActor, @State.
xcode-workflows
Xcode build system guidance for xcodebuild operations. Use when building iOS projects, running tests, analyzing build failures, or configuring schemes. Covers build/clean/test operations, interpreting xcodebuild output, and troubleshooting common build errors.