Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TOKTOKHAN-DEV/agent-company --skill wire-sdkgit clone --depth 1 https://github.com/TOKTOKHAN-DEV/agent-companyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/toktokhan-dev/agent-company/wire-sdk)<a href="https://agentmods.dev/skills/toktokhan-dev/agent-company/wire-sdk"><img src="https://agentmods.dev/badge/skills/toktokhan-dev/agent-company/wire-sdk.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00002 | $0.00629 |
| Opus 5 | $0.00001 | $0.00315 |
| Sonnet 5 | $0.00000 | $0.00126 |
| Haiku 4.5 | $0.00000 | $0.00063 |
Grade A, and why
wire-sdk scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
wire-sdk
SDK 는 @apps-in-toss/web-framework 에서 도메인별로 가져온다.
import { Device, Storage, Share, Screen, SafeArea } from '@apps-in-toss/web-framework';
전체 목록: https://developers-apps-in-toss.toss.im/documentation/sdk/domains-api.md
권한이 필요한 기능
두 가지를 반드시 지킨다. 둘 다 심사 항목이다.
- 권한을 요청하기 전에 왜 필요한지 먼저 알린다
- 권한이 거부돼도 기능이 끝까지 동작한다 (대체 경로를 만든다)
// 위치 권한이 거부되면 수동 입력으로 진행한다
const location = await Device.getLocation().catch(() => null);
if (location == null) {
navigate('/address-manual');
return;
}
granite.config.ts 의 permissions 에 실제로 쓰는 것만 적는다. 쓰지 않는 권한을 요청하면
반려된다.
저장소
await Storage.setItem('key', value);
const saved = await Storage.getItem('key');
"앱을 재시작해도 유지된다" 는 수용 기준이 있으면 여기에 저장한다. 메모리 상태로는 충족하지 못한다.
공유
await Share.createLink({ /* ... */ });
intoss:// 만 쓴다. intoss-private:// 는 금지이고 preflight 가 error 로 잡는다.
Safe Area
CSS 의 env(safe-area-inset-*) 로 1차 대응이 되어 있다. 런타임 값이 필요하면:
const insets = await SafeArea.getSafeAreaInsets();
화면 닫기
Screen.close();
첫 화면의 뒤로가기에 연결한다. 하위 화면에서 부르면 사용자가 흐름 중간에 튕겨 나간다.
소켓
wss:// 만 쓴다. ws:// 는 preflight 가 error 로 잡는다.
하지 말아야 할 것
- 브라우저 히스토리를 조작하는 리다이렉트
eval·new Function· 원격 코드 로딩- 다른 앱 설치 유도, 자사 웹으로 보내기
완료 확인
pnpm typecheck
pnpm preflight
출력
- 붙인 SDK 도메인과 이유
granite.config.ts에 추가한 권한 (있다면)- 권한 거부 시 대체 경로
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 92 lines · 2 tokens per session scan A 70bf342941ff
wire-sdk is a skill published in the GitHub repository TOKTOKHAN-DEV/agent-company (76 stars, last pushed 12d ago), licensed MIT. It adds 2 tokens to every session and 629 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
bitcoin-infrastructure-bluewallet
BlueWallet: mobile Bitcoin + Lightning wallet (iOS/Android). LND on-device + LndHub backend variants. Multi-wallet support. USE WHEN: mobile wallet integrations, evaluating BlueWallet vs Phoenix / Mutiny.
bitcoin-infrastructure-electrum-wallet
Electrum Wallet: classic Python desktop wallet. Lightweight, runs on most platforms, plugin ecosystem, hardware wallet support. USE WHEN: evaluating mature Bitcoin wallet, integrating Electrum protocol clients.
designmatch
Use when matching a React Native screen to a Claude Design HTML canonical at ≥95% visual parity on real Android/iOS hardware — closes the loop with a VQA stub mode, Playwright canonical renderer at 1080×2444, and a dual-metric pixelmatch + SSIM diff harness producing composite triptychs.
app-dev
Mobile/web app build pipeline: fastlane-first local builds, store submission, pre-submission checklists. Triggers: app, mobile, store submission, build, deploy app, fastlane, expo, react native, flutter.
app-cross-platform-dev
Use when designing, implementing, reviewing, debugging, testing, or shipping mobile app client features across Flutter, React Native, native Android, and native iOS, including navigation, state, API integration, offline/cache, platform capabilities, accessibility, performance, app build/release, and rendered device…
miniapp-product-dev
A development guide for building mini-programs—small mobile apps that run inside platforms such as WeChat, Alipay, and Douyin. It mainly targets Taro, a React-based framework for creating mini-programs for several platforms.