Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/tyox-all/weave_protocol/clinpx skills add Tyox-all/Weave_Protocol --skill cligit clone --depth 1 https://github.com/Tyox-all/Weave_ProtocolWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00136 | $0.00963 |
| Opus 5 | $0.00068 | $0.00481 |
| Sonnet 5 | $0.00027 | $0.00193 |
| Haiku 4.5 | $0.00014 | $0.00096 |
Grade A, and why
weave-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Weave Protocol CLI
The weave CLI is the front door to the Weave Protocol security suite. Use it to set up new projects, audit existing ones, and run the monitoring dashboard.
Commands
weave init
Sets up Weave Protocol in the current project. Detects framework, asks user to confirm choices, scaffolds security middleware.
Use when:
- User starts a new AI agent project and asks for security
- User mentions Weave Protocol but isn't sure which packages they need
- User wants framework-specific security boilerplate (LangChain callback, MCP wrapper, SDK middleware)
npx @weave_protocol/cli init
weave audit
Delegates to Tollere to scan dependencies for supply chain risk.
Use when:
- User asks "is my project safe?"
- User is about to deploy and wants a final check
- User wants to add CI gating for dependencies
npx @weave_protocol/cli audit
Exit codes: 0 = clean, 1 = warnings, 2 = critical.
weave dashboard
Launches the API server and opens the monitoring dashboard.
Use when:
- User wants real-time visibility into Weave Protocol activity
- User asks to "see what's happening" with their security
- User is debugging an issue and wants the live feed
npx @weave_protocol/cli dashboard
weave doctor
Environment health check. Verifies Node version, package.json, .weaverc, installed packages, Claude Desktop MCP config.
Use when:
- User says "something isn't working"
- User just installed and wants to verify setup
- Debugging a config issue
weave version
Prints CLI version + installed Weave Protocol package versions. Useful for bug reports.
Decision rules
| Situation | Suggested command |
|---|---|
| New project, "I want security" | weave init |
Existing project, no .weaverc |
weave init |
| Pre-deploy supply chain check | weave audit |
| User wants live monitoring | weave dashboard |
| Something broken | weave doctor |
| User filed a bug | weave version (include in report) |
What ships with it
18 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- .gitignore 36 B
- package-lock.json 41 KB
- package.json 1.2 KB
- README.md 6.7 KB
- src/cli.ts 2.7 KB runs code
- src/commands/index.ts 9.0 KB runs code
- src/commands/init.ts 10 KB runs code
- src/detect/framework.ts 6.0 KB runs code
- src/index.ts 850 B runs code
- src/scaffolds/index.ts 1.6 KB runs code
- src/scaffolds/langchain-js.ts 6.0 KB runs code
- src/scaffolds/mcp-server.ts 4.6 KB runs code
- src/scaffolds/sdk.ts 5.0 KB runs code
- src/scaffolds/types.ts 1.4 KB runs code
- src/utils/colors.ts 1.3 KB runs code
- src/utils/package-manager.ts 1.9 KB runs code
- src/utils/prompt.ts 3.3 KB runs code
- tsconfig.json 487 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 107 lines · 136 tokens per session scan A b83f45eb835e
weave-cli is a skill published in the GitHub repository Tyox-all/Weave_Protocol (0 stars, last pushed 8d ago), licensed Apache-2.0. It adds 136 tokens to every session and 963 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
analytical-table
Use ALWAYS for AnalyticalTable internals — react-table v7 plugin architecture, vendored react-table code at packages/main/src/components/AnalyticalTable/react-table/, tableHooks, AnalyticalTableHooks, useDynamicColumnWidths, useColumnResizing, useRowSelect, useF2CellEdit, useManualRowSelect…
rtc-balance
Check RustChain wallet balance, epoch info, and network status via the public RPC.
ui5wc-upgrade
Guide a complete UI5 Web Components version upgrade in the ui5-webcomponents-react monorepo. Updates root and peer dependencies, regenerates wrapper components, syncs theming parameters, updates version-info, detects new components and breaking changes, and verifies the build. Use when a new @ui5/webcomponents version…
build-page-layout
Build a page layout using fd-dynamic-page or fdp-dynamic-page — collapsing header, subheader, content area, footer, and optional tabs.
adopt-styles
Adopt breaking changes from fundamental-styles into Angular components.
build-form
Build a reactive form with @fundamental-ngx/platform form components, FormGroup wiring, validation, and error states.