Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add viticci/remctl --skill onboardinggit clone --depth 1 https://github.com/viticci/remctlWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/viticci/remctl/onboarding)<a href="https://agentmods.dev/skills/viticci/remctl/onboarding"><img src="https://agentmods.dev/badge/skills/viticci/remctl/onboarding/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/viticci/remctl/onboarding"><img src="https://agentmods.dev/badge/skills/viticci/remctl/onboarding.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00019 | $0.00326 |
| Opus 5.5 | $0.00008 | $0.00130 |
| Sonnet 5.5 | $0.00004 | $0.00065 |
| Haiku 4.5 | $0.00002 | $0.00033 |
Grade A, and why
onboarding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Use this plugin's RemCTL tools. Never route this plugin through Mac Remote or any other remote adapter.
- Call
doctorand readaccess.effective. The signed RemCTL Capability Host owns the macOS permissions. Never tell users to grant access to Python, Terminal, or Codex. - If the host is missing, explain that RemCTL itself must be installed first: the release download, or
./install.sh --from-sourcefrom the repository. If access is blocked, name the missing permission and tell the user to runremctl onboardin Terminal. Do not say setup succeeded untildoctorreports ready. - Call
open_workspace. Point the user to RemCTL's settings in the workspace, where they can pick a default list for new reminders and turn on 'Advanced Reminders features' for sections, tags, templates, and other private ReminderKit features. Mention that those features use private Apple APIs that can change with macOS updates. You have no tool to change these settings; the user changes them. - Explain in one sentence that selecting reminders and choosing Attach shares only those reminders with the conversation. The workspace is desktop-only.
If Codex also shows a separate RemCTL connection from an older remctl mcp install, or 'Reminders' is missing from the sidebar, tell the user to remove that connection with remctl mcp remove --client codex and restart Codex. That leaves other apps' connections alone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago Changed b0a1cea1e6e9
- 16d ago First seen · 13 lines · 19 tokens per session scan A 5acce2047538
onboarding is a skill published in the GitHub repository viticci/remctl (616 stars, last pushed 13d ago), licensed MIT. It adds 19 tokens to every session and 326 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-01.
Other skills, from other repositories
c-notes
Manage Apple Notes and Apple Reminders from the CLI. Uses memo for Notes and remindctl for Reminders. Supports listing, searching, reading, creating notes, and adding/completing reminders.
apple-reminders
Apple Reminders'ı remindctl ile yönet — ekle, listele, tamamla.
apple-bridges
Use this skill whenever the user asks about Apple apps — Reminders, Calendar, Contacts, Notes, Mail, Messages (iMessage/SMS), or tmux sessions. This includes creating/completing reminders, checking/adding calendar events, looking up contacts, reading/writing notes, sending/reading email, reading/sending iMessages and…
rem-cli
Create, list, update, complete, tag, and search macOS Reminders via the rem CLI. Use when the user wants to manage Apple Reminders from the terminal, automate reminder workflows, reference reminders in shell scripts, or schedule anything on macOS.
apple-notes
Apple Notes'u memo CLI ile yönet — oluştur, ara, düzenle.
batch-api
Prepare a many-file, single-turn transform (translate, rewrite, extract) as a plan and submit it to the asynchronous, half-price DashScope Batch API; results are delivered as new files hours later. Invoke explicitly with /batch-api.