Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/wentf9/xops-cli/xops-agentnpx skills add wentf9/xops-cli --skill xops-agentgit clone --depth 1 https://github.com/wentf9/xops-cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00056 | $0.01038 |
| Opus 5 | $0.00028 | $0.00519 |
| Sonnet 5 | $0.00011 | $0.00208 |
| Haiku 4.5 | $0.00006 | $0.00104 |
Grade F, and why
xops-agent scanned grade F with 4 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
xops host add --address "192.168.1.10" --user "root" --key ~/.ssh/id_ed25519 --alias "web-01" --tags "web" Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -sSL https://raw.githubusercontent.com/wentf9/xops-cli/master/install.sh | bash Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
3. **High-Risk Operations**: You MUST obtain explicit user confirmation via `ask_user` before running destructive commands (e.g., `rm -rf`, `format`, `systemctl stop`) on multiple hosts. Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sSL https://raw.githubusercontent.com/wentf9/xops-cli/master/install.sh | bash How it starts
The opening of the file, as written. The whole thing — 111 lines — stays where its author put it; the contents beside it link to each section on GitHub.
XOps CLI (IT Operations Automation Tool) Skill Guide
This skill empowers you to manage server clusters, execute batch tasks, and perform network security diagnostics via the XOps command-line tool (xops).
🎯 Environment Self-Check & Bootstrap Installation
Before attempting any operations, please run xops --version to check if the tool is installed.
If you receive a command not found error, instruct the user to execute the following installation command:
curl -sSL https://raw.githubusercontent.com/wentf9/xops-cli/master/install.sh | bash
🎯 Core Capabilities & Precise Command Usage
1. Host & Asset Management (xops host)
Manage the inventory of servers, credentials, and grouping tags.
- Initialize Local Configuration and Import OpenSSH Hosts:
xops init - List All Hosts:
xops host list - View All Unique Tags:
xops host tags - Add a New Host:
xops host add --address "192.168.1.10" --user "root" --key ~/.ssh/id_ed25519 --alias "web-01" --tags "web" - Batch Import Hosts from CSV:
xops host import hosts.csv --tag "production"
2. Batch Execution (xops exec)
Run commands or local scripts concurrently across multiple targets.
- Execute Command via Tag:
xops exec --tag "web" -c "uptime" - Run Local Script Remotely:
xops exec --tag "db" --shell "./backup.sh" --task 5
3. Distributed File Transfer (xops scp)
Transfer files or directories between local and remote hosts.
- Upload to Tagged Hosts:
xops scp ./config.conf --tag "web" --dest "/etc/app/"
4. Unified Firewall Management (xops firewall)
Abstracts different firewall backends (firewalld, ufw, iptables, nftables).
- List Rules for a Host:
xops firewall list -H "web-01" - Manage Ports:
#open port 80/tcp,81/tcp and reload firewall xops firewall port 80,81 -H "web-01" --reload #remove port 80/udp xops firewall port 80 --remove --proto udp -H "web-01" #allow port 80/tcp from source 192.168.0.1 xops firewall rule 80 192.168.0.1 -H "web-01"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 111 lines · 56 tokens per session scan F 53aee0525db5
xops-agent is a skill published in the GitHub repository wentf9/xops-cli (10 stars, last pushed 8d ago), licensed MIT. It adds 56 tokens to every session and 1,038 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it F with 4 findings (reaches for credential files, downloads and executes remote code, recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
algorithmic-art
Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems. Create original algorithmic art rather than copying existing artists' work to avoid copyright…
web-artifacts-builder
Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
gitnexus-guide
Use when the user asks about GitNexus itself — available tools, how to query the knowledge graph, MCP resources, graph schema, or workflow reference. Examples: "What GitNexus tools are available?", "How do I use GitNexus?".
git-commit
Generate well-formatted git commit messages following conventional commit standards.
freya
Freya Rust GUI framework best practices, patterns, and conventions. Use when writing Freya components, hooks, elements, or working on a Freya project.
gitnexus-impact-analysis
Use when the user wants to know what will break if they change something, or needs safety analysis before editing code. Examples: "Is it safe to change X?", "What depends on this?", "What will break?".