Borrowing it
Nothing to install: this file belongs to WingedGuardian/GENesis-AGI. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/WingedGuardian/GENesis-AGI/main/.agents/skills/genesis-external-client/SKILL.mdgit clone --depth 1 https://github.com/WingedGuardian/GENesis-AGIWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wingedguardian/genesis-agi/genesis-external-client)<a href="https://agentmods.dev/skills/wingedguardian/genesis-agi/genesis-external-client"><img src="https://agentmods.dev/badge/skills/wingedguardian/genesis-agi/genesis-external-client/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wingedguardian/genesis-agi/genesis-external-client"><img src="https://agentmods.dev/badge/skills/wingedguardian/genesis-agi/genesis-external-client.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00036 | $0.00672 |
| Opus 5.5 | $0.00014 | $0.00269 |
| Sonnet 5.5 | $0.00007 | $0.00134 |
| Haiku 4.5 | $0.00004 | $0.00067 |
Grade A, and why
genesis-external-client scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Genesis as an external tool client
This Codex conversation is not a Genesis session. It may call the Genesis MCP servers on demand, but Genesis must not register, heartbeat, extract, summarize, or otherwise manage this conversation. The external launcher removes inherited Genesis session identity, provenance, supervision, slot, and trace context before starting either MCP server. In a Git worktree it resolves Genesis's live runtime state through the main checkout rather than creating worktree-local state.
Codex defers MCP schemas until requested. Before calling a Genesis tool that is
not already visible, use MCP tool discovery for its exact server.tool name.
The initial Codex surface provides approved health and recall tools only. It does not expose persistent memory writes, task dispatch, browser control, outreach, Discord, recon, campaign management, or session controls. Do not work around this allowlist; expanding it needs a separate capability review.
The standalone launcher enforces --external-client on the server as well as
the client allowlist. Both the external default and explicit validator
profile currently expose the same health and recall floor. Direct calls to
other tools are rejected before their bodies run; the health bootstrap also
skips dispatch queue and campaign initialization. These tool profiles are not
authentication or isolation from an operator with full host access.
Do not pass a Codex thread or session identifier to session_charter,
session_ledger_*, or other session-bound tools. Those tools operate only on an
explicitly identified, existing Genesis session. Never create a synthetic session
or charter to make one work.
Use genesis-health for live status and genesis-memory for recall. Recall
may update Genesis retrieval-use metadata; this is expected and does not make
the conversation a Genesis session.
The project also configures gitnexus through .claude/mcp/run-gitnexus,
which enforces the repository's installed-version and Node compatibility pin.
Its explicit 15-tool catalog excludes source-editing rename and group-metadata
group_sync. The retained tools include raw Cypher and can have incidental
cache/recovery effects; this is not a side-effect-free server contract.
GitNexus reads a snapshot, so check
freshness before relying on it for current code. Linked worktrees use live
symbol tools for branch truth rather than indexing another checkout. See
docs/reference/codex-gitnexus.md for setup and qualification limits.
If a capability requires automatic context injection, transcript extraction, session continuity, or background delivery into this conversation, explain that it is unavailable to an external client. Do not add lifecycle hooks or work around the boundary.
The project also wires a local Codex CLI shell action guard for review budgets.
It denies actions requiring fresh approval and requests user handoff, without
registering a Genesis session or persisting approval receipts. See
docs/reference/codex-review-stop.md for activation, tested failures, scope and
integration limits; this is not universal client enforcement.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +10 lines 4929211cef6f
- 10d ago Changed · +7 lines e56d4bc089cb
- 21d ago Changed · +6 lines f90ea58d9778
- 1mo ago First seen · 36 lines · 36 tokens per session scan A b2f67c1663e4
genesis-external-client is a skill published in the GitHub repository WingedGuardian/GENesis-AGI (99 stars, last pushed today), licensed MIT. It adds 36 tokens to every session and 672 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-18.
Other skills, from other repositories
search
Unified academic paper search, citation chains, paper download (arXiv LaTeX/PDF, Sci-Hub), figure extraction from papers, LaTeX source reading, BibTeX fetching, web search, and browser automation for Cloudflare-protected sites (PRL, Science, Nature, Google Scholar).
qec-construct
Verifier-in-the-loop CONSTRUCTION of quantum error-correcting codes with transversal non-Clifford gates (CCZ/T). Applies whenever the project goal is a new or better code/construction — INCLUDING search-phrased goals ("find codes beating X"), where the construct-loop (propose algebraic rule → qverify → debug) is the…
memory
Cross-project research memory. Deep-dive past projects' notes and record corrections across all Luxas research projects.
paper-figures
Extract figures from downloaded papers and include them in survey/review reports. Use when the report covers other groups' work and benefits from their architecture diagrams, experimental plots, or system schematics. Your brain prompt supplies the absolute path to the extract-figures script as {{EXTRACTFIGURES}} — use…
compute-methods
Friction sheets for field-standard computational tools and simulators (frictions, smoke tests, how to measure a saved model). Injected at spawn time.
brain-ai-memory
Save, correct and recall project facts, exact state and session handoffs through Brain-AI Memory MCP when it is connected, or set up a project-local connection when requested.