Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add wuzihuang/AUTODL-PLUGIN --skill autodlgit clone --depth 1 https://github.com/wuzihuang/AUTODL-PLUGINWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wuzihuang/autodl-plugin/autodl)<a href="https://agentmods.dev/skills/wuzihuang/autodl-plugin/autodl"><img src="https://agentmods.dev/badge/skills/wuzihuang/autodl-plugin/autodl/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wuzihuang/autodl-plugin/autodl"><img src="https://agentmods.dev/badge/skills/wuzihuang/autodl-plugin/autodl.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00073 | $0.01643 |
| Opus 5 | $0.00036 | $0.00822 |
| Sonnet 5 | $0.00015 | $0.00329 |
| Haiku 4.5 | $0.00007 | $0.00164 |
Grade A, and why
autodl scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AutoDL
Purpose
Use this skill to answer AutoDL questions and operate AutoDL resources through the companion MCP server. Prefer official API output over assumptions. Never claim a resource exists, a price is current, a GPU is available, or an action succeeded unless the corresponding API returned it.
Resource loading
- Read
references/api-reference.mdbefore choosing or calling an AutoDL MCP tool. - Read
references/operations-guide.mdfor lifecycle, billing, storage, networking, environment, and safety decisions. - Read the relevant row in
references/docs-index.mdwhen the request concerns a help topic outside the API reference or requires a current official rule. - Use
references/docs-manifest.jsononly for documentation coverage audits or drift checks. - Run
node scripts/refresh-docs.mjswhen the user asks for current documentation, the saved index is older than 30 days, or a documented field conflicts with a live API response. This refreshes metadata and links, not a verbatim copy of the site.
Operating workflow
- Classify the request as read-only, state-changing, destructive, or documentation-only.
- For API work, identify the exact typed MCP tool from
references/api-reference.md. Do not substitute Pro instance IDs, deployment UUIDs, container UUIDs, image UUIDs, machine IDs, or GPU specification IDs for one another. - Run read-only discovery first when an identifier or current state is missing.
- Before any state-changing call, summarize the target, requested change, billing effect, and data impact. Obtain explicit user confirmation, then call the tool with
confirm=true. - After a state-changing call, inspect
code,msg,request_id, and returned data. Query status again when the operation is asynchronous. - Report partial permissions honestly. Container Instance Pro requires personal or enterprise real-name verification; elastic deployment and performance monitoring require enterprise verification.
Safety rules
- Never use AutoDL resources for virtual-currency mining. The official anti-mining policy prohibits it and violations can cause account action and financial liability.
- Treat
release instanceanddelete deploymentas destructive. Require the exact target ID and explicit confirmation in the current conversation. For Pro instances, power off before release. - Treat create, power-on, replica increase, and elastic deployment creation as billable. Do not infer a budget or acceptable price ceiling.
- Treat power-off, stop container, stop deployment, replica decrease, NFS switching, image saving, blacklist changes, and WeChat messages as state-changing.
- Never place the developer Token in prompts, logs, source files, output, examples, or Git. Load it from
AUTODL_TOKEN. - Instance detail can contain
root_passwordandjupyter_token. Keep them redacted unless the user explicitly needs credentials and understands the exposure. - Do not expose custom-service URLs to third parties or use them outside the permitted research context described by AutoDL's service agreement.
- Do not promise data durability. Local system/data disks have no redundancy guarantee. Back up important data to durable storage.
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 72 lines · 73 tokens per session scan A 4c6aace9f5c0
autodl is a skill published in the GitHub repository wuzihuang/AUTODL-PLUGIN (2 stars, last pushed 19d ago), licensed MIT. It adds 73 tokens to every session and 1,643 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
skypilot-multi-cloud-orchestration
Multi-cloud orchestration for ML workloads with automatic cost optimization. Use when you need to run training or batch jobs across multiple clouds, leverage spot instances with auto-recovery, or optimize GPU costs across providers.
modal-serverless-gpu
Run approved CPU or GPU work through OpenScience computejob on the user's configured Modal account. Use for isolated scientific scripts, dependency provisioning, durable outputs, logs, status, cancellation, and recovery. Never invoke the Modal SDK or CLI directly.
lepton-cli
Operate NVIDIA DGX Cloud Lepton through the globally installed lep CLI. Use when the user asks to inspect or manage Lepton workspaces, endpoints/deployments, dev pods, batch jobs, fine-tuning jobs, Ray clusters, Slurm clusters, Dynamo endpoints, storage, secrets, nodes, ingress, templates, logs, authentication, or…
dstack-prototyping
Use with the dstack skill for model-serving work when the image, serving command, resources, backend/fleet choice, or service behavior is not proven. Guides task-first prototyping on real hardware, choosing fleets/backends that can reuse idle instances and caches, checking vLLM/SGLang sources, and verifying the final…
dstack-presets
Create and manage dstack presets: a toolkit that streamlines model inference optimization with agents, and a portable preset format. Use together with the dstack skill, and only when the user explicitly asks to create a preset or manage existing presets, not for deploying or serving a model.
nvcf-self-managed-cli
Install, operate, and tear down self-hosted NVIDIA Cloud Functions (NVCF) deployments with nvcf-cli. Use for control-plane or compute-plane install, status checks, cluster registration, function deploy/invoke, task create/list/cancel/delete, API keys, admin tokens, JWKS rotation, failed-install diagnosis, and…