Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add XPOZpublic/xpoz-cursor-plugin --skill xpoz-getting-startedgit clone --depth 1 https://github.com/XPOZpublic/xpoz-cursor-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xpozpublic/xpoz-cursor-plugin/xpoz-getting-started)<a href="https://agentmods.dev/skills/xpozpublic/xpoz-cursor-plugin/xpoz-getting-started"><img src="https://agentmods.dev/badge/skills/xpozpublic/xpoz-cursor-plugin/xpoz-getting-started/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xpozpublic/xpoz-cursor-plugin/xpoz-getting-started"><img src="https://agentmods.dev/badge/skills/xpozpublic/xpoz-cursor-plugin/xpoz-getting-started.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00078 | $0.01320 |
| Opus 5 | $0.00039 | $0.00660 |
| Sonnet 5 | $0.00016 | $0.00264 |
| Haiku 4.5 | $0.00008 | $0.00132 |
Grade A, and why
xpoz-getting-started scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- getting-started — 92% identical, 48 lines differ
How it starts
The opening of the file, as written. The whole thing — 158 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Getting Started with Xpoz
Overview
Xpoz is a social media intelligence platform providing access to Twitter/X, Instagram, Reddit, and TikTok data — no social media API keys required. This plugin connects Cursor to Xpoz via MCP, giving you 48 tools for searching posts, looking up users, tracking keywords, and exporting data.
When to Use
Activate when the user asks:
- "Help me set up Xpoz"
- "What's my Xpoz account status?"
- "Connect to Xpoz social media data"
- "What can I do with Xpoz?"
- "Set up tracking for my brand"
- "I'm new to Xpoz, where do I start?"
Step 1: Check MCP Connection
Try calling checkAccessKeyStatus to verify the Xpoz MCP server is connected.
If it returns hasAccessKey: true, skip to Step 3.
Step 2: Configure MCP Connection
If the MCP server is not connected, guide the user:
Get an Access Token
Ask the user:
"Go to https://xpoz.ai/get-token (free, no credit card) and paste the token here."
WAIT for the user to reply with the token. Do not proceed until they respond.
Add to Cursor MCP Settings
Add this to Cursor's MCP settings (~/.cursor/mcp.json or via Cursor Settings → MCP):
{
"mcpServers": {
"xpoz": {
"url": "https://mcp.xpoz.ai/mcp",
"headers": {
"Authorization": "Bearer YOUR_TOKEN_HERE"
}
}
}
}
Replace YOUR_TOKEN_HERE with the token from the user.
After saving, reload Cursor or restart the MCP server.
Auth Errors
| Problem | Solution |
|---|---|
| "Unauthorized" | Verify token at xpoz.ai/settings |
| Token exchange fails | Ask user to re-authorize — codes are single-use |
Step 3: Verify Your Setup
Call getAccountDetails to retrieve the user's account information. Present a summary:
## Your Xpoz Account
**Plan:** [plan name]
**Billing period:** [start] – [end]
**Next renewal:** [date]
### Usage
- Subscription credits remaining: [X]
- Extra credits: [X]
- Tracked items: [X] / [limit]
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 158 lines · 78 tokens per session scan A 75aff48e6a9a
xpoz-getting-started is a skill published in the GitHub repository XPOZpublic/xpoz-cursor-plugin (4 stars, last pushed 2mo ago), licensed MIT. It adds 78 tokens to every session and 1,320 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
requirements-authoring
To author, update, and validate functional/non-functional requirements as atomic units with user approval.
coding-agents-hooks-authoring
To author, register, and test Rosetta hooks, add a SemanticKind, or debug a hook that won't fire.
init-workspace-documentation
Skill "init-workspace-documentation" from griddynamics/rosetta, covering agent memory.md, agent memory, preventive rules, what worked and what failed.
specflow-use
To connect Rosetta with Grid Dynamics SpecFlow MCP; only when SpecFlow is mentioned and the MCP is installed.
memorix-mini-skills
Use when durable project knowledge, gotchas, workflows, or repeated fixes should become reusable agent guidance instead of ordinary memory.
memorix-sessions
Use when resuming work, preparing handoff context, binding an HTTP control-plane project, or deciding whether sessionstart is useful.