open-tag-admin

open-tag-admin is a skill for Codex from zilliztech/mfs. It costs 96 tokens per session (1,622 once invoked), scanned A, original, Apache-2.0.

An administration console for an Open Tag bot that responds when tagged in Slack, using approved information sources. It helps configure the bot, its AI command-line backend, its data access, and its Slack channel.

In plain words
What is it for?
Use it to set up an Open Tag deployment, inspect its current state, change its backend or permissions, add data sources, move it between Slack channels, and debug runs.
Why use it?
It puts setup, configuration changes, source management, and troubleshooting in one workflow. Access can be limited to the sources and permissions the operator allows.

Skill for Codex

Written for Codex: runs codex exec. Also seen: mentions Claude Code; mentions Codex; $skill-name invocation.

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/zilliztech/mfs/open-tag
Any agent
npx skills add zilliztech/mfs --skill open-tag
Clone the repo
git clone --depth 1 https://github.com/zilliztech/mfs

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for open-tag-admin

README.md
[![agentmods](https://agentmods.dev/badge/skills/zilliztech/mfs/open-tag.svg)](https://agentmods.dev/skills/zilliztech/mfs/open-tag)
Your own site
<a href="https://agentmods.dev/skills/zilliztech/mfs/open-tag"><img src="https://agentmods.dev/badge/skills/zilliztech/mfs/open-tag.svg" alt="Measured on agentmods" height="20"></a>
Per session 96 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,622 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00096 $0.01622
Opus 5 $0.00048 $0.00811
Sonnet 5 $0.00019 $0.00324
Haiku 4.5 $0.00010 $0.00162

Measured 6d ago against content hash 894e7aac5184, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

open-tag-admin scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

The scan reads SKILL.md. This mod also ships 6 executable files (scripts/mfs_cat.py, scripts/mfs_search.py, scripts/opentag_agent.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

`curl -s 127.0.0.1:13619/healthz`.
examples/open-tag-skill/open-tag/SKILL.md · 143 lines

How it starts

The opening of the file, as written. The whole thing — 143 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Open Tag (admin)

This skill is the control console for an Open Tag deployment. Use it for the first-time setup and for ongoing operation alike: inspect the live bot, change the backend or permitted scopes, add a new data source, move the bot to another Slack channel, or debug a run.

Keep the architecture generic:

  • Brain: the selected CLI agent backend — claude -p (Claude Code) or codex exec (Codex).
  • Memory: MFS-indexed, operator-authorized context such as Slack history, repositories, docs, issues, databases, or object stores.
  • Tools: MFS connectors for external read/search plus any explicit tools the backend is allowed to use in the workspace.

The user-facing flow is:

  1. Configure MFS sources and allowed scopes.
  2. Configure a Slack app with Socket Mode and invite it to a sandbox channel.
  3. Start the Open Tag bridge.
  4. Move to Slack and tag the bot in a thread.
  5. Let the bridge invoke the selected backend with thread context and scoped MFS helper scripts for permitted external context.

This skill does not call a model API directly. Model access, tool access, and write permissions come from the selected CLI agent backend.

Prerequisites

Open Tag is a thin layer on top of a running MFS server with at least one indexed source. Confirm these before any Slack work:

  1. MFS server installed and running. uv tool install mfs-server, then mfs-server run (binds 127.0.0.1:13619). Check with curl -s 127.0.0.1:13619/healthz.
  2. At least one data source indexed. Open Tag only consumes already-indexed scopes as Memory — it does not configure connectors itself. Use the mfs-ingest skill (Codex: $mfs-ingest) to add a source; see "Adding data sources" below.

opentag_doctor.py fails fast with a hint if either is missing.

Bot name convention

The Slack display name is whatever you call the Slack app — Open Tag's code strips the mention regardless. Recommended convention, so it reads like the official @Claude tag:

Read the full file on GitHub · 143 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 143 lines · 96 tokens per session scan A 894e7aac5184

Subscribe to this mod's changes

open-tag-admin is a skill published in the GitHub repository zilliztech/mfs (135 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 96 tokens to every session and 1,622 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.