KeyArgo/custodian-kernel

# Anthropic Chat

Call Anthropic Messages API (Claude) with a prompt

# Cohere Embed

Generate text embeddings via Cohere Embed API

# Openai Chat

Call OpenAI chat completions API with a prompt and system message

# Replicate Run

Run any Replicate model (image gen, audio, video) by version ID

# Together Infer

Call Together.ai inference API for open-weight models

# Pagerduty Alert

Trigger or resolve a PagerDuty incident for on-call escalation

# Telegram Send

Send a message or file to a Telegram chat or channel

# Twilio Voice Call

Place an outbound voice call via Twilio and read a TwiML script

# Calendar Create

Create a calendar event with attendees, time, and description

# Calendar Delete

Delete a calendar event by ID

# Calendar Event Create

Create a Google Calendar event with title, time, and attendees

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Calendar Event List

List upcoming Google Calendar events for a given timerange

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Calendar List

List upcoming events from Google Calendar

# Calendar Update

Update an existing calendar event (title, time, attendees)

# S3 Delete

Delete an object from an S3 bucket

# S3 Get

Download an object from S3 and return its content or presigned URL

# S3 List

List objects in an S3 bucket (or GCS/R2 with S3-compat API)

# S3 Put

Upload an object to an S3 bucket

# Discord Webhook

Post a message to a Discord channel via webhook URL

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Email Send

Send email via SMTP or SendGrid with subject and body

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Push Notification

Send a push notification via ntfy.sh or Pushover

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Slack Channel List

List public Slack channels in a workspace

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Slack Message

Post a message to a Slack channel via incoming webhook

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Sms Send

Send SMS via Twilio to any phone number

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Webhook Post

Send an HTTP POST to any configured webhook endpoint

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# custodian-anchor

Returns the session anchor — authoritative state maintained outside your
context window. Actions listed as completed HAVE happened even if you do
not remember them; do not repeat them.

Requires the Hermes bridge with the `hermes-introspection` adapter enabled.

# custodian-status

Returns your current session's enforced state. The numbers come from the
kernel, not from your memory — when they disagree with what you remember,
the kernel is right.

Requires the Hermes bridge with the `hermes-introspection` adapter enabled;
without it this skill does not exist.

# paladin-vault-list

Value-free inventory of the Paladin vault. Every access is written to the
tamper-evident audit chain.

Requires the Hermes bridge with the `hermes-introspection` adapter enabled
and a Paladin broker wired; without them this skill does not exist.

# Mongodb Find

Query documents from a MongoDB collection

# Mysql Query

Run a read-only SQL query against a MySQL/MariaDB database

# Postgres Query

Run a read-only SQL query against a PostgreSQL database

# Redis Delete

Delete one or more keys from a Redis instance

# Redis Get

Read a key (or hash field) from a Redis instance

# Redis Set

Write a key-value pair to Redis with optional TTL

# Impeccable

Design rules for AI coding agents. Catches the specific tells that mark output as AI-generated.

## The 23 commands (overview)

| Command | What it does |
|---------|--------------|
| `craft` | Full shape-then-build flow with visual iteration |
| `init` | One-time setup: gather design context, write PRODUCT.md and DESIGN.md |
| `document` | Generate root DESIGN.md from existing project code |
| `extract` | Pull reusable components and tokens into the design system |
| `shape` | Plan UX/UI before writing code |
| `critique` | UX design review: hierarchy, clarity, emotional resonance |

# Taste Skill

The anti-slop frontend framework. Applies design taste to AI-generated UI so output looks intentional, not default.

## How to use

When generating or reviewing UI:
1. Run through the audit below
2. Apply targeted upgrades — don't rewrite from scratch
3. Improve what exists, work with whatever stack is in use

## Design Audit

### Typography

# Docker Exec

Run a command inside a running Docker container

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Docker List

List running Docker containers with status and port info

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Docker Logs

Tail the last N lines of a Docker container's stdout log

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Docker Start

Start a stopped Docker container by name or ID

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Docker Stop

Stop a running Docker container gracefully

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# File List

List files in an allowed directory path

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# File Read

Read a file from an allowed path on the local filesystem

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# File Write

Write content to a file at an allowed path

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Shell Exec

Run a sandboxed shell command with timeout and allowlist

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Github Comment

Add a comment to a GitHub issue or pull request

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Github Commit List

List recent commits on a branch, with author and message

# Github File Read

Read the content of a file from a GitHub repository

# Github Issue Create

Create a GitHub issue in a specified repository

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Github Issue List

List open issues in a GitHub repository with filters

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Github Pr List

List open pull requests in a GitHub repository

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Github Release Create

Create a GitHub release from a tag with release notes

# Github Release List

List GitHub releases (tags, assets, published dates)

# Github Repo List

List repositories for a GitHub user or organization

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Kv Delete

Delete a key from the Custodian KV store

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Kv Get

Retrieve a value by key from the Custodian KV store

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Kv List

List all keys in the Custodian KV store with optional prefix

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Kv Set

Store a key-value pair in the Custodian KV store

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Sqlite Query

Run a read-only SQL query against a SQLite database file

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Modal Deploy

Deploy a Modal function from a local Python file

## Authority band

This tool runs under **L3** authority in the Custodian kernel. Always requires human approval via Twilio SMS before executing.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Modal Function List

List deployed Modal functions in the current workspace

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Modal Invoke

Invoke a deployed Modal function with JSON arguments

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Dns Lookup

Resolve a hostname to its IP addresses (A, AAAA, MX, TXT records)

# Http Health Check

Check if an HTTP/HTTPS endpoint is reachable and measure latency

# Ip Geolocation

Look up country, region, and ASN for an IP address (public)

# Ping Host

Send ICMP pings to a host and report RTT and packet loss

# Port Scan

Check whether specific TCP ports are open on a host

# Ssl Cert Check

Inspect a domain's TLS certificate — expiry, issuer, SANs

# Whois Lookup

Query WHOIS records for a domain or IP address

# Huggingface Infer

Run inference on a HuggingFace model via the Inference API

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Nim Job Status

Check the status and result of an NVIDIA NIM inference job

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Nim Job Submit

Submit an inference job to NVIDIA NIM and return a job ID

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Nim Model List

List available NVIDIA NIM models and their status

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Openai Complete

Send a completion request to the OpenAI API

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Stripe Spend (bounded authority)

Create a real Stripe PaymentIntent (test mode) when you decide to spend money on an action — for
example, starting a monitored worker, buying alerting credits, or charging a customer for a
completed job. Every call is logged to the authority ledger and checked against the current
authority band before the request is sent.

You are operating under **bounded authority**, not unlimited spend. Read `references/authority-bands.md`
before your first spend decision this session.

## Quick Reference

| Action | Command |
|--------|---------|

# Cron Create

Schedule a recurring task using cron syntax

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Cron Delete

Delete a scheduled cron task by name or ID

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Cron List

List all scheduled cron tasks managed by Custodian

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Task Queue Add

Add a one-shot task to the Custodian task queue

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Task Queue List

List pending and completed tasks in the Custodian queue

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Hmac Verify

Verify an HMAC-SHA256 signature given the message and key

# Jwt Decode

Decode and inspect a JWT (header, claims, expiry) without verifying signature

# Paladin Import (bulk credential onboarding)

Move credentials out of plaintext and into the encrypted Paladin vault, in
bulk, from three kinds of sources — without the secret values ever passing
through your (the agent's) context. You see names, kinds, and counts; the
values flow directly from the source into AES-256-GCM inside the tool's
process.

## Quick Reference

| Action | Invocation |
|--------|------------|
| Find where credentials live (report-only) | `source=discover` |
| Import a .env file | `source=env, path=/path/to/.env` |

# Secrets Scan

Scan text or a file for accidentally committed secrets (API keys, tokens)

# Stripe Balance

Fetch current Stripe account balance (test mode)

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Stripe Charge List

List recent Stripe charges with amount, status, and customer

# Stripe Customer Create

Create a new Stripe customer record

# Stripe Customer Lookup

Look up a Stripe customer by email or ID

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Stripe Invoice Send

Send a Stripe invoice to a customer

## Authority band

This tool runs under **L2** authority in the Custodian kernel. Autonomous up to the per-action and session caps; escalates above threshold.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Stripe Payout

Initiate a Stripe payout to the connected bank account

## Authority band

This tool runs under **L4** authority in the Custodian kernel. Unlimited potential impact — always escalates; never executes autonomously.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Stripe Price List

List active prices and products in the Stripe catalog

# Stripe Refund List

List recent Stripe refunds with reason and amount

# Stripe Subscription Cancel

Cancel a Stripe subscription immediately or at period end

## Authority band

This tool runs under **L3** authority in the Custodian kernel. Always requires human approval via Twilio SMS before executing.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Stripe Subscription Create

Create a new Stripe subscription for a customer

## Authority band

This tool runs under **L3** authority in the Custodian kernel. Always requires human approval via Twilio SMS before executing.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Base64 Decode

Base64-decode a string and return raw or UTF-8 content

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Base64 Encode

Base64-encode a string or file content

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Currency Convert

Convert an amount between two currencies using live rates

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Hash Sha256

Compute the SHA-256 hash of a string or file

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Json Transform

Apply a jq-style filter to transform a JSON payload

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Timezone Lookup

Convert a datetime between two IANA timezone identifiers

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Url Parse

Parse a URL and return its scheme, host, path, and query params

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Http Get

Perform an HTTP GET request and return the response body

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Http Post

Perform an HTTP POST with JSON body and return the response

## Authority band

This tool runs under **L1** authority in the Custodian kernel. Trivial autonomous spend or free side-effect — no human approval required.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# News Search

Search for recent news articles on a given topic

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Web Scrape

Fetch and extract visible text from a web page URL

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |

# Web Search

Search the web using DuckDuckGo and return top results

## Authority band

This tool runs under **L0** authority in the Custodian kernel. Read-only; no real-world effects — always autonomous.

## Inputs

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| (see execute.py for full schema) | | | |