Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/alibaba/anolisa/install-openclawnpx skills add alibaba/anolisa --skill install-openclawgit clone --depth 1 https://github.com/alibaba/anolisaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/alibaba/anolisa/install-openclaw)<a href="https://agentmods.dev/skills/alibaba/anolisa/install-openclaw"><img src="https://agentmods.dev/badge/skills/alibaba/anolisa/install-openclaw.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00085 | $0.01968 |
| Opus 5 | $0.00043 | $0.00984 |
| Sonnet 5 | $0.00017 | $0.00394 |
| Haiku 4.5 | $0.00009 | $0.00197 |
Grade A, and why
install-openclaw scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 159 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OpenClaw Non-Interactive Setup
Use this skill to turn a user's one-sentence request into a complete local OpenClaw setup. The normal path is one script command: resolve the Alibaba Cloud Model Studio plan, validate the API key/Base URL/model combination with the official anthropic-messages endpoint shape, install Node.js/npm/OpenClaw when needed, write config, install/restart the local gateway service, and verify a real local openclaw agent message through Gateway.
Do not execute openclaw onboard unless the user explicitly asks for interactive setup or asks to skip first-run BOOTSTRAP onboarding. After setup, always tell the user they can run openclaw onboard --skip-bootstrap if they want the first real task to run without the introductory BOOTSTRAP flow. Do not configure DingTalk unless the user provides DingTalk credentials or asks for DingTalk access.
Billing
Map user wording to --billing:
| User says | Use |
|---|---|
| 按量付费, 后付费, DashScope, 百炼 API Key | payg |
| Coding Plan, 订阅 coding, Coding Plan 专属 API Key | coding |
| Token Plan, 团队版, token 订阅 | token |
Do not infer Coding Plan or Token Plan only from a raw API key string. A normal Alibaba Cloud Model Studio/DashScope/百炼 API Key is pay-as-you-go unless the user explicitly says Coding Plan or Token Plan.
Default to --billing payg --region china when the user does not specify billing or region. If the user gives no API key and no usable environment variable, ask for the key and include the matching source URL:
- Pay-as-you-go: https://help.aliyun.com/zh/model-studio/get-api-key
- Coding Plan: https://bailian.console.aliyun.com/cn-beijing/?tab=model#/efm/coding_plan
- Token Plan: https://bailian.console.aliyun.com/?tab=plan#/efm/subscription/overview
Use --region singapore only for pay-as-you-go Singapore. If the user gives a custom Alibaba Cloud compatible endpoint, pass it through with --base-url; otherwise use the billing-specific defaults from the official OpenClaw guide. For deeper billing details, read references/aliyun-model-studio-openclaw.md.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 159 lines · 85 tokens per session scan A c4539064d00e
install-openclaw is a skill published in the GitHub repository alibaba/anolisa (618 stars, last pushed today), licensed Apache-2.0. It adds 85 tokens to every session and 1,968 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
remember-finances
Import bank statements, receipts, and invoices into persistent memory. Extract transactions with amounts, dates, merchants, and categories.
convex-billing
Add Stripe billing/payments to the Convex app via @convex-dev/stripe (checkout + webhook + gating).
finance-data
Get stock quotes, company info, market data, and crypto prices. No API key needed.
beevibe-team-mesh-negotiation
Multi-round negotiation protocol — covers both initiator and peer roles. Use when about to call negotiate(), when receiving a intent block as a peer, or when receiving an 'escalated' sentinel from a blocked respondnegotiate. Covers proposal crafting, counter-strategy, deadlock detection, when to accept early…
beevibe-verify-pr
CI verification before marking a PR-bearing task done. Use BEFORE calling mcpbeevibeupdateprogress(done) on any session whose deliverable is a pull request — including the first dispatch (you opened the PR with gh pr create) and any revision dispatch (you pushed new commits to an existing PR). Watches the PR's…
beevibe-use-repo
You are the child agent inside a fresh Docker sandbox. Borrow the given GitHub repo, produce a real artifact for the goal, and export it. Do not review the repo. The proof is that it works.