Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add apexcheng/yingdao-xbot-ai-agent --skill rpa-practicesgit clone --depth 1 https://github.com/apexcheng/yingdao-xbot-ai-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/apexcheng/yingdao-xbot-ai-agent/rpa-practices)<a href="https://agentmods.dev/skills/apexcheng/yingdao-xbot-ai-agent/rpa-practices"><img src="https://agentmods.dev/badge/skills/apexcheng/yingdao-xbot-ai-agent/rpa-practices/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/apexcheng/yingdao-xbot-ai-agent/rpa-practices"><img src="https://agentmods.dev/badge/skills/apexcheng/yingdao-xbot-ai-agent/rpa-practices.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00057 | $0.00503 |
| Opus 5.5 | $0.00023 | $0.00201 |
| Sonnet 5.5 | $0.00011 | $0.00101 |
| Haiku 4.5 | $0.00006 | $0.00050 |
Grade A, and why
rpa-practices scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
影刀开发经验与模板
本 Skill 汇总影刀实际开发经验，分技术专题与跨领域专项。按任务需要读取对应参考文件，不要求简单改动加载全部内容；API 签名仍查正式 xbot API 文档，常驻开发约束仍以当前项目 AGENTS.md 为准。
按场景读取
| 场景 | 必须按需阅读的材料 |
|---|---|
| Web 自动化：响应优先取数、后台异步导出任务绑定、SPA 动态元素失效 | 网页实践 |
| 中文业务上下文日志：输出格式、关键节点、异常记录与示例 | 日志实践 |
| 钉钉机器人业务通知：排版、分组、@ 规则及真实示例 | 钉钉通知实践 |
| 跨轮次状态示例、失败重试判断、业务结果与通知结果区分 | 跨轮次处理状态与重试 |
| 跨数据、网页、Excel / WPS、接口或环境的复杂故障，按实际证据分层排查 | 影刀编码版通用排错 |
使用边界
- 表格更新的独立 Sheet 失败继续、最后统一保存等规则见 spreadsheet-operations；完整业务项目案例统一从知识库
reference-projects/README.md按需检索，本 Skill 不再保存完整项目 Demo。 - 钉钉通知的文案与排版从上述经验页读取；发送消息的函数、参数、返回值仍查
xbot-api-docs/的对应正式事实页。 - 通用排错只在局部 API 排错不足以解决或故障跨层时使用，不把全部检查清单强加给普通小改。
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed 3fe09c6cd2a1
- 3d ago Changed · -3 lines · -14 tokens per session 9c31e3564538
- 8d ago Changed · +1 lines · +4 tokens per session d5a6249383f6
- 9d ago First seen · 27 lines · 67 tokens per session scan A d71e4bf8b641
rpa-practices is a skill published in the GitHub repository apexcheng/yingdao-xbot-ai-agent (37 stars, last pushed today), licensed MIT. It adds 57 tokens to every session and 503 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-09.
Other skills, from other repositories
gog-workspace
Use the gog CLI for Google Workspace tasks across Gmail, Calendar, Drive, Docs, Sheets, Contacts, and related services. Use when the user asks to check email, search Gmail, inspect calendar events, find Drive files, read Docs or Sheets, or manage Google Workspace data through gog.
xlsx
Create and edit Excel .xlsx workbooks (sheets, cells, formulas, formatting) via Python openpyxl. Use to generate spreadsheets or write/update cells. Reading is via os.fs.readdocument.
excel-spreadsheets
Create, modify, and manage Excel spreadsheets.
xlsx-official
Builds, edits, cleans, and inspects spreadsheet files (.xlsx, .xltx, .csv, .tsv) when the file is the deliverable or the record being changed: financial and operating models with live formulas, formula-driven summaries, template fills, cell and row patches, messy-data repair, sheet-to-CSV or PDF export, formula…
file-download
Download files from websites, save PDFs, and read downloaded content. Trigger when the user asks to: download a file, save a PDF, export a document, fetch a file from a URL, grab a report, download and read a PDF, or save page content as a file.
openclaw-rpa
Record browser, Excel, Word & API actions once — replay without the LLM: faster, cheaper, no hallucinations. github.com/laziobird/openclaw-rpa . Supports computer-use automation: web clicks/fill/extract, local Excel (.xlsx via openpyxl), Word (.docx via python-docx), HTTP API calls (httpx GET/POST), and auto-login…