Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add apexcheng/yingdao-xbot-ai-agent --skill xbot-visual-flow-readergit clone --depth 1 https://github.com/apexcheng/yingdao-xbot-ai-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/apexcheng/yingdao-xbot-ai-agent/xbot-visual-flow-reader)<a href="https://agentmods.dev/skills/apexcheng/yingdao-xbot-ai-agent/xbot-visual-flow-reader"><img src="https://agentmods.dev/badge/skills/apexcheng/yingdao-xbot-ai-agent/xbot-visual-flow-reader/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/apexcheng/yingdao-xbot-ai-agent/xbot-visual-flow-reader"><img src="https://agentmods.dev/badge/skills/apexcheng/yingdao-xbot-ai-agent/xbot-visual-flow-reader.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00072 | $0.00621 |
| Opus 5 | $0.00036 | $0.00311 |
| Sonnet 5 | $0.00014 | $0.00124 |
| Haiku 4.5 | $0.00007 | $0.00062 |
Grade A, and why
xbot-visual-flow-reader scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
xbot Visual Flow Reader
读取已有影刀可视化编排项目，输出可追溯的流程地图。本 Skill 默认只读；用户只要求理解或排错时，不修改 .pybx、package.json、元素库或图像库。
先做项目盘点
在真实项目根目录执行：
python .agents/skills/xbot-visual-flow-reader/scripts/inspect_visual_project.py .
脚本只读取结构元数据，不输出 package.json 中的变量值，也不解码 .pybx。根据输出确认：
startup和所有 flow 的name/filename/kind/groupName。- Visual flow 对应
.pybx是否存在，Code flow 对应.py是否存在。 - Code flow 的公开函数、参数和 import 关系。
- 全局变量名称、元素库和图像库条目数。
证据顺序
package.json：确认启动流、flow 类型和文件映射。- Code flow
.py：确认main(args)、公开函数、参数与调用边界。 selectorsV2.xml/imagesV2.xml/package.py：确认资源名称和对象来源。- Visual flow
.pybx：这是影刀维护的二进制流程文件，不把它当作文本、JSON 或 Python 猜测内部步骤。 - 需要步骤级逻辑时，使用当前环境可用的影刀 Studio 只读检视能力；先从已安装工具的 help 发现真实命令，不编造命令、标志或流程 ID。
无法打开 Studio 或没有可读导出时，明确写“未确认 Visual flow 内部步骤”，并请用户提供对应流程截图或可读导出；不根据文件名补全业务逻辑。
输出要求
将结果分成：
- 已确认结构：启动流、Visual / Code flow 列表、实际存在的文件。
- 已确认调用关系：有代码、Studio 或可读导出直接证明的调用。
- 未确认内容：仅能从名称推测或必须运行才能确认的部分。
- 修改风险：启动流、全局变量、元素库、图像库和 Code flow 之间的影响。
不在输出中泄露账号、密码、Token、Cookie、Webhook、客户数据或 package.json 变量值。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 45 lines · 72 tokens per session scan A ba726eb9bbb7
xbot-visual-flow-reader is a skill published in the GitHub repository apexcheng/yingdao-xbot-ai-agent (26 stars, last pushed yesterday), licensed MIT. It adds 72 tokens to every session and 621 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
auto-research
Research uncertain questions with an explicit, user-approved web search or ChatGPT consultation, then present options and wait for implementation approval.
unicli
Comprehensive guide to Uni-CLI — the open Agent-Computer Interface runtime for real software. Trigger when the user needs to fetch data from websites (Twitter, Bilibili, HackerNews, GitHub, Reddit, Bloomberg, Zhihu, WeChat, and hundreds more); interact with news, finance, social, academic, shopping, or video…
unicli-smart-search
Route search queries to the best platform via unicli. Use when searching across websites, social media, tech forums, news, finance, shopping, or academic sources.
unicli-browser
Control broker-owned hidden, existing-Chrome, or remote browser targets with explicit Agent identity, visibility, profile partitions, and lifecycle.
unicli-repair
Evidence-driven repair workflow for a broken Uni-CLI adapter. Trigger on a failed unicli envelope, a quarantined adapter, or an explicit adapter-repair request. Classifies non-source failures, edits only the reported adapter path, and uses the original command as a bounded oracle.
unicli-operate
Compatibility guide for unicli operate. Prefer unicli browser, which now exposes the same operator surface plus broker/session diagnostics.