Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Charlesmpc/by2kb --skill install-by2kbgit clone --depth 1 https://github.com/Charlesmpc/by2kbWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/charlesmpc/by2kb/install-by2kb)<a href="https://agentmods.dev/skills/charlesmpc/by2kb/install-by2kb"><img src="https://agentmods.dev/badge/skills/charlesmpc/by2kb/install-by2kb/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/charlesmpc/by2kb/install-by2kb"><img src="https://agentmods.dev/badge/skills/charlesmpc/by2kb/install-by2kb.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00037 | $0.01119 |
| Opus 5.5 | $0.00015 | $0.00448 |
| Sonnet 5.5 | $0.00007 | $0.00224 |
| Haiku 4.5 | $0.00004 | $0.00112 |
Grade A, and why
install-by2kb scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Set up by2kb for Hermes
This plugin is already installed. Set up its separate CLI on the same machine and
under the same user as the Hermes gateway. Do not copy or replace the plugin, clone
the repository, or run by2kb agent install hermes from this workflow.
Inspect first
- Check
by2kb version, Python 3.12+,ffmpeg,ffprobe, and the available package manager. This plugin's staged request-file workflow requires by2kb 0.5.3 or newer; do not assume an arbitrary future version is compatible without checking its release notes. - Check whether by2kb was installed with
pipx listoruv tool list; use that manager for upgrades. Do not create a second installation with another manager. - A missing command can be a PATH problem. On Windows use
Get-Commandand inspectuv tool dir --binorpy -m pipx environmentwhen applicable. The gateway may need a restart to inherit a repaired PATH.BY2KB_COMMANDmay name an absolute executable path (not a shell command with arguments). - Treat
BY2KB_HOME(default~/.by2kb), its.env, database, models, custom Skills, and the knowledge-base directory as user-owned. Do not display secret values. - If configuration already exists, run
by2kb doctor --jsonand repair only the reported problems. Do not run init or change providers just to make checks pass.
First installation
Explain the dependencies and obtain agreement before installing. Prefer an already available package manager; either of these installs an isolated CLI, not into Hermes:
pipx install "by2kb[asr-whisper,youtube]" --python 3.12
# Or, if uv is the chosen manager:
uv tool install --python 3.12 "by2kb[asr-whisper,youtube]"
Install ffmpeg/ffprobe using the platform's trusted package manager if missing.
YouTube also needs matching yt-dlp EJS scripts (included by the CLI's default
dependencies) and Deno 2.3+ or Node.js 22+. Reuse an existing supported runtime;
explain and obtain agreement before installing a missing runtime. doctor --json
checks both. An explicit [sources.yt_dlp] js_runtime / js_runtime_path can expose
an existing executable outside the gateway PATH without replacing configuration.
No browser or account Cookie is required to install JS support. Do not treat JS
readiness as proof that YouTube will permit anonymous playback.
If a real video requests authentication, use the optional platform sign-in guidance
in by2kb:video-to-knowledge: obtain consent for a specific local browser session,
do not require a Cookie-export extension, never expose secrets, and preserve all
existing configuration. Do not install a browser or PO Token service by default.
Confirm the knowledge-base location, then, only for a new configuration:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +4 lines a45397e5e8b2
- 8d ago Changed · +7 lines 1a457224e2d5
- 1mo ago Changed · +1 lines · -8 tokens per session 7bd5352115db
- 1mo ago First seen · 73 lines · 45 tokens per session scan A 4e9634358349
install-by2kb is a skill published in the GitHub repository Charlesmpc/by2kb (156 stars, last pushed 6d ago), licensed MIT. It adds 37 tokens to every session and 1,119 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
larksnap-fetch
A bridge for downloading Feishu/Lark documents or ordinary webpages into local files, with options such as Markdown, HTML, or PDF. Feishu, also called Lark, is a workplace collaboration platform.
docs-scraper
A tool-assisted method for downloading an entire technical documentation website as local Markdown files. It first checks whether the site offers ready-made Markdown or text bundles before crawling pages.
bili-note
A tool for turning Bilibili videos and posts into readable Markdown notes. Bilibili is a Chinese video and social-content platform; the tool can work with subtitles, article text, images, code, and selected comments.
Folio Content
How to write page markdown that Folio renders correctly and that stays readable as plain markdown on GitHub — syntax cheat sheet, page templates, and anti-patterns.
youtube-fetcher
Retrieve YouTube transcripts and subtitles, summarize or analyze what was said, or save an Obsidian-ready Markdown knowledge-base note with captions, creator metadata, chapters, language, and source provenance. Use for a YouTube URL or video ID when the request needs spoken content or an archival note. A bare YouTube…
Folio Forms
Build and change Folio forms (kind form) with createform / updateform — fields, types, the paired data table where the answers land, public forms.