Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Charlesmpc/by2kb --skill install-by2kbgit clone --depth 1 https://github.com/Charlesmpc/by2kbWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/charlesmpc/by2kb/install-by2kb)<a href="https://agentmods.dev/skills/charlesmpc/by2kb/install-by2kb"><img src="https://agentmods.dev/badge/skills/charlesmpc/by2kb/install-by2kb/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/charlesmpc/by2kb/install-by2kb"><img src="https://agentmods.dev/badge/skills/charlesmpc/by2kb/install-by2kb.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00045 | $0.00875 |
| Opus 5 | $0.00023 | $0.00438 |
| Sonnet 5 | $0.00009 | $0.00175 |
| Haiku 4.5 | $0.00005 | $0.00088 |
Grade A, and why
install-by2kb scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 73 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Install by2kb
Install by2kb as an independent CLI package, then install its adapter into the active Agent. Do not clone or inspect the by2kb source repository as an installation method.
Before changing the system
- Confirm the target machine is controlled by the user.
- Check for Python 3.12+,
pipx,ffmpeg,ffprobe,by2kb, and the Agent host. - If by2kb already has configuration, do not replace it. Run
by2kb doctor --json, explain any failures, and preserve the current ASR and knowledge-base choices unless the user asks to change them.
Default: local Agent installation
Use this path unless the user explicitly requests cloud ASR:
- Install from PyPI with
pipx install "by2kb[asr-whisper,youtube]". - Create a cloud-free Agent configuration with
by2kb init --preset agent-local. This selects local faster-whisper, Bilibili and YouTube sources, Agent-hosted summarization, and a local Markdown library. - Before downloading a Whisper model, tell the user its name and that the download
can be large. Continue only after the user agrees, then run
by2kb models install. - For Hermes, run
by2kb agent install hermes, followed byby2kb doctor --json. - Restarting a running Agent can interrupt the current conversation. Ask before restarting it, then verify the gateway and ask the user to send one test video URL.
If pipx reports that by2kb is already installed, try pipx upgrade by2kb. If an old
direct-URL installation remains pinned or its virtual environment is broken, explain
the problem and ask before uninstalling and reinstalling it. Never delete a pipx
environment manually without explicit user approval.
Upgrade without losing personalization
Treat $BY2KB_HOME (normally ~/.by2kb) and the configured knowledge-base folder as
user-owned state. An upgrade must preserve config.toml, .env, by2kb.db, downloaded
models, custom Skills, and every knowledge artifact.
- Inspect
by2kb version,pipx list, andby2kb doctor --jsonfirst. - Run
pipx upgrade by2kb. Do not runby2kb init,by2kb init --force, or rewrite configuration during an ordinary upgrade. - Refresh only the managed Hermes adapter with
by2kb agent install hermes --force. - Run
by2kb doctor --jsonagain and report any migration or restart requirement.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 73 lines · 45 tokens per session scan A 4e9634358349
install-by2kb is a skill published in the GitHub repository Charlesmpc/by2kb (5 stars, last pushed today), licensed MIT. It adds 45 tokens to every session and 875 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
youtube-fetcher
Retrieve YouTube transcripts and subtitles, summarize or analyze what was said, or save an Obsidian-ready Markdown knowledge-base note with captions, creator metadata, chapters, language, and source provenance. Use for a YouTube URL or video ID when the request needs spoken content or an archival note. A bare YouTube…
larksnap-fetch
A bridge for downloading Feishu/Lark documents or ordinary webpages into local files, with options such as Markdown, HTML, or PDF. Feishu, also called Lark, is a workplace collaboration platform.
bili-note
A tool for turning Bilibili videos and posts into readable Markdown notes. Bilibili is a Chinese video and social-content platform; the tool can work with subtitles, article text, images, code, and selected comments.
reduce
Extract structured knowledge from source material. Comprehensive extraction is the default — every insight that serves the domain gets extracted. For domain-relevant sources, skip rate must be below 10%. Zero extraction from a domain-relevant source is a BUG. Triggers on "/reduce", "/reduce [file]", "extract…
verify
Combined verification — recite (description quality via cold-read prediction) + validate (schema compliance) + review (health checks). Use as a quality gate after creating notes or as periodic maintenance. Triggers on "/verify", "/verify [note]", "verify note quality", "check note health".
bilibili-to-doc
A workflow for turning a Bilibili video—a video-hosting site popular in China—into a structured Markdown document using its Chinese subtitles.