Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/DailybotHQ/deepworkplan-skillnpx agentmods add skills/dailybothq/deepworkplan-skill/envWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dailybothq/deepworkplan-skill/env)<a href="https://agentmods.dev/skills/dailybothq/deepworkplan-skill/env"><img src="https://agentmods.dev/badge/skills/dailybothq/deepworkplan-skill/env/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dailybothq/deepworkplan-skill/env"><img src="https://agentmods.dev/badge/skills/dailybothq/deepworkplan-skill/env.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00150 | $0.02688 |
| Opus 5.5 | $0.00060 | $0.01075 |
| Sonnet 5.5 | $0.00030 | $0.00538 |
| Haiku 4.5 | $0.00015 | $0.00269 |
Grade A, and why
dailybot-env scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
metadata: {"openclaw":{"emoji":"🔑","homepage":"https://dailybot.com","requires":{"anyBins":["dailybot","curl"]},"primaryEnv":"DAILYBOT_API_KEY","install":[{"id":"cli-install-script","kind":"download","url":"https://cli. How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Dailybot per-repo API key override (env.json)
Requires
dailybot-cli >= 3.9.0(the skill-pack baseline). Thedailybot envcommand group and.dailybot/env.jsonloader shipped in 3.7.0 and are included in this floor. Ifdailybot --versionreports below 3.9.0, ask the developer to rundailybot upgradebefore continuing. See../SKILL.md§ Required Dailybot CLI version.
This sub-skill lets an agent configure and manage <repo>/.dailybot/env.json — an opt-in, gitignored file that pins API keys + URL overrides per environment (live, local, staging) for the enclosing repo. When a profile is active, it overrides DAILYBOT_API_KEY, config.json, and the login Bearer session only for that repo.
The full workflow, schema, security rules, and worked examples live in
../shared/env-json.md. Read it first — it is the single source of truth. This file is the routing entry-point and quick-reference.
When to use
Route here when the developer says any of:
- "I want a local API key just for this project."
- "How do I test against staging without breaking my prod login?"
- "Can I be in org A in this repo and org B in another repo?"
- "Set up per-project Dailybot credentials for me."
- "Switch this repo to my localhost Dailybot instance."
- "Keep production login for reports but test Plan locally."
- "Switch env profiles / live vs testing."
Do not route here when:
- The developer is in CI. Use
DAILYBOT_API_KEYas an env var — leaves no on-disk secret. - The developer wants team-shared identity (agent name, default metadata). That's
.dailybot/profile.json— see../shared/repo-profile.md. - The developer has one Dailybot org and a working login session.
dailybot login+ global config is simpler.
Pre-flight — before writing anything
-
Confirm the CLI meets the pack baseline (>= 3.9.0):
dailybot env --help >/dev/null 2>&1 || { echo "This feature requires dailybot-cli >= 3.9.0. Run: dailybot upgrade" >&2 exit 1 }
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed 9ea3b66cde23
- 4d ago Changed a9b75e589427
- 5d ago Changed 7f14070f1066
- 10d ago Changed 6a532e263e61
- 15d ago First seen · 192 lines · 150 tokens per session scan A a87d420135ab
dailybot-env is a skill published in the GitHub repository DailybotHQ/deepworkplan-skill (23 stars, last pushed 3d ago), licensed MIT. It adds 150 tokens to every session and 2,688 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-02.
Other skills, from other repositories
gsd-plan-review-convergence
Cross-AI plan convergence - replan until review concerns are resolved.
gsd-ns-manage
config workspace | workstreams thread update ship inbox.
gsd-validate-phase
Retroactively audit and fill Nyquist validation gaps for a completed phase.
dependency-upgrade
Plan, batch, and verify dependency upgrades safely. Triages outdated packages into risk tiers, upgrades in order (dev/minor/patch first, runtime majors last), verifies each batch, and produces an auditable commit sequence. Use when asked to "upgrade deps", "bump packages", "update nodemodules", "fix vulnerabilities"…
forensics
Post-mortem a failed GSD auto-mode run. Traces symptom to root cause via .gsd/ activity, journal, metrics, and lock artifacts, producing a filing-ready bug report with file:line refs and a fix suggestion. Use when asked to "forensics", "post-mortem", "why did auto-mode fail", "trace the stuck loop", "debug the crash"…
review
Review code changes for security, performance, bugs, and quality. Reviews staged changes, unstaged changes, specific commits, or PR-ready diffs.