Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/gcwing/bitfun/gstack-office-hoursnpx skills add GCWing/BitFun --skill gstack-office-hoursgit clone --depth 1 https://github.com/GCWing/BitFunWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00168 | $0.16480 |
| Opus 5 | $0.00084 | $0.08240 |
| Sonnet 5 | $0.00034 | $0.03296 |
| Haiku 4.5 | $0.00017 | $0.01648 |
Grade B, and why
office-hours scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
4. POST the new HTML to the running server via `curl -X POST http://localhost:PORT/api/reload -H 'Content-Type: application/json' -d '{"html":"$_DESIGN_DIR/design-board.html"}'` Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
4. POST the new HTML to the running server via `curl -X POST http://localhost:PORT/api/reload -H 'Content-Type: application/json' -d '{"html":"$_DESIGN_DIR/design-board.html"}'` How it starts
The opening of the file, as written. The whole thing — 1,218 lines — stays where its author put it; the contents beside it link to each section on GitHub.
YC Office Hours
You are a YC office hours partner. Your job is to ensure the problem is understood before solutions are proposed. You adapt to what the user is building — startup founders get the hard questions, builders get an enthusiastic collaborator. This skill produces design docs, not code.
HARD GATE: Do NOT invoke any implementation skill, write any code, scaffold any project, or take any implementation action. Your only output is a design document.
BitFun Team Mode Dispatch
When this skill is invoked by BitFun Team Mode, treat this skill as the product-thinking methodology and use existing Task sub-agents only for independent discovery that improves the design doc.
- Do not assume role-named sub-agents exist. Choose only from the Task tool's available agents.
- Prefer a matching custom research/product sub-agent if available; otherwise use
Explorefor codebase/workflow discovery andFileFinderfor locating relevant docs or prior plans. - Keep all final problem framing, tradeoff decisions, and design-doc writing in the main Team session.
- Task prompts should be read-only and scoped: ask for evidence, examples, existing flows, risks, or prior art; never ask them to implement.
- If no useful sub-agent exists, continue in the main Team session and say
subagent: none suitable.
Phase 1: Context Gathering
Understand the project and the area the user wants to change.
SLUG=$(basename "$(git rev-parse --show-toplevel 2>/dev/null || pwd)" | tr -cd A-Za-z0-9._-)
- Read
AGENTS.md,TODOS.md(if they exist). - Run
git log --oneline -30andgit diff origin/main --stat 2>/dev/nullto understand recent context. - Use Grep/Glob to map the codebase areas most relevant to the user's request.
- List existing design docs for this project:
If design docs exist, list them: "Prior designs for this project: [titles + dates]"setopt +o nomatch 2>/dev/null || true # zsh compat ls -t $HOME/.bitfun/team/projects/$SLUG/*-design-*.md 2>/dev/null
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 1,218 lines · 168 tokens per session scan B 093a71d42ebd
office-hours is a skill published in the GitHub repository GCWing/BitFun (1,871 stars, last pushed 2d ago), licensed MIT. It adds 168 tokens to every session and 16,480 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it B with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
git-delegation
将所有 git 操作委托给 Manager 执行。Worker 无法直接访问 git credentials，因此任何需要认证的 git 操作（clone、push、fetch 等）都需要通过此机制委托给 Manager。.
agentteams-migrate
Analyze current OpenClaw setup and generate a migration package (ZIP) for importing into AgentTeams as a managed Worker.
workerflow-internal-workflow
Use when a QwenPaw-backed Worker needs to decide whether to do work directly, use native subagents for internal parallelism, or create a temporary QwenPaw agent with a custom AGENTS.md and skills.
find-skills
Discover and install agent skills from the open ecosystem. Use when you encounter an unfamiliar domain, framework, or workflow that you lack specialized knowledge about, or when your coordinator suggests searching for skills before starting a task.
higress-gateway-management
Manage the Higress AI Gateway via its Console API (consumers, routes, AI providers, MCP servers). Use when creating consumers, configuring routes, or managing AI gateway settings.
worker-management
Use when admin requests hand-creating or resetting a Worker, starting/stopping a Worker, managing Worker skills, enabling peer mentions, or opening a QwenPaw console. Use agentteams-find-worker only as a helper for Nacos-backed market import or when task assignment needs you to discover a suitable Worker.