Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/hanzhcn/laohan-skillsnpx agentmods add skills/hanzhcn/laohan-skills/laohan-sousuoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-sousuo)<a href="https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-sousuo"><img src="https://agentmods.dev/badge/skills/hanzhcn/laohan-skills/laohan-sousuo/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-sousuo"><img src="https://agentmods.dev/badge/skills/hanzhcn/laohan-skills/laohan-sousuo.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00179 | $0.01461 |
| Opus 5.5 | $0.00072 | $0.00584 |
| Sonnet 5.5 | $0.00036 | $0.00292 |
| Haiku 4.5 | $0.00018 | $0.00146 |
Grade A, and why
laohan-sousuo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.
老韩搜索(laohan-sousuo)
联网查证引擎:不确定的技术问题先查再判断,结论必须带来源标注。
为什么存在
Jeffrey 观察(2026-10-02 钉死):开发中经常不主动查教程、凭记忆做判断,经常出错,过去靠人工提醒"上网查下教程"。本 skill 把"先查再说"固化为默认行为。配套条款在 ~/.claude/rules/workflow.md「技术断言前置查证」——rules 管"必须查"(每次会话无条件加载),本 skill 管"怎么查"。
优先级与让位
普通搜索类意图优先命中本 skill,由本 skill 内部路由工具:
| 意图 | 归属 |
|---|---|
| 上网搜 / 搜索 / 搜教程 / 查心得 / 查证 / 查一下怎么用 | 本 skill(其他搜索 skill 让位) |
| 装软件 / 配置工具(claude-mem、ECC 等 5 个本地教程) | laohan-jiaocheng |
| AI 资讯 / 日报 / 热点 | aihot |
| 平台内容下载、评论、博主数据 | laohan-xiazai |
| 视频号下载、JS 渲染/反爬抓取降级 | 见 ~/.claude/rules/cli-tools.md 总路由 |
三路检索(按问题类型选路线)
| 问题类型 | 路线 | 动作 |
|---|---|---|
| API 用法 / 配置语义 / 参数含义 | 官方文档 | anysearch search(--content_types doc)→ 命中官方 URL → anysearch extract 读原文 |
| 报错归因 / 版本兼容 / "为什么不行" | GitHub issue | gh search issues "关键词" --repo owner/repo、gh api repos/:owner/:repo/releases;issue 比搜索引擎准(2026-09-30 实证:WebSearch 自我怀疑误判,gh 逐一核验 9 个 issue 全真实) |
| "别人怎么解决" / 踩坑心得 / 最佳实践 | 社区心得 | anysearch(含 reddit/blog 结果)→ agent-reach(平台)→ WebFetch 读原文 |
问题跨类时(如"这个 API 为什么报错")issue + 官方文档并查,交叉印证。
工具链与降级
-
anysearch(默认引擎):
python3 ~/.claude/skills/anysearch/scripts/anysearch_cli.py search "query" --max_results 5 # 批量:batch_search --queries '[{"query":"q1"},{"query":"q2"}]' # 读正文:extract "URL"端点无关(本地 CLI 调 api.anysearch.com),不占智谱搜索额度;huo 端点 WebSearch 403 时唯一可用通用搜索(2026-10-02 实测)。已加载 anysearch skill 时优先用其 runtime.conf 配置的命令。
-
WebSearch 原生:anysearch 失败/限额时降级。注意:cc 端点=智谱 web_search_prime 后端(占智谱额度,常 429 code 1310);huo 端点 403 不可用。2026-10-03 起
pre:websearch-to-anysearchhook(10 目录)拦截 WebSearch 并在 deny reason 里注入 anysearch 命令——被拦即按 reason 里的命令跑 anysearch,不要重试 WebSearch(见~/.claude/rules/custom-hooks.md)。 -
gh:GitHub 相关问题直接用,不经过搜索引擎。
-
WebFetch / anysearch extract:已知 URL 读正文。
输出合同(强制)
每次查证输出必须含:
- 结论:直接回答问题
- 来源标注:
(verified: URL)(沿用 anti-patterns #18 格式);无标注 = 违规 - 版本/日期:来源的版本号或发布日期——API 随版本变,旧教程会骗人
- 记忆冲突:查证结果与旧记忆冲突时明说"记忆是错的,实际是 X"
- 查不到:如实说"未查到可靠来源,以下是推断",禁止推断冒充查证
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago Changed 52ecc5267350
- 14d ago First seen · 81 lines · 179 tokens per session scan A 1b677e6feee8
laohan-sousuo is a skill published in the GitHub repository hanzhcn/laohan-skills (13 stars, last pushed yesterday), licensed MIT. It adds 179 tokens to every session and 1,461 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-03.
Other skills, from other repositories
douyin-upload
A workflow for using the sau command-line tool to log in to Douyin, the Chinese short-video platform, check account cookies, and publish videos or image-and-text posts.
kuaishou-upload
A workflow for using the sau command-line tool to log in to Kuaishou, a Chinese social media platform, check account cookies, and publish videos or image-and-text posts.
xiaohongshu-upload
A workflow for using the sau command-line tool to log in to Xiaohongshu, a Chinese social media platform, check account cookies, and publish videos or image-and-text posts.
officecli-word-form
Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document'…
officecli-data-dashboard
Use this skill to build a multi-element Excel dashboard — Dashboard sheet on open, multiple formula-driven KPI cards, multiple charts, sparklines, and conditional formatting — from CSV or tabular input. Trigger on: 'dashboard', 'KPI dashboard', 'analytics dashboard', 'executive dashboard', 'metrics dashboard', 'CSV to…
invest
First-time fork users: run the invest-setup skill first to initialize. The main flow lives in this skill (the AI agent uses the CLI/MCP to view the portfolio / run the committee / replay decision history). The Web GUI has been retired (2026-07) — every capability is exposed via CLI subcommands / MCP tools. The backend…