Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add hanzhcn/laohan-skills --skill laohan-xiazaigit clone --depth 1 https://github.com/hanzhcn/laohan-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-xiazai)<a href="https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-xiazai"><img src="https://agentmods.dev/badge/skills/hanzhcn/laohan-skills/laohan-xiazai/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hanzhcn/laohan-skills/laohan-xiazai"><img src="https://agentmods.dev/badge/skills/hanzhcn/laohan-skills/laohan-xiazai.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high YARA Match · line 110 YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).Fix: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise.
- medium Data Exfiltration · line 205 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium MCP Rug Pull · line 32 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00360 | $0.05089 |
| Opus 5 | $0.00180 | $0.02544 |
| Sonnet 5 | $0.00072 | $0.01018 |
| Haiku 4.5 | $0.00036 | $0.00509 |
Grade A, and why
laohan-xiazai scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| Jina Reader | `curl -sL "https://r.jina.ai/<url>"` | 通用网页内容提取 | How it starts
The opening of the file, as written. The whole thing — 247 lines — stays where its author put it; the contents beside it link to each section on GitHub.
从互联网拿内容
按平台选择正确方法，一步到位。先看平台路由表，再读对应 reference 文件。平台方法不行时，按品类降级链逐层深入——每层解决不同问题，能浅不深。
核心理念
能浅不深——先用最轻的方法（HTTP 请求），不行再加重量（浏览器渲染→反检测→AI 操作→手动控制）。成本递增，每层解决不同问题，不要跳层。
不适用场景
- 批量爬取/爬虫开发 → 这不是爬虫框架，是一次性内容获取工具
- 需要登录才能访问且用户未登录 → 告诉用户先登录对应平台，web-access CDP 可以接管已登录的 Chrome
- 下载付费内容/会员内容 → 不处理侵权场景
前置检查（定期更新，命令报错时必做）
opencli 高频发版（每周 2-3 次），但不需要每次使用都更新——定期（如每周）更新，或命令报错/找不到新命令时再更新即可。
第1步：更新 opencli（npm 包）
npm update -g @jackwener/opencli
第2步：更新 opencli skills（npx 管理）
npx skills update -g -y
opencli 自带 4 个辅助 skill，随 opencli 仓库更新但独立于 npm 包。必须单独更新：
- opencli-usage：查命令总览，不确定有什么命令时用
- opencli-autofix：命令失败时自动诊断修复（SELECTOR 错误、页面结构变化等）
- opencli-browser：浏览器自动化操作
- opencli-adapter-author：写新的 opencli 适配器
第3步：查最新命令比对文档
opencli <platform> --help
opencli 经常加新命令（如 4 月加了 bilibili download、xiaohongshu download），SKILL 文档可能滞后。发现新命令时更新对应 reference 文件。
第4步：检查 Browser Bridge
opencli doctor
3 项全绿（Daemon + Extension + Connectivity）才能用 Cookie 命令。失败时排障：
opencli doctor看哪项失败- daemon 没跑 →
opencli daemon restart（opencli 自带 daemon 管理，不要用 launchctl——opencli 不提供 LaunchAgent） - daemon 在跑但扩展未连 → 让用户
chrome://extensions/关开 OpenCLI 扩展 - 都 OK 还连不上 →
opencli daemon stop后再跑任意opencli <命令>触发 daemon 自启
命令失败时的处理
- 先用 opencli-autofix skill 诊断：
OPENCLI_DIAGNOSTIC=1重跑失败命令 - 修复成功 → 更新 reference 文件记录正确方法
- 修复失败 → 按降级链切换方法
快速路由
场景 A：下载（视频/音频/字幕/博主数据）
先判断平台，再读对应的 reference 文件：
| 关键词 | 平台 | reference 文件 |
|---|---|---|
| 抖音 / douyin | 抖音 | references/douyin.md |
| TT / tiktok / TikTok | TikTok | references/tiktok.md |
| YouTube / youtube / 油管 | YouTube | references/youtube.md |
| B站 / bilibili / BV | B站 | references/other-platforms.md |
| 小红书 / xhs | 小红书 | references/other-platforms.md |
| 知乎 / zhihu | 知乎 | references/other-platforms.md |
| 公众号 / 微信文章 | 微信公众号 | references/other-platforms.md |
| 视频号 / 微信视频号 | 微信视频号 | references/other-platforms.md |
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 247 lines · 360 tokens per session scan A 3ed89182a16c
laohan-xiazai is a skill published in the GitHub repository hanzhcn/laohan-skills (11 stars, last pushed today), licensed MIT. It adds 360 tokens to every session and 5,089 once invoked, about $0.0018 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
pentest-client-advanced
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
openclaw-browser-auto
A setup guide for connecting OpenClaw, an AI-agent platform, to a remote Chrome browser through CDP, a browser control interface. It covers Docker-hosted browsers and Browserless.io, a hosted browser service.
bilibili-publisher
A command-line client for Bilibili, a Chinese video and content platform, covering videos, column articles, and short updates.
automation-browser-api-workflows
Class-level workflow for browser automation, API reverse-engineering, macOS UI automation, tmux/interactive CLI control, MCP tool calling, camera capture, and direct tool/API replacement of fragile UI flows. Use when asked to automate websites/apps, learn private site APIs from traffic, drive interactive CLIs, call…
api-learner
Workflow for learning site APIs via traffic capture and replacing browser automation with direct curl calls.
news-extractor
A Chinese-language news-content extractor for several Chinese news sites, including WeChat public accounts, Toutiao, NetEase News, Sohu News, and Tencent News.