drpy-node-coder

drpy-node-coder is a skill for Claude Code, Codex from hjdhnx/drpy-node-skill. It costs 237 tokens per session (6,442 once invoked), scanned A, original, MIT.

A complete workflow for creating, repairing, testing, evaluating, and publishing drpy-node scraper sources. drpy-node is a project for extracting content from websites.

In plain words
What is it for?
Use it to analyze a website or existing source, run syntax and data tests, evaluate playback chains, repair problems, and prepare a verified upload through its bundled command-line tool.
Why use it?
It gives agents a defined path from diagnosing a source to validating it, so they do not rewrite code before understanding the failure.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to analyze a website or existing source, run syntax and data tests, evaluate playback chains, repair problems, and prepare a verified upload through its bundled command-line tool.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/hjdhnx/drpy-node-skill/drpy-node-coder
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add hjdhnx/drpy-node-skill --skill drpy-node-coder
Clone the repo
git clone --depth 1 https://github.com/hjdhnx/drpy-node-skill

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for drpy-node-coder

README.md
[![agentmods](https://agentmods.dev/badge/skills/hjdhnx/drpy-node-skill/drpy-node-coder/github.svg)](https://agentmods.dev/skills/hjdhnx/drpy-node-skill/drpy-node-coder)
Your own site
<a href="https://agentmods.dev/skills/hjdhnx/drpy-node-skill/drpy-node-coder"><img src="https://agentmods.dev/badge/skills/hjdhnx/drpy-node-skill/drpy-node-coder/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for drpy-node-coder

Your own site · 80×15
<a href="https://agentmods.dev/skills/hjdhnx/drpy-node-skill/drpy-node-coder"><img src="https://agentmods.dev/badge/skills/hjdhnx/drpy-node-skill/drpy-node-coder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 237 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,442 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Rogue Agent · line 41
    Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
    Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
  • medium Rogue Agent · line 41
    Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
    Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00237 $0.06442
Opus 5.5 $0.00095 $0.02577
Sonnet 5.5 $0.00047 $0.01288
Haiku 4.5 $0.00024 $0.00644

Measured 1mo ago against content hash 5e603083c820, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

drpy-node-coder scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 20 executable files (scripts/cli.js, scripts/commands/fs.js, scripts/commands/gateway.js, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

| 多引擎源(php/hipy/cat) | 路线 E | `references-multi-engine-sources.md` | `fetch` + curl `?do=py/php/cat&extend=`(**必须带 extend**;hipy 改源需 kill daemon)|
drpy-node-coder/SKILL.md · 215 lines

How it starts

The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.

drpy-node Coder

drpy-node 爬虫源的建、修、测、放、传全链路一体化 skill。自带 CLI 工具,无需安装 MCP 服务。

便携性说明(先读)

  • ✅ 无需 MCP:所有能力内置在 scripts/cli.js,AI 直接 node scripts/cli.js <命令> 调用。
  • ⚠️ cli.js 在 skill 自身目录(~/.zcode/skills/drpy-node-coder/scripts/cli.js),不在 drpy-node 仓库里——drpy-node/scripts 下没有 cli.js。工作目录随意(CLI 通过 setup 记录的根定位找到 drpy-node),别 cd 错地方。
  • ✅ 零 npm 依赖:无需 npm install。localDsCore 测试引擎 bundle(14M,全内联 cheerio/axios/drpyS/htmlParser)+ sqlite + 编码 wasm 自带于 scripts/vendor/。
  • ⚠️ 前置:本机需有 drpy-node 项目(CLI 复用其 req/pdfa/drpyS/DS解密 源码模块——这些互相 import、非 bundle,搬不动;但 localDsCore 已内联进 vendor/,test/evaluate 不再依赖 drpy-node-bundle 目录)。
  • 首次使用:cd scripts && node cli.js setup <drpy-node-绝对路径> && node cli.js doctor。
  • 调用范式:node scripts/cli.js [--root <drpy-node路径>] [--target <网关名>] <命令> [参数] [--flags]。所有命令输出 JSON:成功 {"ok":true,"data":...}、失败 {"ok":false,"error":...}。
  • 输出读取:少数命令(test/evaluate)首次加载测试引擎时 stdout 可能有一次初始化日志,业务 JSON 始终是 stdout 最后一行,按最后一行 { 解析。Windows Git Bash 下输出里可能混入 ANSI 清屏序列(ESC[H2J),直接解析会失败,先 | tr -d '\033' | grep -v '^\[H\[2J' 清洗。
  • data_preview 是截断文本(约 3KB,尾部 ... (数据已截断,共 N 字符)),截断点可能切开 JSON 字符串——对 preview 做 JSON.parse 必炸。结构化取值只用 item_count / first_item(同样截断至 500 字符)字段,或对整行输出 grep 关键词;要完整数据请换姿势(见下文「测试实战陷阱」)。

网关与远程执行(local / 远程 drpy-node 多网关)

CLI 天然支持多网关:local(默认,本地 drpy-node)+ 任意多个远程部署的 drpy-node。

node cli.js gateway add prod http://1.2.3.4:5757 --user admin --password .. --api-pwd ..
node cli.js gateway persist prod    # 凭据固化到系统级环境变量,新会话零配置(首次配置必跑)
node cli.js gateway test prod       # 探活+版本+端点可用性(首次连接远程必跑)
node cli.js gateway use prod        # 切换默认网关(nvm use 式,持久化)
node cli.js src list --target prod  # 单次显式覆盖,不改默认
node cli.js gateway use local       # 切回本地

首连引导剧本(用户不会敲命令时必走)

用户往往只说"帮我配置/连上远端 drpy-node http://x.x.x.x:5757",不会提 gateway 命令。AI 按此剧本主动执行,缺什么追问什么,不要把命令甩给用户:

  1. 地址缺失先问地址:要到 IP/域名+端口(drpy-node 默认 5757;docker 部署确认端口已映射、防火墙放行)。
  2. 先试探后追问:gateway add <建议名> <url>(先不带凭据)→ gateway test <名>,按探测结果精准提问,不要一次问全:
    • 401 鉴权失败 → 追问远端 .env 的 API_AUTH_NAME/API_AUTH_CODE,顺带确认是否有 API_PWD
    • runtime 404 → 告知远端 drpy-node 版本过旧需升级
    • 全 ok → 无需凭据,跳到第 4 步
  3. 带凭据重配+固化:gateway add <名> <url> --overwrite --user .. --password .. --api-pwd .. → gateway persist <名>(一次性固化:凭据写入 Windows 用户级环境变量 + Git Bash profile,配置文件改存变量名、清掉明文;幂等可重跑)→ gateway test 全绿。此后任何新终端/新会话零配置可用,无需再 export。明文→固化的两步由 AI 连续完成,用户只需提供一次凭据。
  4. 切换+验证:gateway use <名> → 真实跑一条(如 src list)→ 向用户报告连接摘要(远端版本、源数量、网关名、当前指向)。

Read the full file on GitHub · 215 lines

Files

What ships with it

50 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +17 lines 5e603083c820
  2. 1mo ago Changed · +38 lines · +69 tokens per session 84f60c54cc93
  3. 1mo ago First seen · 160 lines · 168 tokens per session scan A 10504eb127c2

Subscribe to this mod's changes

drpy-node-coder is a skill published in the GitHub repository hjdhnx/drpy-node-skill (58 stars, last pushed 1mo ago), licensed MIT. It adds 237 tokens to every session and 6,442 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

debug-optimize-lcp

Guides debugging and optimizing Largest Contentful Paint (LCP) using Chrome DevTools MCP tools. Use this skill whenever the user asks about LCP performance, slow page loads, Core Web Vitals optimization, or wants to understand why their page's main content takes too long to appear. Also use when the user mentions…

ChromeDevTools/chrome-devtools-mcp · 99 tokens

interactive-login

Log a CLI in with a browser/device-code flow (aws sso, gh, glab, gcloud, …) and save the result to the keychain so later commands can request it through execute.credentials.

yc-software/qm · 46 tokens

pinchtab-mcp

Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.

pinchtab/pinchtab · 52 tokens

azure-messaging-webpubsub-java

Build real-time web applications with Azure Web PubSub SDK for Java. Use when implementing WebSocket-based messaging, live updates, chat applications, or server-to-client push notifications.

microsoft/skills · 43 tokens

cua-driver

Use Cua Driver for desktop or browser tasks that are awkward or unavailable through Bash/APIs, or when the user explicitly wants GUI interaction: app testing, visual bug reproduction, form filling, calendar entry, screenshots, and demo recording. Also covers Cua setup; not OpenAI Codex Computer Use or web research.

davidondrej/skills · 68 tokens

open-design-browser

Inspect and exercise local HTML design artifacts and library prototype previews with the existing agent-browser CLI, including screenshots, interaction checks, and rendered DOM snapshots. Use when rendered evidence helps author or review a design; excludes browser installation, remote services, and unrelated browser…

compozy/compozy · 56 tokens