Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/hjdhnx/drpy-node-skillnpx agentmods add skills/hjdhnx/drpy-node-skill/drpy-node-repo-uploadWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hjdhnx/drpy-node-skill/drpy-node-repo-upload)<a href="https://agentmods.dev/skills/hjdhnx/drpy-node-skill/drpy-node-repo-upload"><img src="https://agentmods.dev/badge/skills/hjdhnx/drpy-node-skill/drpy-node-repo-upload.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00109 | $0.05422 |
| Opus 5 | $0.00055 | $0.02711 |
| Sonnet 5 | $0.00022 | $0.01084 |
| Haiku 4.5 | $0.00011 | $0.00542 |
Grade A, and why
drpy-node-repo-upload scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 494 lines — stays where its author put it; the contents beside it link to each section on GitHub.
⚠️ 已归档（2026-07-17）：本 skill 已被
drpy-node-coder取代。coder 融合了 4 个旧 skill（workflow/create/play-debug/repo-upload）的全部工作流，并自带scripts/cli.jsCLI 替代 drpy-node-mcp 服务——一个 skill、无需安装 MCP。本文件保留仅供历史参考，新工作请直接用 drpy-node-coder。
drpy-node Repo Upload
快速索引
| 用户意图 | 入口流程 | 终止条件 |
|---|---|---|
| 上传/替换源 | L1 校验 → A/B/C 档 → 用户确认 → upload → info 核验 | 上传后元数据一致 |
| 自主流程 L3=100 后上传 | house_verify → 确认 L3=100/A档/目标明确 → upload → info 核验 | file_id/cid/tags/is_public 一致 |
| 只检查不传 | L1/L2/L3 按目标验证 → 输出结论 | 不进入上传 |
| 只改标签 | house_verify → list 定位 → info 确认 → update_tags | 标签核验一致 |
| 改公开/私密 | house_verify → list 定位 → toggle_visibility → info 核验 | 可见性一致 |
执行契约
- 输入：本地源文件名/仓库文件关键词/file_id/cid/标签要求/是否公开。
- 输出：上传前 A/B/C + L1/L2/L3 依据，上传或修正后的 file_id/cid/tags/is_public。
- 原则：上传前先校验，用户怎么要求标签就怎么执行，上传后必须可追踪。
模式闸门：先判断是否允许写入
| 用户模式 | 允许动作 | 禁止动作 |
|---|---|---|
| 只读 / 规划 / dry-run / 不要上传 / 不改标签 | 读取、校验、给 A/B/C 判断、列拟调用参数 | house_file(upload/replace/update_tags/toggle_visibility) |
| 需要确认后再操作 | house_verify、定位对象、输出确认模板 |
未确认前禁止仓库 mutation |
| 明确要求执行 | 按 L1/L2/L3 和 A/B/C 规则执行 | 不跳过 house_verify、目标确认和 info 核验 |
| 自主全流程 | 用户已预授权且 L3=100/A档/路径/tags/is_public/目标明确时直接上传并核验 | L3<100、B/C 档、目标冲突或 tags/is_public 不明时上传 |
如果用户说“只检查 / dry-run / 不要真的上传”，本 skill 只能输出验证依据、风险和拟操作参数。
自主全流程上传模式
当上游 workflow/source-create 明确传来 upload_preauthorized=true，表示用户最初已经要求“修到100后自动上传”。此时满足全部条件才可免二次确认直接上传：
evaluate_spider_source == 100，证据等级为 L3，档位为 A。- 本地文件路径、源名、内容类型自洽。
- tags、is_public、auto_replace 策略明确；用户明确 tags 时严格按用户要求。
house_verify通过。- 仓库对象无多候选、file_id/cid 冲突或同名歧义。
执行顺序固定：
house_verify → house_file(upload, auto_replace=true) → house_file(info, cid=...) → 回报 file_id/cid/tags/is_public
必须停手并回传 workflow 的情况：
| blocker_type | 表现 | 动作 |
|---|---|---|
score_below_target |
用户要求最终版/100 分，但 L3<100 | 不上传，回传继续修复或报告断点 |
ambiguous_upload |
多同名候选、file_id/cid 冲突、tags/is_public 不明确 | 不上传，列出需确认项 |
high_risk_change |
需要替换非同名对象、改公开状态或合并标签规则不清 | 不上传，等用户确认 |
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 494 lines · 109 tokens per session scan A ea5157ad87c0
drpy-node-repo-upload is a skill published in the GitHub repository hjdhnx/drpy-node-skill (49 stars, last pushed yesterday), licensed MIT. It adds 109 tokens to every session and 5,422 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
release-announcement
Write a release announcement — changelog, blog post, in-app note, or social post — that leads with user impact, names the audience, and includes upgrade/migration steps without filler.
agent-release-swarm
Agent skill for release-swarm - invoke with $agent-release-swarm.
multi-agent-release-manager
Cleans up the workspace, formats code, runs presubmit checks, and uploads CLs to Gerrit.
release-notes
Generate user-facing release notes from tickets, PRDs, or changelogs. Creates clear, engaging summaries organized by category (new features, improvements, fixes). Use when writing release notes, creating changelogs, announcing product updates, or summarizing what shipped.
pack-submit
Package one of this agent's own skills as a standalone community pack and submit it to the aeon registry as a PR.
updater_guide
Guidance for checking for and installing Row-Bot updates.