Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/hrygo/hotplex/hotplex-docs-patrolnpx skills add hrygo/hotplex --skill hotplex-docs-patrolgit clone --depth 1 https://github.com/hrygo/hotplexWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hrygo/hotplex/hotplex-docs-patrol)<a href="https://agentmods.dev/skills/hrygo/hotplex/hotplex-docs-patrol"><img src="https://agentmods.dev/badge/skills/hrygo/hotplex/hotplex-docs-patrol.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00057 | $0.00786 |
| Opus 5 | $0.00028 | $0.00393 |
| Sonnet 5 | $0.00011 | $0.00157 |
| Haiku 4.5 | $0.00006 | $0.00079 |
Grade A, and why
hotplex-docs-patrol scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
HotPlex 文档巡逻
文档巡逻请求授权在当前工作树内读取变更并修复确有影响的当前文档；它不自动授权 创建或切换分支、创建 Issue/PR、push 或其他远端写入。上述动作必须由当前请求明确授权。
巡逻
-
读取
.docs-patrol-baseline并验证其 commit；无效或缺失时使用一个明确报告的、 有界的近期窗口。审查该窗口内 commit 与 diff 的语义，而不只统计文件名。推荐的 只读基线流程是：BASELINE_FILE=.docs-patrol-baseline if [ -s "$BASELINE_FILE" ] && git rev-parse --verify "$(cat "$BASELINE_FILE")^{commit}" >/dev/null 2>&1; then BASELINE=$(cat "$BASELINE_FILE") else BASELINE=$(git log --since="7 days ago" --reverse --format="%H" | head -1) # 报告使用了 fallback；若窗口为空，停止并请求明确范围。 fi使用
git log --no-merges "$BASELINE..HEAD"和针对internal/、cmd/、pkg/、configs/、docs/的有界 diff，逐条理解变更意图。 -
读取 doc-registry.md，把用户可见行为、配置、API、 协议或运维变化映射到候选文档。Bug 修复和内部重构只有在当前文档因此失真时才 需要修改。
-
只维护
docs/index.mdBFS 可达的当前文档。历史 archive、spec 和不可达记录不是 本轮维护对象；先读取候选文档，再决定更新、补充、删除过时内容或保持不变。 -
只修改
docs/源文件，不直接编辑生成目录。按仓库当前 Makefile 验证导航、链接 和生成结果；当前入口是make docs-build，随后可运行make docs-lint。如果命令、 输出目录或生成器发生变化，以Makefile和docs/AGENTS.md为准。没有文档影响 是有效结论，不为制造 diff 而编辑。
只有完成变更分析、候选文档判断和文档构建/链接验证后，才把当前 HEAD 写入本地
忽略文件：
git rev-parse HEAD > .docs-patrol-baseline
基线更新不是 commit、branch、Issue、PR 或 push 授权。若验证失败或巡逻尚未完成， 保留旧 baseline，报告 blocked，不要把不完整状态描述成已完成。
报告收尾
报告至少记录：旧 baseline 或 fallback 窗口、检查的 commit 数、候选文档数、实际修改
的文档、明确跳过及其理由、make docs-build/make docs-lint 结果、baseline 是否更新，
以及未执行的外部动作。没有文档修改时也要说明“候选文档已阅读且当前仍准确”，而不是
只报告“无 diff”。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 51 lines · 57 tokens per session scan A 0ad4644be786
hotplex-docs-patrol is a skill published in the GitHub repository hrygo/hotplex (49 stars, last pushed 3d ago), licensed Apache-2.0. It adds 57 tokens to every session and 786 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
release-publish
Publish a new AlphaClaw release to npm and GitHub. Use when the user asks to cut a release, publish a version, write release notes, draft a release tweet, or close issues addressed in a release. Covers git history analysis, release note drafting, npm publishing, GitHub release creation, issue closing, and tweet…
release-analysis
Analyze an upstream product, dependency, or platform release for downstream impact on the current repo. Use when the user gives a package or repo name such as openclaw or GOG-CLI, or asks about release notes, changelogs, tags, dependency bumps, or upstream announcements. Resolve the GitHub repository, read the latest…
reversi-master
One-click install + model switch:Claude Code,Codex CLI (OpenAI), Grok Build (xAI), DeepSeek Harness, Kimi Code (Moonshot) ,Qwen Code,Aider,OpenCode,MiMo Code (Xiaomi),ZCode (Z.AI),OpenClaw,Pi,OpenScience,Vibe-Trading,Claude Desktop (3P profile),ChatGPT desktop,OpenCode Desktop.
Trash Talk
AI becomes provocative and mocks the opponent during gameplay.
release-beta
Publish the next AlphaClaw beta and always update the Railway beta template pin to the exact released beta version.
railway-volume-to-docker
Sync runtime data from a Railway deployment into local Docker for realistic testing. Use when the user asks to copy Railway data, clone production state locally, or test with real usage/session/config data.