Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add iowarp/clio-kit --skill clio-kit-herdrgit clone --depth 1 https://github.com/iowarp/clio-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/iowarp/clio-kit/clio-kit-herdr)<a href="https://agentmods.dev/skills/iowarp/clio-kit/clio-kit-herdr"><img src="https://agentmods.dev/badge/skills/iowarp/clio-kit/clio-kit-herdr/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/iowarp/clio-kit/clio-kit-herdr"><img src="https://agentmods.dev/badge/skills/iowarp/clio-kit/clio-kit-herdr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00082 | $0.01896 |
| Opus 5.5 | $0.00033 | $0.00758 |
| Sonnet 5.5 | $0.00016 | $0.00379 |
| Haiku 4.5 | $0.00008 | $0.00190 |
Grade A, and why
clio-kit-herdr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 133 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Host compatibility
This copy is adapted from Clio Coder. Apply the procedure using the current host's available tools and the user's authorized scope. The tool names, /skill invocations, .clio-coder paths, fleets, approval gates and completion gates below describe Clio Coder; they are not installed or enforced by this skill in another host. Use the host's actual skill invocation and equivalent tools. If no equivalent exists, report the missing capability. Do not assume a tool is unavailable merely because the original headless workflow says so. A referenced agent or skill must be installed before relying on it. Scientific MCPs must be configured separately.
Adapted skills use the clio-kit- prefix to distinguish them from upstream audited skills. For a companion skill named below, select its clio-kit- copy from this collection; native agents, fleets and external programs retain their original names.
Herdr
Herdr organizes terminals into workspaces, tabs, and panes, recognizes coding
agents running inside panes, and exposes the session through the herdr CLI.
Everything below runs through bash.
Step 1 — Gate
Run test "${HERDR_ENV:-}" = 1. If it fails, say you are not running inside
Herdr and stop. Never inspect or control a Herdr session from outside one.
Step 2 — Learn the installed CLI
The installed binary is the authority on syntax. Run herdr --help, then
print a command group by running it without a subcommand: herdr agent,
herdr pane, herdr workspace, herdr tab, herdr worktree,
herdr terminal, herdr notification, herdr session.
- Never run bare
herdrfor discovery; it launches or attaches the TUI. - Never probe a mutating subcommand by omitting arguments; commands like
herdr workspace createare valid with defaults and will execute. - Commands such as
pane splitandpane listreturn JSON;pane readand help return plain text. Some successful actions, includingpane run, return no output; check their exit status instead of parsing an empty response. Read every identifier from creation responses; never predict or reuse one from an example.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 133 lines · 82 tokens per session scan A 21b27e70b66b
clio-kit-herdr is a skill published in the GitHub repository iowarp/clio-kit (30 stars, last pushed 8d ago), licensed BSD-3-Clause. It adds 82 tokens to every session and 1,896 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-08.
Other skills, from other repositories
ambient-context-catch-me-up
Use when the user asks what they were doing, where they got to, what is still open, or to be caught up after a break. Reads today's Ambient Context summary and record and briefs them.
raindrop-mcp
Connect Raindrop.io to your AI assistant with a simple MCP server. Use it to organize, search, and manage bookmarks with natural language.
discord-mcp
Inspect and manage Discord servers through the user's configured Discord bot. Use for Discord server administration, moderation, channels, roles, members, messages, threads, reactions, emojis, stickers, events, automod, onboarding, soundboard, bot-managed webhooks, or other guild-scoped Discord REST actions.
gigamail
An email and calendar connection for an OpenClaw agent. It can read, search and draft messages, while sending, deleting and changing the calendar require approval from a person outside the agent.
adhd-daily-planner
Time-blind friendly planning, executive function support, and daily structure for ADHD brains. Specializes in realistic time estimation, dopamine-aware task design, and building systems that actually work for neurodivergent minds.
monitor-wakeup
Wait, wake later, schedule a time point, periodically continue, monitor, or poll a Bash-visible condition without holding a Codex turn open. Use for long or indefinite waits and reminders. Skip ordinary commands and short mid-flight waits within an active task.