PhoneClaw is a local AI agent framework that runs on phones and edge devices, using on-device models to understand requests and perform mobile tasks through native skills. It is for people who want an AI assistant on an iPhone or similar device with access to functions such as calendars, reminders, contacts, health data, voice, and image understanding, while optionally using web search or a Mac Gateway for selected tasks.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add kellyvv/PhoneClaw --skill remindersgit clone --depth 1 https://github.com/kellyvv/PhoneClawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kellyvv/phoneclaw/reminders)<a href="https://agentmods.dev/skills/kellyvv/phoneclaw/reminders"><img src="https://agentmods.dev/badge/skills/kellyvv/phoneclaw/reminders.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00024 | $0.00584 |
| Opus 5 | $0.00012 | $0.00292 |
| Sonnet 5 | $0.00005 | $0.00117 |
| Haiku 4.5 | $0.00002 | $0.00058 |
Grade A, and why
Reminders scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
提醒事项创建
你负责帮助用户创建新的提醒事项。提醒事项的核心是"在什么时候提醒",没有时间的提醒没有意义。
可用工具
- reminders-create: 创建提醒事项
title: 必填, 提醒标题due: 必填, 提醒时间. 直接照抄用户原话 (例如 "今晚八点" / "明天上午10点" / "5月3日下午3点"), 工具会自己解析。不需要换算成 ISO 8601。notes: 可选, 备注
执行流程
- 从用户话语里提取
title和due - 如果缺
title: 简短追问 "提醒您做什么呢?" - 如果缺
due: 简短追问 "什么时候提醒您?" - 两者都有时才调用
reminders-create,due字段直接抄用户原话里的时间表达, 不需要换算 - 工具成功后, 直接告诉用户提醒已创建 (如 "好的, 已设置明天早上 8 点提醒买牛奶")
- 禁止在未拿到
due时就 emit tool_call
完成后回复
- 工具成功后, 用一句自然中文确认结果, 不要提工具名、JSON 或内部步骤
- 优先说用户关心的信息: 提醒内容 + 时间
- 示例: "已设置：今晚八点提醒发文件。"
调用格式
用户说什么时间, due 就抄什么, 工具自己解析:
<tool_call> {"name": "reminders-create", "arguments": {"title": "发文件", "due": "今晚八点"}} </tool_call>
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 68 lines · 24 tokens per session scan A d79dd0f8a2f9
Reminders is a skill published in the GitHub repository kellyvv/PhoneClaw (1,234 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 24 tokens to every session and 584 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
kukuroo-notify
Push a notification to the user's own phone through their Kukuroo Worker. Use when they ask to be notified, pinged, buzzed, or sent a status update on their phone; name a time they want to be told at; say they are stepping away from the monitor or will be afk; or mention Kukuroo. Also for diagnosing a Kukuroo send…
send-email
Call the runintent tool with the following exact parameters.
nameplate-attention
On-screen agent alert: topmost message card + pulsating screen borders via Nameplate. Use before password-manager auth prompts or whenever blocked on the human.
Apple Shortcuts Integration
Create and trigger Apple Shortcuts for iOS/macOS automation and cross-platform workflows.
second-brain
An offline knowledge manager based on PARA, a way to organize information into Projects, Areas, Resources, and Archives. It organizes notes, searches them by meaning, and combines related information on the user's device.
concise-output
Use when: you want maximum token compression in responses. Removes all filler prose while keeping 100% technical accuracy. Inspired by the Caveman communication pattern.