Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add konglong87/superPM --skill pm-searchgit clone --depth 1 https://github.com/konglong87/superPMWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/konglong87/superpm/pm-search)<a href="https://agentmods.dev/skills/konglong87/superpm/pm-search"><img src="https://agentmods.dev/badge/skills/konglong87/superpm/pm-search.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00057 | $0.05924 |
| Opus 5 | $0.00028 | $0.02962 |
| Sonnet 5 | $0.00011 | $0.01185 |
| Haiku 4.5 | $0.00006 | $0.00592 |
Grade A, and why
pm-search scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 613 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Preamble (run first)
bash "$(dirname "${BASH_SOURCE[0]}")/../../check-update.sh" 2>/dev/null || true
# 创建需求调研目录
mkdir -p docs/01-需求调研
# 自动发现 AnySearch CLI 安装位置
# 支持 Claude Code / OpenCode / OpenClaw / Cursor / pip install / 手动克隆等多种安装方式
ANYSEARCH_CLI=""
for candidate in \
"$HOME/.claude/skills/anysearch/scripts/anysearch_cli.py" \
"$HOME/.opencode/skills/anysearch/scripts/anysearch_cli.py" \
"$HOME/.openclaw/skills/anysearch/scripts/anysearch_cli.py" \
"$HOME/.cursor/skills/anysearch/scripts/anysearch_cli.py" \
"$HOME/skills/anysearch/scripts/anysearch_cli.py" \
"$HOME/.anysearch/scripts/anysearch_cli.py" \
"/usr/local/bin/anysearch_cli.py" \
"$HOME/bin/anysearch_cli.py"; do
if [ -f "$candidate" ]; then
ANYSEARCH_CLI="$candidate"
break
fi
done
# pip install 方式
if [ -z "$ANYSEARCH_CLI" ]; then
PIP_LOCATION=$(python3 -c "import importlib.util; spec=importlib.util.find_spec('anysearch'); print(spec.submodule_search_locations[0] if spec and spec.submodule_search_locations else '')" 2>/dev/null)
if [ -n "$PIP_LOCATION" ] && [ -f "$PIP_LOCATION/scripts/anysearch_cli.py" ]; then
ANYSEARCH_CLI="$PIP_LOCATION/scripts/anysearch_cli.py"
fi
fi
# which 方式
if [ -z "$ANYSEARCH_CLI" ]; then
WHICH_CLI=$(which anysearch_cli.py 2>/dev/null)
if [ -n "$WHICH_CLI" ] && [ -f "$WHICH_CLI" ]; then
ANYSEARCH_CLI="$WHICH_CLI"
fi
fi
echo "🔍 PM-Search V2.1 - 联网搜索整合工具"
echo "搜索优先级:AnySearch → Exa MCP → WebSearch"
echo "支持并发搜索:市场调研 | 竞品分析 | 行业数据 | 舆情监控 | 合规检查"
if [ -n "$ANYSEARCH_CLI" ]; then
echo "✅ AnySearch: $ANYSEARCH_CLI"
else
echo "⚠️ AnySearch 未安装,将自动降级到 Exa MCP / WebSearch"
echo " 安装: git clone https://github.com/konglong87/anysearch.git ~/.claude/skills/anysearch"
fi
echo ""
搜索工具优先级(核心规则)
所有搜索必须按以下优先级选择工具,不得跳级:
| 优先级 | 工具 | 适用场景 | 调用方式 |
|---|---|---|---|
| 1(首选) | AnySearch | 中文搜索、垂直领域、批量搜索、全文提取 | Bash 调用 anysearch_cli.py(路径由 Preamble 自动发现,见上方输出) |
| 2(备选) | Exa MCP | 英文/代码/公司搜索、语义搜索 | mcp__exa__web_search_exa 工具 |
| 3(降级) | WebSearch | 仅当 AnySearch 和 Exa 都不可用时 | WebSearch 工具 |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 613 lines · 57 tokens per session scan A f0c0676bef38
pm-search is a skill published in the GitHub repository konglong87/superPM (62 stars, last pushed 4d ago), licensed MIT. It adds 57 tokens to every session and 5,924 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
multi-search
A web-search helper that chooses among DuckDuckGo, Tavily, Bing API, and Bing scraping based on the available network.
freeride
Manages free AI models from OpenRouter for OpenClaw. Automatically ranks models by quality, configures fallbacks for rate-limit handling, and updates openclaw.json. Use when the user mentions free AI, OpenRouter, model switching, rate limits, or wants to reduce AI costs.
deepsafe-scan
Preflight security scanner for AI coding agents — scans deployment config, skills/MCP servers, memory/sessions, and AI agent config files (hooks injection) for secrets, PII, prompt injection, and dangerous patterns. Runs 4 model behavior probes (persuasion, sandbagging, deception, hallucination). Supports LLM-enhanced…
mapick
Mapick — Skill recommendation & privacy protection for OpenClaw. Scans your local skills, suggests what you're missing, and keeps other skills from seeing your sensitive data.
douyin-upload-mcp-skill
A guide for publishing videos and image-and-text posts through Douyin's creator website. Douyin is a Chinese social-media platform, and the guide uses its creator platform and available MCP tools.
team-tasks
Coordinate multi-agent development pipelines using shared JSON task files. Use when dispatching work across dev team agents (code-agent, test-agent, docs-agent, monitor-bot), tracking pipeline progress, or running sequential/parallel workflows. Covers project init, task assignment, status tracking, agent dispatch via…