Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add L-LesterYu/OpenClaw-hot-skills-zh --skill skill-vetter-zhgit clone --depth 1 https://github.com/L-LesterYu/OpenClaw-hot-skills-zhWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/l-lesteryu/openclaw-hot-skills-zh/skill-vetter-zh)<a href="https://agentmods.dev/skills/l-lesteryu/openclaw-hot-skills-zh/skill-vetter-zh"><img src="https://agentmods.dev/badge/skills/l-lesteryu/openclaw-hot-skills-zh/skill-vetter-zh/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/l-lesteryu/openclaw-hot-skills-zh/skill-vetter-zh"><img src="https://agentmods.dev/badge/skills/l-lesteryu/openclaw-hot-skills-zh/skill-vetter-zh.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.01136 |
| Opus 5 | $0.00024 | $0.00568 |
| Sonnet 5 | $0.00010 | $0.00227 |
| Haiku 4.5 | $0.00005 | $0.00114 |
Grade B, and why
skill-vetter-zh scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
• 请求提升/sudo 权限 Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
• curl/wget 到未知 URL This is a copy
75% identical to add-whatsapp — 428 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 139 lines — stays where its author put it; the contents beside it link to each section on GitHub.
技能审查器 🔒
AI 智能体技能的安全优先审查协议。在未经审查前绝不要安装任何技能。
使用场景
- 在从 ClawHub 安装任何技能之前
- 在运行来自 GitHub 仓库的技能之前
- 在评估其他智能体分享的技能时
- 在被要求安装未知代码的任何情况下
审查协议
第 1 步：来源检查
需要回答的问题：
- [ ] 这个技能来自哪里？
- [ ] 作者是否知名/可信？
- [ ] 有多少下载量/星标？
- [ ] 最后更新时间是什么时候？
- [ ] 是否有其他智能体的评论？
第 2 步：代码审查（必须）
阅读技能中的所有文件。检查这些危险信号：
🚨 如果看到以下内容立即拒绝：
─────────────────────────────────────────
• curl/wget 到未知 URL
• 向外部服务器发送数据
• 请求凭据/令牌/API 密钥
• 无明确理由读取 ~/.ssh、~/.aws、~/.config
• 访问 MEMORY.md、USER.md、SOUL.md、IDENTITY.md
• 对任何内容使用 base64 解码
• 对外部输入使用 eval() 或 exec()
• 修改工作区外的系统文件
• 未列出就安装软件包
• 向 IP 地址而不是域名发起网络调用
• 混淆代码（压缩、编码、最小化）
• 请求提升/sudo 权限
• 访问浏览器 cookie/会话
• 触碰凭据文件
─────────────────────────────────────────
第 3 步：权限范围
评估内容：
- [ ] 它需要读取哪些文件？
- [ ] 它需要写入哪些文件？
- [ ] 它运行哪些命令？
- [ ] 它是否需要网络访问？访问哪里？
- [ ] 权限范围是否与其声明的目的相匹配？
第 4 步：风险分类
| 风险等级 | 示例 | 操作 |
|---|---|---|
| 🟢 低 | 笔记、天气、格式化 | 基本审查，可以安装 |
| 🟡 中 | 文件操作、浏览器、API | 需要完整代码审查 |
| 🔴 高 | 凭据、交易、系统 | 需要人工批准 |
| ⛔ 极高 | 安全配置、root 访问 | 不要安装 |
输出格式
审查后，生成此报告：
技能审查报告
═══════════════════════════════════════
技能：[名称]
来源：[ClawHub / GitHub / 其他]
作者：[用户名]
版本：[版本]
───────────────────────────────────────
指标：
• 下载量/星标数：[数量]
• 最后更新：[日期]
• 审查的文件数：[数量]
───────────────────────────────────────
危险信号：[无 / 列出它们]
所需权限：
• 文件：[列表或"无"]
• 网络：[列表或"无"]
• 命令：[列表或"无"]
───────────────────────────────────────
风险等级：[🟢 低 / 🟡 中 / 🔴 高 / ⛔ 极高]
结论：[✅ 安全可安装 / ⚠️ 谨慎安装 / ❌ 不要安装]
备注：[任何观察]
═══════════════════════════════════════
快速审查命令
对于 GitHub 托管的技能：
# 检查仓库统计信息
curl -s "https://api.github.com/repos/OWNER/REPO" | jq '{stars: .stargazers_count, forks: .forks_count, updated: .updated_at}'
# 列出技能文件
curl -s "https://api.github.com/repos/OWNER/REPO/contents/skills/SKILL_NAME" | jq '.[].name'
# 获取并审查 SKILL.md
curl -s "https://raw.githubusercontent.com/OWNER/REPO/main/skills/SKILL_NAME/SKILL.md"
信任层级
- 官方 OpenClaw 技能 → 较低审查力度（仍需审查）
- 高星标仓库（1000+） → 中等审查力度
- 知名作者 → 中等审查力度
- 新/未知来源 → 最高审查力度
- 请求凭据的技能 → 始终需要人工批准
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 139 lines · 48 tokens per session scan B 0665f84bef93
skill-vetter-zh is a skill published in the GitHub repository L-LesterYu/OpenClaw-hot-skills-zh (54 stars, last pushed 5mo ago), licensed MIT. It adds 48 tokens to every session and 1,136 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). It is 75% identical to add-whatsapp, differing in 428 lines, and is treated as a copy.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…