Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add malue-ai/dazee-small --skill medication-trackergit clone --depth 1 https://github.com/malue-ai/dazee-smallWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/malue-ai/dazee-small/medication-tracker)<a href="https://agentmods.dev/skills/malue-ai/dazee-small/medication-tracker"><img src="https://agentmods.dev/badge/skills/malue-ai/dazee-small/medication-tracker.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.00869 |
| Opus 5 | $0.00013 | $0.00434 |
| Sonnet 5 | $0.00005 | $0.00174 |
| Haiku 4.5 | $0.00003 | $0.00087 |
Grade C, and why
medication-tracker scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -s "https://api.fda.gov/drug/label.json?search=openfda.brand_name:atorvastatin&limit=1" | python3 -c " Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s "https://api.fda.gov/drug/label.json?search=openfda.brand_name:atorvastatin&limit=1" | python3 -c " What it actually says
用药管理与提醒
帮助用户记录和管理药物服用情况,设置提醒,查询基本药物信息。
使用场景
- 用户说「帮我记一下每天要吃的药」「提醒我晚上 8 点吃药」
- 用户需要管理多种药物的服用时间
- 用户想查询某种药的基本信息
药单管理
数据存储
# 药单存储路径
mkdir -p ~/.xiaodazi/medication
# 药单格式
cat > ~/.xiaodazi/medication/prescriptions.json << 'EOF'
{
"medications": [
{
"name": "阿托伐他汀钙片",
"dosage": "20mg",
"frequency": "每日一次",
"time": "21:00",
"notes": "睡前服用,避免与葡萄柚同食",
"started": "2025-01-15",
"prescriber": "心内科 王医生"
}
],
"updated_at": "2025-02-07"
}
EOF
添加药物
用户口述后,LLM 结构化写入药单。
查看药单
cat ~/.xiaodazi/medication/prescriptions.json | python3 -c "
import json, sys
data = json.load(sys.stdin)
for m in data.get('medications', []):
print(f'💊 {m[\"name\"]} {m[\"dosage\"]}')
print(f' 频率: {m[\"frequency\"]},时间: {m[\"time\"]}')
if m.get('notes'):
print(f' 注意: {m[\"notes\"]}')
print()
"
服药记录
# 记录服药
cat >> ~/.xiaodazi/medication/log_$(date +%Y-%m).json << EOF
{"date": "$(date +%Y-%m-%d)", "time": "$(date +%H:%M)", "medication": "阿托伐他汀钙片", "taken": true}
EOF
提醒机制
配合 macos-notification / windows-notification / linux-notification 发送提醒:
# macOS 提醒示例
osascript -e 'display notification "该服用阿托伐他汀钙片 20mg 了" with title "小搭子 · 用药提醒" sound name "default"'
药物信息查询(OpenFDA API,免费)
# 按药名查询
curl -s "https://api.fda.gov/drug/label.json?search=openfda.brand_name:atorvastatin&limit=1" | python3 -c "
import json, sys
data = json.load(sys.stdin)
result = data.get('results', [{}])[0]
print(f'药品: {result.get(\"openfda\", {}).get(\"brand_name\", [\"?\"])[0]}')
print(f'用途: {result.get(\"indications_and_usage\", [\"?\"])[0][:200]}...')
print(f'警告: {result.get(\"warnings\", [\"?\"])[0][:200]}...')
"
安全规则
- 免责声明:每次回复药物信息时注明「仅供参考,请遵医嘱」
- 不做诊断:不判断用户症状,不推荐药物
- 不建议停药/换药:这类操作必须咨询医生
- 药单数据仅存储在本地,不上传
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 106 lines · 26 tokens per session scan C 3d9b309a741d
medication-tracker is a skill published in the GitHub repository malue-ai/dazee-small (36 stars, last pushed 5mo ago), licensed MIT. It adds 26 tokens to every session and 869 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
orbit-notion
Open Orbit briefing skill — selected by the Orbit pipeline when Notion is the user's only connected connector, or when the user explicitly scopes their daily digest to Notion. Pulls the past 24 hours of document edits, comments, mentions, and database row changes from the user's authenticated Notion connection and…
Cortex
Operate Cortex, the LifeOS memory system — the typed Knowledge Archive (People, Companies, Ideas, Research with typed related: links) plus recall of prior work sessions, ISAs, and conversations. Search, add, harvest, develop, ingest, distill, graph-navigate, recall. USE WHEN cortex, knowledge, knowledge base, search…
feishu
Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.
pinchtab-mcp
Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.
peekaboo
Capture and automate macOS UI with the Peekaboo CLI.
mochi-remind
Handle due reminders — notify the user with natural language and mark them done.