Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add nongjun/feishu-cursor-claw --skill websocket-realtimegit clone --depth 1 https://github.com/nongjun/feishu-cursor-clawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nongjun/feishu-cursor-claw/websocket-realtime)<a href="https://agentmods.dev/skills/nongjun/feishu-cursor-claw/websocket-realtime"><img src="https://agentmods.dev/badge/skills/nongjun/feishu-cursor-claw/websocket-realtime.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00054 | $0.00542 |
| Opus 5 | $0.00027 | $0.00271 |
| Sonnet 5 | $0.00011 | $0.00108 |
| Haiku 4.5 | $0.00005 | $0.00054 |
Grade A, and why
websocket-realtime scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
WebSocket 实时通信
当前实现（各模块独立）
| 模块 | 管理器 | 特点 |
|---|---|---|
| 会话存档 | ConnectionManager | 按用户索引、广播新消息/风控告警 |
| 企微托管 | ClientManager | 服务端主动心跳、优雅断连、流式事件推送 |
会话存档 WebSocket
端点：/ws/messages，认证：JWT Token（Query 参数），心跳：ping/pong（60 秒超时）
| 方法 | 用途 |
|---|---|
| connect(ws, metadata) | 建立连接并注册 |
| disconnect(ws) | 断开并清理 |
| send_to_user(userid, data) | 定向推送 |
| broadcast(data) | 全局广播 |
| broadcast_new_messages() | 新消息通知 |
| broadcast_risk_alert() | 风控告警 |
企微托管 WebSocket
端点：/ws/v1/hosting/client（客户端）、/ws/v1/hosting/monitor（监控端），心跳：服务端主动发送（15 秒间隔，90 秒超时）
| 方法 | 用途 |
|---|---|
| connect() | 建立连接（含数据库状态同步） |
| disconnect() | 优雅断连（先通知后关闭） |
| send_stream_event() | 流式事件推送 |
SOP：新增 WebSocket 功能
- 参考会话存档的 ConnectionManager 模式
- 创建 WebSocket 路由，验证 JWT Token
- 实现 connect/disconnect/broadcast 等方法
- 前端使用 WebSocket 类封装，实现自动重连和心跳
重点关注
- 当前未统一到公共模块，各模块独立实现
- JWT 认证通过 Query 参数传递（WebSocket 不支持 Header）
- 前端需实现指数退避重连策略
- 心跳超时后服务端主动断开
参考文件
- 会话存档/后端服务/app/websocket/init.py
- 会话存档/后端服务/app/api/ws.py
- 企微托管/后端服务/app/services/client_manager.py
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 57 lines · 54 tokens per session scan A c8787ec7e10f
websocket-realtime is a skill published in the GitHub repository nongjun/feishu-cursor-claw (14 stars, last pushed 1mo ago), licensed MIT. It adds 54 tokens to every session and 542 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
firebase-auth
Use when setting up auth, managing auth state, implementing email/password or social sign-in, handling auth errors, or managing users.
firebase-cloud-functions
Use when calling callable functions (httpsCallable), passing data to server-side logic, handling function errors/timeouts, configuring regions, or testing with the Emulator Suite.
firebase-data-connect
Use when setting up Data Connect, writing GraphQL queries/mutations, configuring generated SDKs, handling offline, or applying security rules.
create-handler
Create a new API handler following the handler pattern. Use when the user asks to create an endpoint, handler, or route.
audit-backend-architecture
Read-only audit and decision advisor for backend architecture, topology-gated by stack. Use when "audit backend architecture", "which pattern should I use", "am I over-engineering", "sync vs event-driven". Mechanical boundary rules → enhance-arch-boundaries.
developing-genkit-dart
Use when building AI agents in Dart, implementing Genkit flows or tools, integrating LLMs into Dart or Flutter applications, or using Genkit Dart plugins.