Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add openyida/openyida --skill yida-connectorgit clone --depth 1 https://github.com/openyida/openyidaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/openyida/openyida/yida-connector)<a href="https://agentmods.dev/skills/openyida/openyida/yida-connector"><img src="https://agentmods.dev/badge/skills/openyida/openyida/yida-connector.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Data Exfiltration · line 139 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.02520 |
| Opus 5 | $0.00030 | $0.01260 |
| Sonnet 5 | $0.00012 | $0.00504 |
| Haiku 4.5 | $0.00006 | $0.00252 |
Grade A, and why
yida-connector scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- 优先使用 `smart-create` 从 curl 命令生成脱敏动作草稿；它不创建或更新远端连接器，后续创建/追加仍需显式执行对应命令 How it starts
The opening of the file, as written. The whole thing — 180 lines — stays where its author put it; the contents beside it link to each section on GitHub.
HTTP 连接器管理
严格禁止 (NEVER DO)
- 不要要求用户在聊天中发送 API Key、密码、App Key、App Secret；也不要把凭据放进源码、JSON 或命令参数
- 不要编造 connector-id 或 action-id，必须从命令返回中提取
- 不要把
connector delete当作真实删除命令；CLI 仅查询目标并展示平台手工删除指引 - 不要用 shell heredoc、
cat/echo/printf/tee或重定向生成连接器 action/config JSON
严格要求 (MUST DO)
- 优先使用
smart-create从 curl 命令生成脱敏动作草稿；它不创建或更新远端连接器，后续创建/追加仍需显式执行对应命令 - 创建连接器后，将 connector-id 记录到
.cache/<项目名>-schema.json - 同时记录
connectorName。数字connectorId只用于 CLI 管理；自定义页面调用网关必须使用以Http_开头的connectorName --operations、--action等文件参数必须先用结构化文件写入工具创建到<projectRoot>/.cache/openyida/<项目名或任务名>/connector/或该技能更具体的目录，再传给命令；不要写仓库根目录或系统临时目录- 本技能不读写 memory：连接器配置通过 CLI 命令写入宜搭平台，不依赖跨会话的 memory 状态
适用场景
用户需要"接入外部接口"、"调用第三方 API"、"HTTP 连接器"时使用。钉钉官方 OpenAPI 使用 yida-dingtalk-openapi，由它再调用本技能。
触发条件
正向触发：
- "接入外部接口"、"调用第三方 API"
- "HTTP 连接器"
- "打通自建系统"、"API 集成"
- "配置鉴权"、"创建连接器"
危险操作确认
CLI 不执行连接器删除。用户确需删除时，先确认并解除表单、页面、流程和集成自动化中的全部依赖，再根据命令指引前往宜搭平台管理后台手工删除；平台删除不可逆。
异常处理
| 异常场景 | 处理方式 |
|---|---|
| 连接器不存在（connector-id 无效） | 重新执行 openyida connector list 获取有效 ID，不得编造 |
| 鉴权失败（401/403） | 检查鉴权方式和凭证配置，重新创建连接器或更新鉴权账号 |
| API 调用超时 | 检查目标域名是否可达，确认网络连通性后重试 |
| action-id 不存在 | 执行 openyida connector list-actions <connector-id> 重新获取有效 action-id |
| 需要删除连接器 | 执行 openyida connector delete <connector-id> --force 仅查询目标并获取平台指引；确认并解除全部依赖后，在宜搭平台管理后台手工删除 |
| 智能创建解析失败 | 改用 openyida connector gen-template 生成模板，手动填写后再创建 |
Agent 错误处理策略
当 Agent 执行本技能遇到错误时，必须遵循以下默认行为：
| 错误类型 | 默认处理策略 |
|---|---|
| 命令执行失败 | 停止执行，向用户展示错误信息，询问是否重试或调整参数 |
| 参数缺失（connector-id/action-id 等） | 执行 connector list 或 list-actions 获取有效 ID，不得编造 |
| 权限不足 / 登录态失效 | 停止执行，提示用户执行 openyida auth status 检查登录态 |
| 鉴权配置错误 | 停止执行，引导用户检查鉴权方式和凭证配置 |
| 智能创建解析失败 | 降级为模板创建方式，引导用户使用 gen-template |
| 网络超时 | 重试 1 次，仍失败则停止并提示用户检查网络 |
| 用户要求删除连接器 | 明确说明 CLI 不执行删除；仅查询目标并展示平台手工删除指引，不得宣称命令已删除资源 |
| 未知错误 | 停止执行，完整展示错误信息，建议用户反馈问题 |
鉴权方式
| 界面显示 | 内部类型 | 适用场景 |
|---|---|---|
| 无身份验证 | NONE |
公开 API |
| 基本身份验证 | BasicAuth |
用户名密码 |
| API 密钥 | ApiKeyAuth |
Header/Query 传密钥 |
| 钉钉开放平台验证 | DingAuth |
钉钉 OpenAPI |
| 阿里云 API 网关 | AliyunApiGateway |
阿里云网关 |
| 钉钉零信任网关 | DingTrustGW |
零信任网关 |
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- examples/operations-device-alarm.json 1.9 KB
- examples/operations-search-formdata-v2.json 7.1 KB
- examples/operations-search-formdata.json 4.7 KB
- examples/operations-teambition.json 1.4 KB
- examples/operations-yida-attachment.json 4.9 KB
- references/connector-action-format.md 5.5 KB
- templates/api-document-template.md 3.7 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +7 lines d1a43cf4efd6
- 8d ago First seen · 173 lines · 60 tokens per session scan A 3c9d7f1d2058
yida-connector is a skill published in the GitHub repository openyida/openyida (210 stars, last pushed today), licensed MIT. It adds 60 tokens to every session and 2,520 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
new
Create a new project to start development quickly.
channel-manager
Configure IM platform channels (Feishu, WeCom, Weixin, Discord, Telegram, DingTalk) for openclacky. Uses browser automation for navigation; guides the user to paste credentials and perform UI steps. Trigger on: "channel setup", "setup feishu", "setup wecom", "setup weixin", "setup wechat", "setup discord", "setup…
webflow-mcp:cms-best-practices
Expert guidance on Webflow CMS architecture and best practices. Use when planning collections, setting up relationships, optimizing content structure, or troubleshooting CMS issues.
webflow-mcp:cms-collection-setup
Create a new CMS collection in Webflow with specified fields and relationships. Use when setting up blog posts, products, team members, portfolios, or other content types with custom fields.
a0-development
Development guide for extending Agent Zero from current source and DOX. Use for framework architecture, tools, extensions, API/WebUI handlers, agent profiles, prompts, skills, projects, runtime boundaries, and contribution workflow. Load the focused reference files before giving implementation guidance.
doris-debug-deployment
Use for Doris FE/BE startup failures, port conflicts, prioritynetworks misrouting, metadir corruption, and ADD/DROP BACKEND issues.