Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add OPPO-Mente-Lab/X-OmniClaw --skill app-searchgit clone --depth 1 https://github.com/OPPO-Mente-Lab/X-OmniClawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/oppo-mente-lab/x-omniclaw/app-search)<a href="https://agentmods.dev/skills/oppo-mente-lab/x-omniclaw/app-search"><img src="https://agentmods.dev/badge/skills/oppo-mente-lab/x-omniclaw/app-search/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/oppo-mente-lab/x-omniclaw/app-search"><img src="https://agentmods.dev/badge/skills/oppo-mente-lab/x-omniclaw/app-search.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00087 | $0.07847 |
| Opus 5 | $0.00044 | $0.03923 |
| Sonnet 5 | $0.00017 | $0.01569 |
| Haiku 4.5 | $0.00009 | $0.00785 |
Grade A, and why
app-search scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 632 lines — stays where its author put it; the contents beside it link to each section on GitHub.
App Search Tool
通过各主流 APP 的 Deep Link 直达搜索页面，浏览结果并为用户提供有价值的总结。
🎯 When to Use
Use this skill when user asks about:
电商购物
✅ 拼多多搜索 - "拼多多搜一下纸巾"、"拼多多有什么便宜的耳机"
生活服务
✅ 美团搜索 - "美团上搜搜附近火锅店"、"帮我在美团找酒店" ✅ 高德地图 - "高德上搜一下加油站"、"帮我找附近停车场"
短视频 / 内容
✅ 抖音搜索 - "抖音搜一下健身教程"、"在抖音看看旅行攻略" ✅ 快手搜索 - "快手搜一下美食做法"、"快手上找一下钓鱼视频" ✅ 小红书搜索 - "小红书搜一下穿搭"、"帮我在小红书找护肤攻略" ✅ 哔哩哔哩搜索 - "B站搜一下编程教程"、"在B站看看数码评测"
知识 / 搜索
✅ 知乎搜索 - "知乎上搜一下如何学Python"、"帮我在知乎找一下理财建议" ✅ 百度搜索 - "百度搜一下天气预报"、"帮我百度一下这个问题"
音乐
✅ OPPO音乐搜索 - "OPPO音乐搜周杰伦"、"帮我在OPPO音乐搜一下晴天"
应用商店
✅ OPPO软件商店搜索 - "OPPO软件商店搜红果短剧"、"帮我在软件商店找抖音"
🛑 工具选择（必读，最易踩坑）
跳转 APP 搜索页只能且必须调用 device(action="open", uri="...")：
| 操作 | ✅ 必须使用 | ❌ 绝对禁止 |
|---|---|---|
| 跳转目标 APP 搜索页 | device(action="open", uri="<deep_link>") |
start_activity(uri=...) / start_activity(package=..., activity=...) / start_activity(component=...) |
为什么禁用
start_activity：第三方 APP（小红书/抖音/拼多多/B 站/快手/知乎等）的 activity 几乎全部不允许从其他进程显式启动。无论你尝试MainActivity/IndexSearchV2Activity/.search.SearchActivity等何种 component 或 package+activity 组合，返回值 100% 都是Unable to find explicit activity class，会浪费 10+ 轮迭代仍无法成功。正确路径：路由表里的 deep link（
xhsdiscover://、snssdk1128://、pinduoduo://等）会经由ACTION_VIEWIntent 被系统自动路由到对应 APP，这正是device(action="open", uri=...)内部的工作；你完全不需要也不应该指定 activity 名。think → action 一致性：如果你在
<think>里写过"使用device(action="open")"，function call 时务必真的调用device，不要切换到start_activity——这是弱模型最常见的失败模式。读到本段时再次自检：本轮要调用的工具名是不是device？
📋 Workflow
标准搜索流程
🚫 禁令：调用
device(action="open", ...)时只传action和uri两个参数，严禁传package_name。系统根据 URI scheme 自动解析目标 APP，手动指定package_name会导致 ActivityNotFound。⚡ 唯一例外 — 百度APP：
baiduboxapp://scheme 实测无法触发搜索，必须使用 HTTPS 链接并指定package_name。✅
device(action="open", uri="imeituan://www.meituan.com/search?q=火锅")❌device(action="open", package_name="com.meituan.android.fe", uri="imeituan://www.meituan.com/search?q=火锅")✅device(action="open", uri="https://m.baidu.com/s?word=天气预报", package_name="com.baidu.searchbox")← 百度例外 ❌device(action="open", uri="baiduboxapp://search?keyword=天气预报")← 实测不可用
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 632 lines · 87 tokens per session scan A 47d2f6de5111
app-search is a skill published in the GitHub repository OPPO-Mente-Lab/X-OmniClaw (261 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 87 tokens to every session and 7,847 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
web-exfiltration-detection
Detect data exfiltration via URL path encoding and chained webfetch navigation. Covers fake trusted UI injection, letter-level URL path exfiltration, and multi-hop navigation hijacking. Use when the agent has web/URL fetch capability and stores user memory or personal context.
browserwing-executor
Control browser automation through HTTP API. Supports page navigation, element interaction (click, type, select), data extraction, accessibility snapshot analysis, screenshot, JavaScript execution, and batch operations.
dev-browser
Browser automation with persistent page state. Use when users ask to navigate websites, fill forms, take screenshots, extract web data, test web apps, or automate browser workflows. Trigger phrases include "go to [url]", "click on", "fill out the form", "take a screenshot", "scrape", "automate", "test the website"…
web-search
This skill should be used when users need to search the web for information, find current content, look up news articles, search for images, or find videos. It uses DuckDuckGo's search API to return results in clean, formatted output (text, markdown, or JSON). Use for research, fact-checking, finding recent…
langbot-testing
Test LangBot WebUI and core product flows with an automated browser and backend logs. Use when validating the configured LangBot frontend, pipeline Debug Chat, model provider setup and test buttons, bot and knowledge-base UI flows, or troubleshooting failed LangBot end-to-end tests.
browse
Use the browse CLI for Browserbase browser automation, Browserbase cloud APIs, Browserbase Functions, templates, web fetch/search, diagnostics, and Browse.sh skill discovery/installation. Use when the user asks to navigate pages, inspect browser state, run local or remote browser sessions, manage Browserbase…