Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add orziz/odai --skill ribaogit clone --depth 1 https://github.com/orziz/odaiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/orziz/odai/ribao)<a href="https://agentmods.dev/skills/orziz/odai/ribao"><img src="https://agentmods.dev/badge/skills/orziz/odai/ribao/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/orziz/odai/ribao"><img src="https://agentmods.dev/badge/skills/orziz/odai/ribao.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00064 | $0.00712 |
| Opus 5 | $0.00032 | $0.00356 |
| Sonnet 5 | $0.00013 | $0.00142 |
| Haiku 4.5 | $0.00006 | $0.00071 |
Grade A, and why
ribao scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Ribao
把分散的工作证据整理成完整、可信、可直接审阅的周期性汇报。它负责汇报工艺，不替用户决定目标、承诺或对外发布。
确认交付
- 明确汇报周期、受众、用途、语言、现有格式，以及用户要正文、落盘还是提交到外部系统。
- 有既有模板时，先冻结它的标题、日期或周期、全部分区、字段与信息粒度；最终答复先给出同结构的完整正文，缺一不称已整理。未知字段保留原位待补，不删栏位，不用一段摘要或追问替代正文。
- 写、整理或生成通常授权形成正文；保存、提交、发送或发布按用户指令、上下文与系统边界判断，不能确定时停在可审阅产物。
收集事实
- 优先使用用户给出的材料、指定的任务状态和汇报系统规则，再读取当前周期内相关的记录、变更与验证证据；不为显得完整盘点无关历史。
- 提交、任务和对话可以证明实际发生的动作，不能单独推出工时、完成比例、负责人、承诺或业务效果。
- 区分已完成、已验证、进行中、阻塞、风险、待确认、建议与已确定下一动作。没有证据的字段留空或标为待补，不用推测填满。
形成正文
- 每个实质独立的事项单独呈现，写清“做了什么、形成什么结果、有哪些相关验证或影响”；不要把多项成果压成一段笼统总结。
- 完成项、问题与风险、待办、下一安排按既有结构分别表达。建议是候选，不冒充决定；没有完成证据的既有事项保留原状态、责任与日期，并标明待确认或逾期。
- 只保留对受众有用且来源支持的信息。技术细节用来说明结果、风险或决策，不堆文件名和提交数量代替工作价值。
- 缺少工时、比例等字段只阻断依赖它们的填报，不阻断其余正文；先交付完整可审阅部分，再只询问阻断后续动作的最小信息。
验收与交回
交付前按原格式逐项核对周期、标题、日期、分区、必填字段、独立事项、结果、验证、风险和下一动作。正文完成不等于已保存、已发送或已提交；只有获得真实系统响应时才声明外部动作完成。
若由 odai 调用，返回正文、事实来源、未决字段和外部动作状态，由 odai 统一核对目标、边界与最终交付；不另建平行计划或改变用户要求。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 34 lines · 64 tokens per session scan A 15adab9e0919
ribao is a skill published in the GitHub repository orziz/odai (109 stars, last pushed 2d ago), licensed MIT. It adds 64 tokens to every session and 712 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
dsh-run-output
Internal guidance for presenting DeepSeek Harness bridge results (reviews, critiques, delegated runs) back to the user. Read before summarizing any dsh-bridge.mjs output.
dev-qa
A development and quality process for building software, testing it, and checking it for security problems. It separates implementation, quality assurance, and security review while coordinating their handoffs.
promotion
A release-stage workflow for promotion and early user adoption. It asks the user what promotional materials to make before creating anything, and its instructions are written in Chinese.
idea-validation
A structured process for checking whether a product idea is worth building. It researches the market, competitors, and technical feasibility, then records a recommendation and the assumptions behind it.
product-prd
A Chinese-language product-definition and requirements workflow that turns an approved idea into a product definition and a PRD, a detailed product requirements document.
design
A technical design stage that turns a product brief into an implementation plan and a list of small, checkable development tasks.