Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add publu/RoboRun --skill openclawgit clone --depth 1 https://github.com/publu/RoboRunWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/publu/roborun/openclaw)<a href="https://agentmods.dev/skills/publu/roborun/openclaw"><img src="https://agentmods.dev/badge/skills/publu/roborun/openclaw/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/publu/roborun/openclaw"><img src="https://agentmods.dev/badge/skills/publu/roborun/openclaw.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.00730 |
| Opus 5.5 | $0.00021 | $0.00292 |
| Sonnet 5.5 | $0.00010 | $0.00146 |
| Haiku 4.5 | $0.00005 | $0.00073 |
Grade B, and why
roborun scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
curl -s -X POST $ROBORUN_URL/api/behaviors/enable -H 'Content-Type: application/json' -d '{"name":"sentry"}' Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s $ROBORUN_URL/api/health How it starts
The opening of the file, as written. The whole thing — 87 lines — stays where its author put it; the contents beside it link to each section on GitHub.
RoboRun robot control
The robot runs a RoboRun server on the local network. Talk to it over HTTP. Start every session by setting the base URL (honors an operator override):
ROBORUN_URL="${ROBORUN_URL:-http://127.0.0.1:8765}"
The robot also pushes notifications to you via the gateway's webhook
(/hooks/agent) — messages prefixed "RoboRun notification" arrived that way.
When relaying them, keep it to one short message.
Is it up?
curl -s $ROBORUN_URL/api/health
Behaviors (patrol, sentry, follow_person, ...)
List, with running state:
curl -s $ROBORUN_URL/api/behaviors
Start or stop one ("start the patrol" → enable sentry if present, else patrol):
curl -s -X POST $ROBORUN_URL/api/behaviors/enable -H 'Content-Type: application/json' -d '{"name":"sentry"}'
curl -s -X POST $ROBORUN_URL/api/behaviors/disable -H 'Content-Type: application/json' -d '{"name":"sentry"}'
What does the robot see / what happened?
Live detections and pose:
curl -s $ROBORUN_URL/api/state
Recent timeline events (detections, behavior logs, notifications):
curl -s "$ROBORUN_URL/api/run/events"
Camera snapshot metadata: curl -s $ROBORUN_URL/api/camera
Onboard a new robot ("set up roborun on 192.168.1.42")
RoboRun is a CLI — you can do the whole setup from this chat:
pip install ros-agent # if `roborun` isn't on PATH yet
roborun connect 192.168.1.42 # finds rosbridge, classifies the robot, remembers it
roborun connect 192.168.1.42 --move # proves control: clamped 0.5s nudge, then stop
If rosbridge isn't running on the robot, connect prints the exact two
lines to run there — relay them to the user. Ask before --move: it
physically moves the robot. Then start the server with roborun (it
serves the dashboard, MCP, and this HTTP API).
Install behaviors/skills from GitHub
roborun skill add someuser/their-skill # validated without executing, pinned to the commit SHA
roborun skill list # installed skills + pin state
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 87 lines · 52 tokens per session scan B 3a6b1b45ee43
roborun is a skill published in the GitHub repository publu/RoboRun (13 stars, last pushed 1mo ago), licensed MIT. It adds 52 tokens to every session and 730 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
vss-generate-video-calibration
Use this skill when running or tuning AutoMagicCalib on local MP4s, RTSP, or the bundled sample dataset, or when deploying vss-auto-calibration. Do not use for non-AMC calibration or runtime analytics.
vss-manage-alerts
Use this skill when operating VSS alert workflows — real-time monitoring, Alert-Bridge subscriptions, verification verdicts, on-demand verification, always-on operation, Slack notifications, incident queries, or camera onboarding. Not for non-alert analytics.
tiaportal-mcp
A skill for controlling Siemens TIA Portal, the engineering software used to configure Siemens PLCs and HMIs. It works through an MCP server, a tool connection that lets an agent inspect and change projects.
omnisim-world-builder
Build, inspect, run, and debug OmniSim robotics worlds through the first-party MCP tools. Use for requests involving OmniSim scenes, robots, cameras, contacts, physics checks, or screenshots; do not use for unrelated simulators.
asset-management
Manage ServiceNow hardware assets, software licenses, and lifecycle states on almhardware/almlicense — license allocation, CMDB-to-asset linking, warranty tracking, inventory aggregation (HAM/SAM).
qmclaw-workbench
A local simulator for superconducting quantum-bit experiments, including measurements used to study and tune a qubit. It produces bounded synthetic results without connecting to laboratory hardware or quantum cloud services.