Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add redfox-data/redfox-community-dsh --skill bilibili-portfolio-searchgit clone --depth 1 https://github.com/redfox-data/redfox-community-dshWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/redfox-data/redfox-community-dsh/bilibili-portfolio-search)<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/bilibili-portfolio-search"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/bilibili-portfolio-search/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/bilibili-portfolio-search"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/bilibili-portfolio-search.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.00448 |
| Opus 5 | $0.00034 | $0.00224 |
| Sonnet 5 | $0.00014 | $0.00090 |
| Haiku 4.5 | $0.00007 | $0.00045 |
Grade A, and why
bilibili-portfolio-search scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
B站搜账号下作品集
📝 简介
B站账号作品列表实时查询工具，根据B站UP主的UID获取该UP主最新发布的视频作品列表，返回实时数据（非缓存/历史数据）。支持游标翻页浏览更多作品。
✨ 功能特性
| 功能模块 | 能力描述 | 核心价值 |
|---|---|---|
| 实时查询 | 输入UID实时获取UP主作品列表 | 获取非缓存的实时数据 |
| 游标翻页 | 支持cursor游标逐页浏览 | 深入浏览UP主更多作品 |
| 数据排序 | 返回结果按播放量降序排列 | 快速定位爆款作品 |
🚀 一键安装
前置条件
- 已获取红狐 hub 的 API Key（
REDFOX_API_KEY）
获取 API Key
请前往 红狐hub 获取 API KEY
配置 API Key
方案1: 以 Qoder 为例，将 REDFOX_API_KEY 添加到 ~/.openclaw/openclaw.json 中：
{ "env": { "REDFOX_API_KEY": "ak_xxxx..." } }
方案2: 终端配置
export REDFOX_API_KEY="ak_xxxx..."
📖 使用指南
直接用自然语言描述需求即可，例如：
- 「查一下UP主 946974 的作品列表」
- 「帮我看看这个B站账号的视频：bilibili.com/space/12345678」
- 「翻页，看下一页作品」
🔄 工作流程
核心执行流程详见
references/core_workflow.md
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 54 lines · 68 tokens per session scan A b15baf2febad
bilibili-portfolio-search is a skill published in the GitHub repository redfox-data/redfox-community-dsh (6 stars, last pushed yesterday), licensed MIT. It adds 68 tokens to every session and 448 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
dsh-hooks-authoring
Instructions for writing and debugging dsh-hooks-plugin scripts, which run during tool or session events such as before a tool call or after it finishes. These scripts return JSON decisions such as allowing, asking about, or denying an action.
web-artifact-designer
A design workflow for producing self-contained HTML or SVG files that open directly in a browser. It covers visual work such as posters, infographics, landing pages, charts, banners, cards, and interface mockups.
dsh-web-pet-developer
Create a pet for the dsh-pet plugin and integrate it into the dsh web GUI — author a v2 pet.json manifest plus an 8-column x 9-row atlas per the Codex/hatch-pet contract (live2d pets, voice packs and status decorations included), drop it into the pet-center user directory or contribute it as a built-in asset under…
company-research-method
A documented process for researching a company using supplied files and selected public sources. It produces a company overview with business details, sourced financial figures, and stated risks.
dsh-plugin-guide
Use when developing, reviewing, packaging, debugging, or answering questions about DeepSeek Harness (DSH) plugins — the plugin-based agent harness on vendored Cordis. Applies the official plugin-development constraints (plugin contract, cordis.yml layers, services/events/effects, tool DSL, bundles/profiles) backed by…
delivery-proof
Delivery proof and the doublecheck report. Use when the work is done and the delivery must be proven — consolidate the spec, test timeline, review verdicts, and verification checks into a doublecheckreport, and only then claim completion.