Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add redfox-data/redfox-community-dsh --skill kimi-websearchgit clone --depth 1 https://github.com/redfox-data/redfox-community-dshWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/redfox-data/redfox-community-dsh/kimi-websearch)<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/kimi-websearch"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/kimi-websearch/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/kimi-websearch"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/kimi-websearch.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00076 | $0.00776 |
| Opus 5 | $0.00038 | $0.00388 |
| Sonnet 5 | $0.00015 | $0.00155 |
| Haiku 4.5 | $0.00008 | $0.00078 |
Grade A, and why
kimi-websearch scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Kimi WebSearch
📝 简介
调用 Kimi 联网搜索能力，和kimi直接对话。适用于需要联网实时搜索、AI 辅助信息检索的场景。
✨ 功能特性
| 功能模块 | 能力描述 | 核心价值 |
|---|---|---|
| 异步提交 | 提交搜索关键词到 Kimi WebSearch，返回 taskId | 无需等待，立即获取任务标识 |
| 自动轮询 | 每 5 秒查询任务状态，最多等待 5 分钟 | 自动等待结果，无需手动查询 |
| 进度反馈 | 轮询期间通过 stderr 实时输出等待状态 | 用户可知搜索进度 |
| 结果输出 | 状态变为 completed 后输出完整 JSON | 结构化数据便于 Agent 解析展示 |
| 异常处理 | 覆盖 API Key 缺失、提交失败、超时、任务失败四种场景 | 每种异常有明确提示和处理 |
🔑 鉴权
前往 红狐hub 获取 API Key，通过以下方式配置：
# 方式一：配置文件（如 OpenClaw 的 ~/.openclaw/openclaw.json）
{ "env": { "REDFOX_API_KEY": "ak_xxxx..." } }
# 方式二：终端环境变量
export REDFOX_API_KEY="ak_xxxx..."
🔄 工作流程
Step 1：提取搜索关键词
从用户自然语言描述中提取搜索意图和关键词，作为 inquiry_text 传入。
Step 2：调用搜索脚本
python3 ~/.agents/skills/kimi-websearch/scripts/kimi_search.py "<搜索关键词>"
脚本自动完成：
- 提交搜索：
POST /story/api/kimi/submit，传入{"inquiry_text": "...", "source": "kimi websearch-GitHub"} - 轮询结果：每 5 秒
POST /story/api/kimi/result查询一次，直到状态为completed - 实时反馈：轮询期间通过 stderr 输出等待提示
- 最终输出：状态
completed后输出完整 JSON 结果到 stdout
Step 3：展示结果
脚本返回 JSON 后，提取 data.content 中的 Kimi 回答文本和 data.result 中的引用来源，结构化整理后向用户展示。
📦 依赖
pip3 install requests
⚠️ 错误处理
| 情况 | 处理方式 |
|---|---|
未配置 REDFOX_API_KEY |
提示用户前往 红狐hub 获取 API Key |
| 提交失败 | 输出错误信息，建议用户重试 |
| 轮询超时（5 分钟） | 提示超时，建议稍后重试 |
| 任务失败（status=failed） | 输出失败详情 |
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 70 lines · 76 tokens per session scan A 2633c3241cfe
kimi-websearch is a skill published in the GitHub repository redfox-data/redfox-community-dsh (5 stars, last pushed yesterday), licensed MIT. It adds 76 tokens to every session and 776 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
dsh-hooks-authoring
Instructions for writing and debugging dsh-hooks-plugin scripts, which run during tool or session events such as before a tool call or after it finishes. These scripts return JSON decisions such as allowing, asking about, or denying an action.
web-artifact-designer
A design workflow for producing self-contained HTML or SVG files that open directly in a browser. It covers visual work such as posters, infographics, landing pages, charts, banners, cards, and interface mockups.
dsh-sdk-upgrade
Safely select and install a compatible official @deepseek-ai SDK release for dsh plugin projects (dsh-web, dsh-trading, and similar monorepos) from npm using an isolated worktree, explicit cohort review, CI-equivalent validation, and controlled rollout — including syncing the project's declared DSH host-version floor…
dsh-web-pet-developer
Create a pet for the dsh-pet plugin and integrate it into the dsh web GUI — author a v2 pet.json manifest plus an 8-column x 9-row atlas per the Codex/hatch-pet contract (live2d pets, voice packs and status decorations included), drop it into the pet-center user directory or contribute it as a built-in asset under…
company-research-method
A documented process for researching a company using supplied files and selected public sources. It produces a company overview with business details, sourced financial figures, and stated risks.
dsh-plugin-guide
Use when developing, reviewing, packaging, debugging, or answering questions about DeepSeek Harness (DSH) plugins — the plugin-based agent harness on vendored Cordis. Applies the official plugin-development constraints (plugin contract, cordis.yml layers, services/events/effects, tool DSL, bundles/profiles) backed by…