Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/safeai-lab-x/clawkeeper/gh-issuesnpx skills add SafeAI-Lab-X/ClawKeeper --skill gh-issuesgit clone --depth 1 https://github.com/SafeAI-Lab-X/ClawKeeperWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/safeai-lab-x/clawkeeper/gh-issues)<a href="https://agentmods.dev/skills/safeai-lab-x/clawkeeper/gh-issues"><img src="https://agentmods.dev/badge/skills/safeai-lab-x/clawkeeper/gh-issues.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00116 | $0.08786 |
| Opus 5 | $0.00058 | $0.04393 |
| Sonnet 5 | $0.00023 | $0.01757 |
| Haiku 4.5 | $0.00012 | $0.00879 |
Grade A, and why
gh-issues scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
{ "openclaw": { "requires": { "bins": ["curl", "git", "gh"] }, "primaryEnv": "GH_TOKEN" } } The source is not reproduced here
No licence file
A repository with no LICENSE is all rights reserved by default, so the body is not copied here. The metadata, the measurements and the link are.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 866 lines · 116 tokens per session scan A 9cfc67329014
gh-issues is a skill published in the GitHub repository SafeAI-Lab-X/ClawKeeper (1,023 stars, last pushed 19d ago), with no licence file. It adds 116 tokens to every session and 8,786 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
write-a-prompt
Creates a copy-ready prompt from a rough request, notes, source material, or the current conversation using OpenAI's prompting guidance. Use when the user invokes $write-a-prompt or /write-a-prompt, types a common misspelling such as /write-a-promopt or /wite-a-prompt, asks to "write a prompt for me," asks to turn the…
run-hugging-face-training-smoke
Runs one bounded, private Hugging Face training smoke with immutable inputs, local preflight checks, explicit stop gates, checkpoint verification, and reproducible evidence. Use before spending cloud compute on a longer fine-tuning run.
prepare-training-corpus
Builds and freezes deterministic train, validation, and test corpora with provenance, group-safe splits, manifests, hashes, and prompt-leakage checks. Use before teacher labeling, fine-tuning, or comparing models on generated or retrieved examples.
review-training-data-quality
Audits a candidate or labeled training corpus for distribution collapse, ambiguity, context sufficiency, hard-negative quality, abstention behavior, leakage, and stable label defensibility. Use before scaling teacher calls or starting fine-tuning.
package-private-ml-artifacts
Inventories, hashes, scans, and verifies datasets, adapters, checkpoints, logs, and evaluation evidence before an explicitly approved private upload. Use when ephemeral jobs or handoffs require durable ML artifacts without exposing credentials or unapproved data.
select-and-verify-best-checkpoint
Proves that evaluation ran at the intended cadence, the tracked metric selected the true best checkpoint, and held-out inference loaded that checkpoint. Use with Hugging Face Trainer or compatible training-state artifacts before trusting test metrics.