Row-Bot is a local-first desktop AI assistant that combines language models with memory and tools for working across files, repositories, workflows, and communication channels. It is intended for people who want an assistant that can run locally while keeping application data on their machine.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add siddsachar/row-bot --skill row_bot_status_guidegit clone --depth 1 https://github.com/siddsachar/row-botWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/siddsachar/row-bot/row_bot_status_guide)<a href="https://agentmods.dev/skills/siddsachar/row-bot/row_bot_status_guide"><img src="https://agentmods.dev/badge/skills/siddsachar/row-bot/row_bot_status_guide/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/siddsachar/row-bot/row_bot_status_guide"><img src="https://agentmods.dev/badge/skills/siddsachar/row-bot/row_bot_status_guide.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 106 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.03034 |
| Opus 5.5 | $0.00008 | $0.01214 |
| Sonnet 5.5 | $0.00004 | $0.00607 |
| Haiku 4.5 | $0.00002 | $0.00303 |
Grade A, and why
row_bot_status_guide scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 123 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ROW-BOT STATUS & SELF-MANAGEMENT:
- You have tools to query your own configuration and diagnose issues.
QUERYING STATUS (row_bot_status):
- Use category='overview' for a full summary across all areas.
- Use category='version' to check the Row-Bot version number.
- Use category='model' to check the current Brain model, provider, context window, and the complete active pinned Brain model choices.
- Use category='channels' to see which messaging channels are running.
- Use category='memory' for knowledge graph entity/relation counts.
- Use category='skills' to list Skill Library availability, pinned defaults, and default active skills by surface.
- Use category='tools' to list global enabled/disabled tools, plugin runtime tools, and the effective thread tool scope when an Agent Profile is active.
- Use category='plugins' to inspect installed/enabled plugins, stale legacy plugins moved aside, plugin tools, and plugin channels.
- Use category='mcp' for external MCP servers and their tools.
- Use category='providers' to check provider connections, credential source labels, runtime health, and Quick Choice counts. Model catalog browsing, pinning, and defaults live in Settings -> Models.
- Use category='insights' to check active dream-cycle insights, the last insight analysis time, and recent insight titles.
- Use category='evolution' for controlled self-evolution proposals, action runs, rejections, and curator dry-runs.
- Use category='api_keys' only for legacy/API key storage status. It never shows key values.
- Use category='identity' to check the configured assistant name and personality.
- Use category='tasks' to summarise active scheduled tasks.
- Use category='agents' to inspect current durable Agent Runs, subagents, workflow mirrors, active writer locks, and V1 agent defaults.
- Use category='agent_profiles' to inspect Agent Profile Library counts, enabled/disabled state, sources/scopes, the active thread profile, and whether tools are selected or inherited when a thread is in context.
- Use category='goals' to inspect current Goal Mode status, current-thread goal state, turn budgets, progress, blockers, and verifier failures.
- Use category='vision' to check the Vision model, provider/runtime model, enabled state, camera config, provider/custom-endpoint readiness, and pinned Vision model choices. For custom endpoints, note whether Vision was verified, failed, inconclusive, or skipped because of a manual override.
- Use category='image_gen' to check the current image generation model and pinned Image model choices.
- Use category='video_gen' to check the current video generation model and pinned Video model choices.
- Use category='voice' for the full voice runtime: Talk, Dictate, local vs Realtime Talk, Dictation model, Speech Output model/voice, captions, Realtime readiness, active Row-Bot run status, active-run controls, and recent Realtime diagnostics.
- Use category='config' for context window caps, dream cycle, wiki vault, memory extraction.
- For "what tools do you have available?", answer effective thread tools first when category='tools' reports an active selected-tools Agent Profile; mention the global catalog separately.
- A selected Agent Profile allow-list is runtime-bound: non-selected global tools are not bound to the turn's agent graph while that profile is active.
- A profile with no allow-list inherits all globally enabled tools; do not describe that as a sandbox.
- Avoid saying tools are "maybe blocked" when status reports an active allow-list; say the global tool exists but is not bound under the current profile.
- Use category='designer' to check designer project count and recent projects.
- Use category='updates' to check the app version, update channel, last update check, and available release state.
- Use category='usage' for "how many tokens did I use?": this conversation, the last day, week and month, by model and purpose, with the share read from cache. Cost appears only when the provider reported it.
- Use category='logs' for recent warnings and errors (WARNING+ level, newest first).
- Use category='errors' for recent errors with tracebacks — use this to diagnose failures.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago Changed · +2 lines af3f48a95f5d
- 1mo ago First seen · 121 lines · 21 tokens per session scan A 5e0b1af402f7
row_bot_status_guide is a skill published in the GitHub repository siddsachar/row-bot (1,632 stars, last pushed today), licensed Apache-2.0. It adds 21 tokens to every session and 3,034 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
rich-replies
Shape a reply for Telegram: headings, tables, folds, footnotes, formulas, pictures, slideshows, maps, and buttons (choice, link, copy, mini app) inside the text. Load before a structured answer, a comparison, a report in chat, or whenever you offer the user a choice or a link.
telegram-userbot
A skill for connecting to and working through the owner's personal Telegram account, rather than a Telegram bot. It can read personal chats, search messages, and send messages as the account owner after setup and consent.
rich-post
Send a rich Telegram post to ANOTHER allowlisted chat; not for the current chat reply or plain reports.
update-recovery
Use when an update leaves out owner customizations or they need restoring or merging.
agent-browser
A command-line browser for interactive websites and web apps. It can open pages, inspect clickable elements, fill forms, click buttons, take screenshots, sign in, and read pages whose content is loaded by JavaScript.
watch
A monitoring and briefing workflow that checks unread Telegram messages, email, failed checks, and failed scheduled units, then decides what needs the owner's attention. It can also explain actions such as creating a task, delaying a reminder, ignoring an item, or fixing a failure.