Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/szsip239/teamclaw/qcc-clinpx skills add szsip239/teamclaw --skill qcc-cligit clone --depth 1 https://github.com/szsip239/teamclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/szsip239/teamclaw/qcc-cli)<a href="https://agentmods.dev/skills/szsip239/teamclaw/qcc-cli"><img src="https://agentmods.dev/badge/skills/szsip239/teamclaw/qcc-cli.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00120 | $0.05315 |
| Opus 5 | $0.00060 | $0.02658 |
| Sonnet 5 | $0.00024 | $0.01063 |
| Haiku 4.5 | $0.00012 | $0.00532 |
Grade A, and why
qcc-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 422 lines — stays where its author put it; the contents beside it link to each section on GitHub.
企查查企业背调 + 互联网信息补充
面向电信政企客户经理的企业全维度信息搜集与商机分析工具。以企查查 API(qcc-cli)为主力数据源,agent-browser 互联网搜索为补充。
环境检测(首次运行必须执行)
which qcc && qcc check
which agent-browser
qcc不存在:npm install -g qcc-agent-cliqcc配置缺失:qcc init --authorization 'Bearer <token>'(联系管理员获取 token)agent-browser不存在:提醒用户安装npm install -g agent-browser && agent-browser install --with-deps
CLI 用法
所有命令统一格式,支持位置参数简写:
qcc <类别> <命令> "企业名称或统一社会信用代码"
# 等同于
qcc <类别> <命令> --searchKey "企业名称或统一社会信用代码"
加 --json 获取原始 JSON。
数据采集流程
收到企业名称 {company} 后,按以下三阶段执行。每阶段评估已获取信息,信息充分则跳过后续同类查询。
第一阶段:企查查结构化数据(主力)
1. 企业基础信息
qcc company get_company_registration_info "{company}"
qcc company get_shareholder_info --json "{company}"
qcc company get_actual_controller "{company}"
qcc company get_key_personnel "{company}"
qcc company get_contact_info "{company}"
qcc company get_company_profile "{company}"
qcc company get_external_investments --json "{company}"
qcc company get_branches "{company}"
qcc company get_annual_reports --json "{company}"
get_annual_reports --json返回最近 3 年年报数据。从每条记录的社保信息.城镇职工基本养老保险字段提取参保人数(格式为 "NNN人"),用于生成趋势图表。
2. 资质与荣誉标签
qcc operation get_qualifications "{company}"
qcc operation get_honor_info "{company}"
qcc operation get_ranking_list_info "{company}"
从资质证书中提取:高新技术企业、专精特新、DCMM、CS 认证等。 从荣誉信息中提取:独角兽、瞪羚、5G 工厂、制造业单项冠军等。 榜单数据可能很多(数百条),只取最近 1 年内的关键榜单。
3. 近期动态
qcc company get_change_records "{company}"
qcc operation get_financing_records --json "{company}"
qcc operation get_recruitment_info "{company}"
qcc operation get_bidding_info "{company}"
qcc operation get_news_sentiment --json "{company}"
4. 数字化与跨境评估
qcc ipr get_internet_service_info "{company}"
qcc operation get_import_export_credit "{company}"
get_internet_service_info返回 ICP 网站、APP、小程序、算法备案数量 — 直接反映企业 IT 投入深度。get_import_export_credit有记录 = 有跨境业务 → 服贸通/SD-WAN/国际专线商机。
5. 风险快筛(签约前必查)
qcc risk get_dishonest_info "{company}"
qcc risk get_business_exception "{company}"
qcc risk get_tax_abnormal "{company}"
qcc risk get_administrative_penalty "{company}"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 422 lines · 120 tokens per session scan A a7bef4cd473a
qcc-cli is a skill published in the GitHub repository szsip239/teamclaw (112 stars, last pushed 17d ago), licensed MIT. It adds 120 tokens to every session and 5,315 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
tooluniverse-drug-research
Comprehensive drug profiling — mechanism, primary/secondary targets, drug interactions, clinical-trial status, adverse events (FAERS), pharmacogenomics, and approval history. Use for full drug investigation reports, 'tell me about drug X' queries, and assembling drug profiles for clinicians, researchers, or regulatory…
x-scorecard
OpenSSF Scorecard for assessing open source project security. Check security best practices and compliance. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
memstack-business-gdpr
Use this skill when the user says 'GDPR', 'data protection', 'privacy compliance', 'DPA', 'DSAR', 'data subject request', 'cookie consent', 'privacy audit', 'CCPA', or asks 'do I need GDPR for this repo'. Scans the repository to detect what personal data is collected, classifies sensitivity, determines whether GDPR…
catalyst-center-readonly
Query Cisco Catalyst Center read-only — device inventory, site hierarchy, wireless, assurance health, compliance, software images, events. All 514 read-only API operations reachable through 8 grouped dispatchers. Use when asked what Catalyst Center manages, where a device sits, what its health or compliance state is…
build-audit-logs
Build or review audit trails in TypeScript/JavaScript apps using evlog (pipelines, typed actions, denials, retention, compliance-style reviews). For application code, not for extending the evlog package.
nda-review
Use when the user uploads or pastes a non-disclosure agreement and asks for review, redline, risk assessment, or a recommendation on whether to sign. Identifies missing standard protections, one-sided or unusual provisions, and operational issues; produces a structured report with severity ratings and citations to…