Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/understudy-ai/understudy/healthchecknpx skills add understudy-ai/understudy --skill healthcheckgit clone --depth 1 https://github.com/understudy-ai/understudyWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00046 | $0.01106 |
| Opus 5 | $0.00023 | $0.00553 |
| Sonnet 5 | $0.00009 | $0.00221 |
| Haiku 4.5 | $0.00005 | $0.00111 |
Grade A, and why
healthcheck scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 145 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Understudy Host Hardening
Overview
Assess the host that runs Understudy, keep host controls separate from Understudy configuration, and require explicit approval before any change.
Core Rules
- Start with read-only checks.
- Require explicit approval before any state-changing action.
- Do not modify remote access settings until the current access path is confirmed.
- Prefer reversible changes with a rollback plan.
- Never claim Understudy itself changes the host firewall, SSH policy, or OS update settings.
- If identity or role is unclear, provide recommendations only.
- Present user choices as numbered lists.
Read-Only Workflow
- Establish context:
- OS and version
- local console vs SSH/RDP/tunnel/tailnet access
- admin/root availability
- public exposure, reverse proxy, or private-only reachability
- backups, disk encryption, and automatic security updates
- Run host checks:
uname -a,sw_vers,cat /etc/os-release- Linux:
ss -ltnup,ufw status,firewall-cmd --state,nft list ruleset - macOS:
lsof -nP -iTCP -sTCP:LISTEN,/usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate,pfctl -s info - macOS backups:
tmutil status
- Run Understudy checks:
understudy security --auditunderstudy status --jsonunderstudy health --jsonunderstudy logs --tail 100understudy doctor --deepwhen broader local diagnostics are needed
Ask once for permission to run read-only checks. If granted, infer as much as possible from commands before asking follow-up questions.
Risk Profiles
Offer one of these numbered defaults after the host context is known:
- Home / workstation balanced
- Remote / headless hardened
- Developer convenience with explicit exposure warnings
- Custom constraints supplied by the user
Remediation Plan
Always present the plan before making changes. Include:
- target profile
- current posture summary
- gaps vs target
- exact commands to run
- rollback or access-preservation notes
- credential and file-permission hygiene notes
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 145 lines · 46 tokens per session scan A f87a151fda6e
healthcheck is a skill published in the GitHub repository understudy-ai/understudy (456 stars, last pushed 2mo ago), licensed MIT. It adds 46 tokens to every session and 1,106 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
release-openclaw-maintainer
Prepare or verify OpenClaw stable, beta, and extended-stable releases, including backport discovery, changelogs, release notes, publish commands, and artifacts.
openclaw-testing
Choose, run, rerun, or debug OpenClaw tests, CI checks, Docker E2E lanes, release validation, and the cheapest safe verification path.
autoreview
Structured Codex, Claude, Amp, Pi, or Kimi code review when explicitly requested.
release-openclaw-ci
Run, watch, debug, and summarize OpenClaw full release CI, release checks, live provider gates, install/update proofs, and release-secret preflights.
openclaw-ci-limits
Manage OpenClaw GitHub Actions and Blacksmith CI capacity, runner-registration budgets, fanout caps, main-push single-flight, shard sizing, hosted-runner offload, queue health, and safe ramp-down/ramp-up changes. Use when tuning .github/workflows/, docs/ci.md, CI runner labels, matrix max-parallel…
auto-qa
Continuously audit, live-test, and stress-test the current OpenClaw codebase across at least ten independently scoped subsystem lanes; default to 100 independently verified, landed root-cause fixes, maintain an evidence-backed report, and announce each merged pull request immediately. Use for OpenClaw-wide autonomous…