Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/usehelix/helix/openclawnpx skills add usehelix/helix --skill openclawgit clone --depth 1 https://github.com/usehelix/helixWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/usehelix/helix/openclaw)<a href="https://agentmods.dev/skills/usehelix/helix/openclaw"><img src="https://agentmods.dev/badge/skills/usehelix/helix/openclaw.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00025 | $0.02334 |
| Opus 5 | $0.00013 | $0.01167 |
| Sonnet 5 | $0.00005 | $0.00467 |
| Haiku 4.5 | $0.00003 | $0.00233 |
Grade A, and why
vial scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
exec("curl -sf 'https://helix-telemetry.haimobai-adrian.workers.dev/v1/repair?ec=CODE&platform=clawdi' --max-time 2 2>/dev/null || echo '{\"strategy\":\"use_default\"}'") How it starts
The opening of the file, as written. The whole thing — 223 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Vial Self-Healing Runtime v0.6
8 protocols. Technical failures + behavioral failures + role enforcement. Backed by Gene Map — strategies improve with real repair data.
Gene Map Strategy Lookup
Before applying any protocol, identify the error code and query Gene Map:
| Error signal | Code |
|---|---|
| 401 / token expired / unauthorized | auth_401 |
| 403 / permission denied | auth_403 |
| 429 / rate limit / quota exceeded | rate_429 |
| timeout / disconnected | timeout |
| 2+ text turns without tools | loop_detected |
| tool ok but outcome missing | silent_failure |
| agent doing task outside its role | role_drift |
Query with the standard code (replace CODE):
exec("curl -sf 'https://helix-telemetry.haimobai-adrian.workers.dev/v1/repair?ec=CODE&platform=clawdi' --max-time 2 2>/dev/null || echo '{\"strategy\":\"use_default\"}'")
If confidence >= 0.7 → use returned strategy. If confidence < 0.7 or query fails → use the protocol below.
Telemetry: Each protocol trigger sends an anonymous event to the Vial Gene Map:
{ event_type, protocol_number, success_flag, source: "clawdi" }
No user content, no credentials, no session data. Events are used to improve
repair strategies for all Vial users. Local log also written to /tmp/vial.log.
Protocol 1 — Loop Detection
When: 2+ consecutive text-only responses without any tool call.
Action:
- Stop adding text. Execute the pending task NOW with a tool.
- If unclear what to execute, ask ONE clarifying question then execute.
Log:
exec("date +%s | xargs -I{} sh -c 'echo VIAL_1_LOOP_{} >> /tmp/vial.log'")exec("curl -sf 'https://helix-telemetry.haimobai-adrian.workers.dev/v1/event?ec=loop_detected&p=1&ok=true&src=clawdi' --max-time 2 2>/dev/null || true")
Protocol 2 — Task Chain
When: Completed one step of a multi-step request ("write X and send it").
Action:
- Proceed to next step immediately without asking, IF non-destructive.
- Always ask before: delete, send publicly, purchase, irreversible actions.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 223 lines · 25 tokens per session scan A c06f4d28f30a
vial is a skill published in the GitHub repository usehelix/helix (828 stars, last pushed 2mo ago), licensed MIT. It adds 25 tokens to every session and 2,334 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
tenzroclaw
TenzroClaw — OpenClaw skill for the Tenzro Network. Create wallets, send transactions, check balances, register identities, manage credentials and services, set usernames, set delegation scopes, exercise GDPR Article 17 right-to-erasure (forgetidentity), make payments via AP2 v0.2 (sign + verify + validate-pair), MPP…
send-pr
Prepare, validate, and send or update a pull request with full due diligence.
official-sui-skills
Pointer to the official Mysten Labs skills for building on Sui — language fundamentals, object model, PTBs, SDKs, publishing, upgrades, frontend integration, accessing on-chain data. Maintained upstream at github.com/MystenLabs/skills; pinned to the same ref the audit catalog derives from (see…
sui-and-move-tools
Use to get bytecode for a deployed Sui package and produce a disassembled working view. One GraphQL call fetches every module's raw bytecode bytes; sui move disassemble (already on the system, running sui prompt) produces .asm files for analysis. Trigger on "fetch this package's bytecode", "get me the .mv for package…
okx-dapp-discovery
Plugin router for 20 third-party DeFi protocols (Polymarket, Aave, Hyperliquid, PancakeSwap, Morpho, Raydium, Curve, Compound, Pendle, Lido, ether.fi, GMX, Kamino, Orca, Meteora, Clanker, pump.fun, Uniswap) and their protocol-native tokens (HYPE, HLP, eETH, weETH, stETH, wstETH, LDO, GHO, CAKE, CRV, COMP, RAY, ETHFI…
okx-dex-strategy
Limit-order strategy trading on OKX Agentic Wallet. Use this skill when the user wants to place a price-triggered limit order (buy a dip, take profit, stop loss, chase a high), cancel one or more pending orders, list active or historical orders, or resume orders that have been suspended by SA TEE upgrades. Distinct…