A connector for OpenList, a file-management service with an HTTP API. It can browse and search files, handle selected file operations, and inspect storage information.

Use it to sign in or out, browse directories and trees, search files, create folders, upload UTF-8 text files, rename, move, copy or delete files, inspect storage and drivers, or make restricted API requests.

It removes repetitive manual file-management work while keeping sessions in protected local files. It also limits general API requests to the service's API paths and supports only text uploads with size and hash checks.

openlist — Skill for Claude Code and Codex by uvwt: A connector for OpenList, a file-management service with an…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/uvwt/agentdock-skills/openlist

Any agent

npx skills add uvwt/agentdock-skills --skill openlist

Clone the repo

git clone --depth 1 https://github.com/uvwt/agentdock-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/uvwt/agentdock-skills/openlist.svg)](https://agentmods.dev/skills/uvwt/agentdock-skills/openlist)

Your own site

<a href="https://agentmods.dev/skills/uvwt/agentdock-skills/openlist"><img src="https://agentmods.dev/badge/skills/uvwt/agentdock-skills/openlist.svg" alt="Measured on agentmods" height="20"></a>

Per session 38 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,103 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00038	$0.01103
Opus 5	$0.00019	$0.00551
Sonnet 5	$0.00008	$0.00221
Haiku 4.5	$0.00004	$0.00110

Measured 4d ago against content hash cc8f026a0da1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

openlist scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

The scan reads SKILL.md. This mod also ships 2 executable files (run.py, tests/test_run.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/openlist/SKILL.md · 80 lines

How it starts

The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.

OpenList Skill

把 OpenList v4 的 HTTP API 封装为 AgentDock 原生 Skill。

能力

服务状态与公开配置检查
登录、登出、本地会话保存与清理
当前用户查询
文件/目录列表、详情、目录树与搜索
新建目录、上传 UTF-8 文本文件、重命名、移动、复制、删除
管理员存储列表、驱动列表
受限通用 /api/* JSON 请求

默认连接

默认连接 http://127.0.0.1:5244。可在调用中传 base_url，或设置 OPENLIST_URL。

登录成功后默认把 token 保存到 $XDG_STATE_HOME/openlist-skill/session.json；未设置 XDG_STATE_HOME 时使用 ~/.local/state/openlist-skill/session.json。目录权限为 0700、文件权限为 0600。也可通过 OPENLIST_SESSION_FILE 指定会话文件，在单次调用中传 token，或设置 OPENLIST_TOKEN。

AgentDock 安装会通过 OPENLIST_SESSION_FILE 将私有会话保存在 ~/.agentdock/skill-data/openlist/session.json，因此升级不会迁移或丢失当前登录态。

环境变量

变量	类型	必填	说明
`OPENLIST_URL`	config	否	OpenList 服务地址，默认 `http://127.0.0.1:5244`
`OPENLIST_TOKEN`	secret	否	直接提供访问令牌；未配置时尝试读取本地会话
`OPENLIST_SESSION_FILE`	config	否	自定义会话文件路径
`XDG_STATE_HOME`	config	否	未配置会话文件时的可移植状态目录

上传

upload 操作通过 OpenList 官方 /api/fs/put 接口上传 UTF-8 文本，默认限制 1 MiB，最高允许 10 MiB，并校验 SHA-256。

安全约束

base_url 仅允许 http/https，禁止 URL 内嵌用户名和密码。
通用请求仅允许 /api/* 路径和 GET/POST/PUT/PATCH/DELETE 方法。
登录结果默认不回显 token；只有显式传 return_token: true 才返回。
不包含 OpenList 上游源码或二进制，仅提供 API 适配层；OpenList 本身继续遵循其 AGPL-3.0 许可证。

辅助脚本执行

Skill 本体是本说明文档。确需调用包内辅助脚本时，在 Skill 包根目录使用相对路径执行；运行宿主负责切换到包根目录并把所需变量注入当前子进程。

printf '%s' '{"skill_action":"<动作>"}' | python3 run.py

输入必须是 JSON 对象。写操作仍按本文档中的确认规则执行。

动作	用途
`status`	Check OpenList public settings endpoint and report connectivity.
`login`	Login to OpenList; saves token locally by default and does not echo it unless return_token=true.
`logout`	Logout from OpenList and clear the locally saved session by default.
`me`	Return the current authenticated OpenList user.
`list`	List a directory through /api/fs/list; guest access is supported when OpenList allows it.
`get`	Get file or directory details and raw URL through /api/fs/get.
`dirs`	List child directories through /api/fs/dirs.
`search`	Search the OpenList index.
`mkdir`	Create a directory.
`rename`	Rename a file or directory.
`move`	Move one or more names between directories.
`copy`	Copy one or more names between directories.
`remove`	Remove one or more names from a directory.
`upload`	Upload a small UTF-8 text file through /api/fs/put. Designed for safe automation and verification.
`storage-list`	List configured storages (admin token required).
`driver-list`	List OpenList storage driver definitions (admin token required).
`api-request`	Call an OpenList JSON API endpoint not covered by a dedicated action.
`session-status`	Show whether a local OpenList session token is saved without revealing it.
`session-clear`	Delete the locally saved OpenList session token.

Read the full file on GitHub · 80 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago First seen · 80 lines · 0 tokens per session scan A cc8f026a0da1

Subscribe to this mod's changes

openlist is a skill published in the GitHub repository uvwt/agentdock-skills (2 stars, last pushed 5d ago), licensed Apache-2.0. It adds 38 tokens to every session and 1,103 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

agentdock ai-agents skills

claude-md-improver

Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Scans for all CLAUDE.md files, evaluates quality against templates, outputs quality report, then makes targeted updates. Also use when the user mentions "CLAUDE.md maintenance" or "project…

anthropics/claude-plugins-official · 82 tokens

agent-platform-rag-engine-management

Manage and query Agent Platform RAG Engine Corpora and retrieve grounded contexts using the Google GenAI SDK. Use when listing RAG corpora or files, inspecting a corpus, retrieving contexts, or generating content grounded in a RAG corpus. Do not use for standard database queries (use SQL/Spanner skills), Google…

google/skills · 85 tokens

gke-reliability

Improves GKE workload reliability, using PDBs, health probes, and topology spread constraints. Use when configuring GKE workload reliability, setting up PDBs, or configuring GKE health probes (liveness, readiness, startup). Don't use for disaster recovery setup or full cluster backups (use gke-backup-dr instead).

google/skills · 73 tokens

gke-workload-security

Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (auditcluster.sh), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny…

google/skills · 181 tokens

agent-platform-model-registry

Agent Platform Model Registry Management. Use when you need to upload, list, describe, update, or delete machine learning models (and their versions) in the Agent Platform Model Registry. Don't use for model training, model deployment to endpoints, or managing non-Agent Platform models.

google/skills · 60 tokens

google-cloud-solution-agentic-analytics-spark-knowledge-catalog

Discovers requirements and generates guidance to design and deploy a governed, secure agentic-analytics solution for data that's distributed across Google Cloud, other cloud providers, or on-premises. Data that's outside Google Cloud (such as data from Databricks, Snowflake, Salesforce, SAP, or Oracle systems) is…

google/skills · 138 tokens