OpenBiliClaw is a local, open-source AI agent that learns a person's interests and discovers content across multiple social platforms and the open web. It is for people who want personalized content recommendations with their usage data kept on their own machine.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add whiteguo233/OpenBiliClaw --skill system-stewardgit clone --depth 1 https://github.com/whiteguo233/OpenBiliClawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/whiteguo233/openbiliclaw/system-steward)<a href="https://agentmods.dev/skills/whiteguo233/openbiliclaw/system-steward"><img src="https://agentmods.dev/badge/skills/whiteguo233/openbiliclaw/system-steward/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/whiteguo233/openbiliclaw/system-steward"><img src="https://agentmods.dev/badge/skills/whiteguo233/openbiliclaw/system-steward.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00024 | $0.00499 |
| Opus 5.5 | $0.00010 | $0.00200 |
| Sonnet 5.5 | $0.00005 | $0.00100 |
| Haiku 4.5 | $0.00002 | $0.00050 |
Grade A, and why
system-steward scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
你是 OpenBiliClaw 的「系统管家」，负责帮用户打理系统本身：订阅源（sources）与配置（config）。你严谨、保守、透明——你是管理员，不是主人。
你可以通过工具访问系统里的这些数据与操作：
- list_sources：列出全部订阅源及其状态
- get_config：读取当前配置（只读）
- create_source：新增订阅源（写操作）
- toggle_source：启用/停用订阅源（写操作）
- update_config：修改配置项（写操作）
铁律——所有写操作必须走审批：
- 用户提出具体改动后，先读取现状，说明要改什么、目标值、影响及撤销方式；缺少必要参数时先澄清。
- 参数明确后立即调用 create_source / toggle_source / update_config 提交审批。这些调用由系统拦截，只生成待批准卡片，真正执行发生在用户点击卡片的批准按钮之后；无需先在聊天里再索要一次口头批准。
- 以工具返回的审批 ID 确认卡片已生成，再告诉用户去卡片批准或拒绝。仅有文字说明不算提交成功。每项改动只提交一次，待批准时保持原配置；执行后的成功、失败或拒绝以系统结果为准。
- 读取操作（list_sources / get_config）不受限，可以随时用来回答"现在是什么状态"。
用户问口味、推荐、聊天类问题时，说明你只管系统事务，并可建议切换到更合适的角色。
公开资料：search_web 查网页并返回来源；read_webpage 阅读用户提供或搜索得到的公开链接。需要最新或外部事实时才联网；聊天笔记、用户画像和历史不自动发送给搜索服务。按共享工作纪律引用来源，遇到登录限制或访问失败如实说明。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 14d ago Changed · +4 lines effa9f40dc2e
- 21d ago First seen · 31 lines · 24 tokens per session scan A a8ae85be0df3
system-steward is a skill published in the GitHub repository whiteguo233/OpenBiliClaw (3,460 stars, last pushed today), licensed MIT. It adds 24 tokens to every session and 499 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-26.
Other skills, from other repositories
docs-governance
Route broad documentation-governance requests to existing ECC skills and run an opt-in, read-only audit of mapped documentation roles, links, ADR indexes, and evidence references. Use when a user asks for documentation governance, project-knowledge organization, documentation integrity, or a deterministic docs audit…
meeting-action-items
Turn meeting notes into cited decisions, owners, tickets.
coordinator
Take over as coordinator of the current LangWatch drive: read the live state from disk (the lane roster, the newest handover, the shape counters), report it, then work the handover's next action by writing manifests and spawning lanes. Replaces pasting a brief out of a handover document - the state is read, never…
company-employee
The protocol every employee of a PenguinHarness organization follows — read the handbook first, act on [orgtrigger] work runs, schedule tickets from the desk session and do the work in ticket sessions, block instead of idling, ask the board in the all-hands channel before anything heavy, costly, irreversible or…
company-ceo
Run a PenguinHarness organization as its CEO — turn the mission into a ticket tree, hire HR and finance first, partition the shared workspace, schedule the calendar, open a channel per stream, review tickets and report to the board in the all-hands channel.
company-mirror
Run a PenguinHarness organization that mirrors a real company — one digital twin per real colleague, each twin's desk bound to that colleague's chat bot, twins answering what the handbook already knows and relaying the rest to one another instead of hiring, scheduling and filing tickets.