Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xyva-yuangui/XyvaClaw --skill system-controlgit clone --depth 1 https://github.com/xyva-yuangui/XyvaClawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xyva-yuangui/xyvaclaw/system-control)<a href="https://agentmods.dev/skills/xyva-yuangui/xyvaclaw/system-control"><img src="https://agentmods.dev/badge/skills/xyva-yuangui/xyvaclaw/system-control/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xyva-yuangui/xyvaclaw/system-control"><img src="https://agentmods.dev/badge/skills/xyva-yuangui/xyvaclaw/system-control.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 200 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Data Exfiltration · line 212 Code scans file system directories looking for sensitive files. This could be reconnaissance for credential theft.Fix: Remove unnecessary filesystem scanning. If file access is needed, use explicit, scoped paths. Avoid reading ~/.ssh, ~/.aws, or credential directories.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00058 | $0.01665 |
| Opus 5 | $0.00029 | $0.00833 |
| Sonnet 5 | $0.00012 | $0.00333 |
| Haiku 4.5 | $0.00006 | $0.00167 |
Grade A, and why
system-control scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s ifconfig.me How it starts
The opening of the file, as written. The whole thing — 237 lines — stays where its author put it; the contents beside it link to each section on GitHub.
System Control (macOS)
macOS 系统控制助手。触发后必须先询问用户确认，再执行操作。
| 触发场景 | 询问确认内容 |
|---|---|
| 系统查询 | 确认查询类型 (CPU/内存/磁盘/电池) |
| 应用管理 | 确认操作类型 (打开/关闭/切换)、目标应用 |
| 通知发送 | 确认通知内容、标题、声音 |
| 音量调节 | ⚠️ 确认当前音量、目标音量、是否静音 |
| 进程管理 | ⚠️ 确认进程名称、操作类型 (查看/终止) |
执行流程: 触发 → 询问用户 → 用户确认 → 执行操作 → 返回结果
安全规则: 强制退出应用前必须确认 | 音量>80 需警告 | 优先使用 trash 删除
Full docs: read SKILL-REFERENCE.md
Monitor and control macOS system functions via native commands and AppleScript.
1. System Information
# Hardware overview
system_profiler SPHardwareDataType 2>/dev/null | grep -E "Model|Chip|Memory|Serial"
# CPU & memory usage (snapshot)
top -l 1 -s 0 | head -12
# Disk usage
df -h / | tail -1
# Battery status (laptops)
pmset -g batt
# Network info
ifconfig en0 | grep "inet " && networksetup -getairportnetwork en0 2>/dev/null
# Uptime
uptime
# macOS version
sw_vers
Bundled script for quick system report
python3 {baseDir}/scripts/sysinfo.py [--json]
Returns: CPU%, memory%, disk%, battery%, network status, uptime.
2. Application Management
# List running visible apps
osascript -e 'tell application "System Events" to get name of every process whose visible is true'
# Launch an app
open -a "Safari"
open -a "Visual Studio Code"
# Quit an app (graceful)
osascript -e 'tell application "Safari" to quit'
# Force-quit an app
kill -9 $(pgrep -x "AppName")
# Get frontmost app
osascript -e 'tell application "System Events" to get name of first process whose frontmost is true'
# List all windows of an app
osascript -e 'tell application "System Events" to tell process "Safari" to get name of every window'
# Bring app to front
osascript -e 'tell application "Safari" to activate'
3. Notifications
# Send a macOS notification
osascript -e 'display notification "消息内容" with title "标题" subtitle "副标题" sound name "default"'
# Notification with custom sound
osascript -e 'display notification "提醒" with title "助手提醒" sound name "Glass"'
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 237 lines · 58 tokens per session scan A 7c3e5b2c1798
system-control is a skill published in the GitHub repository xyva-yuangui/XyvaClaw (21 stars, last pushed 1mo ago), licensed MIT. It adds 58 tokens to every session and 1,665 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
imap-smtp-email
Read and send email via IMAP/SMTP. Check for new/unread messages, fetch content, search mailboxes, mark as read/unread, and send emails with attachments. Works with any IMAP/SMTP server including Gmail, Outlook, 163.com, vip.163.com, 126.com, vip.126.com, 188.com, and vip.188.com.
youdaonote
A command-line skill for managing Youdao Cloud Notes, a Chinese note-taking service. It supports notes, to-do items, saved web pages, searches, and folders.
apple-reminders
Manage Apple Reminders via remindctl CLI: list, add, edit, complete, delete. Supports lists, date filters, and JSON output. Syncs to iOS devices.
bear-notes
Create, search, and manage Bear notes via the grizzly CLI. Supports tags, x-callback-url, and JSON output.
openhue
Control Philips Hue lights and scenes: on/off, brightness, color, color temperature, rooms, and scene activation via openhue CLI.
sonos
Control Sonos speakers: discover, play/pause, volume, grouping, favorites, and queue management via sonos CLI.