Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zeenie-ai/OpenCompany --skill process-manager-skillgit clone --depth 1 https://github.com/zeenie-ai/OpenCompanyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zeenie-ai/opencompany/process-manager-skill)<a href="https://agentmods.dev/skills/zeenie-ai/opencompany/process-manager-skill"><img src="https://agentmods.dev/badge/skills/zeenie-ai/opencompany/process-manager-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zeenie-ai/opencompany/process-manager-skill"><img src="https://agentmods.dev/badge/skills/zeenie-ai/opencompany/process-manager-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 20 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- medium Privilege Escalation · line 20 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.00954 |
| Opus 5 | $0.00020 | $0.00477 |
| Sonnet 5 | $0.00008 | $0.00191 |
| Haiku 4.5 | $0.00004 | $0.00095 |
Grade B, and why
process-manager-skill scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
**Blocked commands:** `rm`, `rmdir`, `del`, `rd`, `Remove-Item`, `format`, `mkfs`, `dd`, `shred`, `chmod 777` Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **bash-skill** -- Linux/macOS (apt, brew, lsof, kill, curl) How it starts
The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Process Manager Tool
Manage long-running processes with full system PATH access. Use this for anything that needs npm, python, node, or runs as a persistent server/watcher.
Security
The process manager blocks destructive file commands to prevent accidental deletion outside the agent's workspace. Use shell_execute for file operations instead (sandboxed, no PATH, confined to workspace).
Blocked commands: rm, rmdir, del, rd, Remove-Item, format, mkfs, dd, shred, chmod 777
Allowed: npm, python, node, pip, cargo, go, servers, build tools, installers
Operations
start
Launch a process. Output streams to the Terminal tab and is saved to log files.
{"operation": "start", "name": "dev-server", "command": "python -m http.server 8080"}
stop
Kill a process and its entire process tree.
{"operation": "stop", "name": "dev-server"}
restart
Stop then re-launch with the same command.
{"operation": "restart", "name": "dev-server"}
list
Show all running processes for this workflow.
{"operation": "list"}
get_output
Read output from a process's log file. Use tail to get last N lines, stream to choose stdout or stderr.
{"operation": "get_output", "name": "dev-server", "stream": "stdout", "tail": 20}
Returns {"lines": [...], "total": 150, "file": "/path/to/stdout.log"}.
send_input
Write text to a process's stdin (newline appended automatically).
{"operation": "send_input", "name": "dev-server", "text": "quit"}
Shell vs Process Manager
| Need | Tool | Why |
|---|---|---|
ls, cat, find, grep |
shell_execute | Sandboxed, fast, no PATH |
rm, mv, cp, file ops |
shell_execute | Sandboxed, confined to workspace |
npm install, pip install |
process_manager | Needs PATH |
python script.py |
process_manager | Needs PATH |
npm run dev, flask run |
process_manager | Long-running, streams output |
| Dev servers, watchers | process_manager | Persistent, log files |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 107 lines · 41 tokens per session scan B 26399d1a36ce
process-manager-skill is a skill published in the GitHub repository zeenie-ai/OpenCompany (893 stars, last pushed yesterday), licensed MIT. It adds 41 tokens to every session and 954 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
imsg
Use the imsg CLI from OpenClaw agents for iMessage/SMS DMs, groups, replies, reactions, polls, watching, and private-API actions.
control-ui
Operate and troubleshoot the OpenClaw Control UI: navigate connected clients, organize sessions, build session dashboards, and handle direct or Tailscale-hosted Gateways.
gog
Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.
peekaboo
Capture and automate macOS UI with the Peekaboo CLI.
wacli
Send third-party WhatsApp messages or sync/search WhatsApp history via wacli, not normal active chats.
apple-reminders
List, add, edit, complete, or delete Apple Reminders and reminder lists via remindctl.