Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add znlgis/opengis-skills --skill openclawgit clone --depth 1 https://github.com/znlgis/opengis-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/znlgis/opengis-skills/openclaw)<a href="https://agentmods.dev/skills/znlgis/opengis-skills/openclaw"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/openclaw/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/znlgis/opengis-skills/openclaw"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/openclaw.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.01874 |
| Opus 5 | $0.00025 | $0.00937 |
| Sonnet 5 | $0.00010 | $0.00375 |
| Haiku 4.5 | $0.00005 | $0.00187 |
Grade A, and why
openclaw scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.
项目地址： https://github.com/openclaw/openclaw
官网 / 文档： https://openclaw.ai ｜ https://docs.openclaw.ai
许可证： MIT ｜ 语言： TypeScript 发布频道： latest / beta / dev（参见 GitHub Releases）
⚠️ OpenClaw 的助手可以执行命令、读写文件、控制设备并接入你的私人聊天账号。对外暴露前务必阅读官方 Security 与 Exposure runbook，并配置沙箱与访问控制。
概述
OpenClaw 是「本地优先、单一信任边界、面向个人助手场景的多通道 AI Gateway」。聊天平台只是入口，真正的核心是常驻的 Gateway（控制平面），负责会话、通道、模型、工具、节点、技能、插件、配置与安全策略。
- 本地优先 Gateway：单一控制平面，统一管理 sessions / channels / tools / events。
- 多通道接入：WhatsApp、Telegram、Slack、Discord、Google Chat、Signal、iMessage、IRC、Microsoft Teams、Matrix、飞书(Feishu)、LINE、Mattermost、Nextcloud Talk、Nostr、Synology Chat、Tlon、Twitch、Zalo、微信(WeChat)、QQ、WebChat 等。
- 多智能体路由：把不同通道/账号/对端路由到隔离的 agent（独立 workspace 与会话）。
- 工具与沙箱：每类工具可 allow/ask/deny；典型默认放行
bash/process/read/write/edit/sessions_*，默认拒绝browser/canvas/nodes/cron/discord/gateway。 - 节点(Nodes)：手机/桌面作为节点通过 Gateway WebSocket 配对，暴露设备能力（语音、屏幕、Canvas）。
- Control UI / Canvas / 语音：可在 macOS/iOS/Android 上听说，并渲染可交互的实时 Canvas。
安装与启动
推荐用引导式 onboard（支持 macOS / Linux / Windows）：
npm install -g openclaw@latest
# 或 pnpm add -g openclaw@latest
# 引导设置 Gateway、workspace、通道、技能，并安装常驻守护进程（launchd/systemd 用户服务）
openclaw onboard --install-daemon
# Gateway 管理
openclaw gateway status
openclaw gateway stop
openclaw gateway --port 18789 --verbose # 默认端口 18789
最小配置 ~/.openclaw/openclaw.json（仅设置模型与默认值，JSON5 语法）：
{
agent: {
model: "<provider>/<model-id>",
},
}
完整配置项见官方 Configuration。也支持 Docker 安装 与 Nix。
发布通道：latest（稳定，tag vYYYY.M.D）、beta（预发布）、dev（main 头部）。
典型工作流
1. openclaw onboard --install-daemon # 初始化 Gateway + workspace + 通道
2. 在 onboard 中接入至少一个聊天通道（如 Telegram）与一个模型 Provider
3. 在手机用 Telegram/WhatsApp 直接与助手对话；桌面用 Control UI 观察与控制
4. 按需开启工具（bash/process/...）、节点（设备能力）、cron（定时任务）
5. 暴露到公网前：配置沙箱、访问控制，按 Exposure runbook 加固
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 136 lines · 50 tokens per session scan A 2a9aa3b74d9b
openclaw is a skill published in the GitHub repository znlgis/opengis-skills (60 stars, last pushed yesterday), licensed MIT. It adds 50 tokens to every session and 1,874 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
developing-genkit-js
Develop AI-powered applications using Genkit in Node.js/TypeScript. Use when the user asks about Genkit, AI agents, flows, or tools in JavaScript/TypeScript, or when encountering Genkit errors, validation issues, type errors, or API problems.
transformers-js
Use Transformers.js to run state-of-the-art machine learning models directly in JavaScript/TypeScript. Supports NLP (text classification, translation, summarization), computer vision (image classification, object detection), audio (speech recognition, audio classification), and multimodal tasks. Works in browsers and…
chat-sdk
Build multi-platform chat bots with Chat SDK (chat npm package). Use when developers want to (1) Build a Slack, Teams, Google Chat, Discord, Telegram, GitHub, Linear, or WhatsApp bot, (2) Use Chat SDK to handle mentions, direct messages, subscribed threads, reactions, slash commands, cards, modals, files, or AI…
elizaos
Use when the task involves elizaOS core runtime concepts, plugins, actions, providers, evaluators, services, memories, state composition, or upstream elizaOS development. Covers the main abstractions and the TypeScript runtime mental model.
ax-signature
This skill helps an LLM generate correct DSPy signature code using @ax-llm/ax. Use when the user asks about signatures, s(), f(), field types, string syntax, fluent builder API, validation constraints, or type-safe inputs/outputs.
ax-cpp-ai
Use when writing C++ code with axllm for named deployment profiles, generic provider clients, model selection, OpenAI-compatible calls, Responses, Gemini, Anthropic, routers, and balancers.