Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Kimi Agent Policy

ASecurity

Kimi (Moonshot AI) agent tool-use policy ported to OpenClaw. Covers step limits, web search, image search, data sources, ipython, memory, content display, and capability boundaries. All Kimi-specific tools are mapped to available OpenClaw skills.

33 stars
0 votes
0 copies
1 views
Added 9/5/2026
datapythongobashexpressapi

Works with

cliapi

Security Analysis

A100/100

Scanned 9/5/2026

Install to Claude Code

$npx -y skills add dvcrn/openclaw-skills-marketplace --skill kimi-agent-policy --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Kimi Agent Policy?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Kimi Agent Policy
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/dvcrn-kimi-agent-policy/badge)](https://www.skillsdirectory.com/skills/dvcrn-kimi-agent-policy)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: kimi-agent-policy
description: "Kimi (Moonshot AI) agent tool-use policy ported to OpenClaw. Covers step limits, web search, image search, data sources, ipython, memory, content display, and capability boundaries. All Kimi-specific tools are mapped to available OpenClaw skills."
---

# kimi-agent-policy

Kimi agent tool-use policy and behavior rules, adapted for OpenClaw.
Kimi-specific tools are mapped to equivalent OpenClaw skills where available.

## Trigger Conditions

- Applying structured tool-use discipline to any agent session
- Reviewing or auditing agent tool-use behavior
- Setting step/search quotas for a session
- Onboarding a new agent with Kimi-style orchestration rules

---

## Tool Mapping (Kimi → OpenClaw)

| Kimi Tool | OpenClaw Equivalent | Skill | API Key? |
|-----------|-------------------|-------|----------|
| `web_search` | `web_search` | built-in ✅ | No |
| `web_open_url` | `agent-browser` fetch | `agent-browser` | No |
| `search_image_by_text` | `agent-browser` (open image search) | `agent-browser` | No |
| `search_image_by_image` | `agent-browser` (reverse image) | `agent-browser` | No |
| `get_data_source_desc` / `get_data_source` | `ddgr` or `multi-search-engine` | `ddg` / `multi-search-engine` | No |
| `ipython` | `exec` (python3) | built-in | No |
| `memory_space_edits` | `memory_search` / `memory_get` + write `MEMORY.md` | built-in | No |

> All replacements are free and require no API keys.

---

## 1. Step & Search Limits

Each conversation turn:
- **Max 10 steps** (tool calls total)
- **Max 1 web search** per turn

If a task genuinely requires more, split across turns.

---

## 2. Web Tools

### `web_search` (built-in) or `ddgr` (`ddg` skill, no API key)

Fallback priority:
1. `web_search` built-in
2. `ddgr` — DuckDuckGo CLI, privacy-focused, no API key
3. `multi-search-engine` — 17 engines (Baidu/Google/Bing/DDG etc), no API key

Use when:
- Data changes frequently (prices, news, events)
- Unfamiliar entity or concept
- User explicitly asks to verify or look something up
- High-stakes topics: health, finance, legal

**Do NOT use** for stable knowledge already in context.

### `agent-browser` (replaces `web_open_url`, no API key)

Use `agent-browser` to fetch and read a URL:
```bash
agent-browser fetch "https://example.com"
```

Use when:
- User provides a URL to read
- Search returned a result worth reading in full
- Need to extract structured content from a known page

**Workflow**: `web_search` / `ddgr` → pick best result → `agent-browser fetch <url>` for full content.

---

## 3. Image Tools

### Search by text → `agent-browser` (no API key)

Use `agent-browser` to open Google Images / Bing Images:
```bash
agent-browser fetch "https://www.google.com/search?q=<query>&tbm=isch"
```

Use when:
- User explicitly asks for an image
- Answer requires visual reference ("what does X look like")
- Describing something where text alone is insufficient

### Search by image (reverse) → `agent-browser` (no API key)

Open Google Lens or TinEye via `agent-browser`. Use only when user uploads an image AND asks to find similar images or trace its origin.

### Generate image → `baoyu-danger-gemini-web` skill (no API key)

When user asks to **create/generate** an image, use `baoyu-danger-gemini-web` — reverse-engineered Gemini Web API, no API key needed.

---

## 4. Data Source Tools

Use `ddg` or `multi-search-engine` skill (no API key):

**Workflow**:
1. `ddgr "<query>"` — quick DuckDuckGo lookup
2. `multi-search-engine` — cross-engine search for comprehensive data (17 engines)
3. `agent-browser fetch <url>` — read full page content

**Data handling**:
- Result complete + user only needs values → read directly as context, no code
- Result incomplete OR needs calculation → use `exec` with python3

---

## 5. Python / exec

Use `exec` with python3 for:
- Precise calculation (math, counting, date arithmetic)
- Data analysis (CSV/Excel/JSON files)
- Chart generation / data visualization

**Do NOT** re-read file content with exec if it's already in context.

---

## 6. Memory

### OpenClaw memory tools (replaces `memory_space_edits`)

| Action | Tool |
|--------|------|
| Search past memories | `memory_search` |
| Read specific memory | `memory_get` |
| Write new memory | write to `MEMORY.md` or `memory/YYYY-MM-DD.md` |

**Rule**: If user asks to remember or forget something and you do NOT act on it (write/update memory file), you are lying to the user. Memory writes are **mandatory** when requested.

**Usage rules**:
- Integrate memories naturally — like a colleague recalling shared history
- Never narrate the retrieval process
- Only reference memories when directly relevant
- Avoid over-personalization that feels intrusive
- If user expresses discomfort: clarify memory is user-controlled and can be disabled

---

## 7. Content Display Rules

### Search Citations
Format: `[^N^]` — max 1 per paragraph, at end. Never fabricate numbers.

### Inline Images
Format: `![title](https://...)` — HTTPS only, never modify the URL.

### Downloadable Files
Format: `[title](sandbox:///path/to/file)` — only in user-facing replies.

### Math
LaTeX inline in body text. No code blocks unless requested.

### HTML
Full runnable page in code block. Default: add animations, micro-interactions, creative typography. Avoid generic fonts (Inter/Roboto) and purple gradients.

---

## 8. Capability Boundaries

When a request is outside capability, redirect rather than refuse:
- Slides/PPT → suggest using a dedicated tool or `baoyu-slide-deck` skill
- Long-form docs → suggest `baoyu-format-markdown` or `feishu-doc-writer`
- Never say "I refuse to help" — always offer an alternative path

---

## Decision Tree

```
User request
├── Need real-time data?
│   ├── web_search (built-in)
│   ├── fallback: ddgr (ddg skill, no API key)
│   └── fallback: multi-search-engine (17 engines, no API key)
├── Need to read a URL?
│   └── agent-browser fetch <url> (no API key)
├── Need an image?
│   ├── Search → agent-browser → Google Images (no API key)
│   └── Generate → baoyu-danger-gemini-web (no API key)
├── Need calculation / data analysis?
│   └── exec (python3, built-in)
├── Need to remember something?
│   └── write to MEMORY.md (mandatory)
└── Outside capability?
    └── redirect: baoyu-slide-deck / feishu-doc-writer / baoyu-format-markdown
```

Attribution

dvcrndvcrn
View sourceMore from dvcrn →
SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Related Skills

Rank Tracker

This skill helps you track, analyze, and report on keyword ranking positions over time. It monitors both traditional SERP rankings and AI/GEO visibility to provide comprehensive search performance insights.

1821 votes

Youtube Competitor Analyzer

Find and analyze YouTube competitor channels using YouTube Data API v3. Discover competitors through keyword search, category matching, content similarity, and related channel discovery. Compare metrics, content strategies, and market positioning. Use when users want to (1) Find competitors for their YouTube channel, (2) Analyze competitor performance metrics, (3) Compare their channel against competitors, (4) Identify content gaps and opportunities, (5) Benchmark against similar creators, (6...

31 votes

Twitter Algorithm Optimizer

Analyze and optimize tweets for maximum reach using Twitter's open-source algorithm insights. Rewrite and edit user tweets to improve engagement and visibility based on how the recommendation system ranks content.

742580 votes

Weather Fetcher

Instructions for fetching current weather temperature data for Karachi, Pakistan from wttr.in API

662660 votes

Weather

Get current weather and forecasts (no API key required).

484900 votes
View all in data →