ask-opencli — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ask-opencli (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use opencli to query Grok or Gemini through the user's already-logged-in Chrome session. Zero API cost, fully driven by the existing browser session.
opencli 项目:https://github.com/jackwener/opencli 安装:npm install -g @jackwener/opencli(需要 Node ≥20) 首次运行:opencli doctor会自动引导安装 Chrome Browser Bridge 扩展 登录:用装了扩展的 Chrome profile 打开 grok.com 和 gemini.google.com 登录一次 必须环境变量:export OPENCLI_BROWSER_COMMAND_TIMEOUT=300(写进 shell rc) 更深度的多 AI 并行调研工作流:use themulti-ai-researchskill instead
When to trigger:
When NOT to trigger:
gemini -p) → use ask-gemini skill insteadIf the user doesn't specify which model, default to Grok for real-time / social / news / tech-trend questions, and Gemini for long-form reasoning, research, coding, and document analysis.
If still ambiguous, ask the user which one to use before sending.
| ❌ 错误 | ✅ 正确 | 原因 |
|---|---|---|
opencli gemini chat "..." | opencli gemini ask "..." | 没有 chat 子命令 |
opencli grok chat "..." | opencli grok ask "..." | 只有 ask 子命令 |
opencli grok new | opencli grok ask "..." --new true | grok 的"新对话"是 ask 的参数 |
opencli gemini query "..." | opencli gemini ask "..." | 没有 query 子命令 |
完整子命令速查(运行 opencli grok --help 或 opencli gemini --help 查看):
Grok:
ask <prompt> # 唯一命令
Gemini:
ask <prompt> # 最常用
new # 开新对话
deep-research <prompt> # Deep Research 模式
deep-research-result [query] # 取 Deep Research 结果
image <prompt> # 图片生成opencli has two independent timeout layers, both must be set for grok to wait long enough:
--timeout 300 — grok.com web response wait timeOPENCLI_BROWSER_COMMAND_TIMEOUT=300 environment variable — entire browser command execution timeout (default 60s, hardcoded in runtime.js:25)The outer takes priority over the inner. Setting only --timeout 300 still gets killed at 60s. You MUST set both.
Source code: .omx/reference/opencli/dist/src/runtime.js:25:
export const DEFAULT_BROWSER_COMMAND_TIMEOUT = parseEnvTimeout('OPENCLI_BROWSER_COMMAND_TIMEOUT', 60);Recommended: add export OPENCLI_BROWSER_COMMAND_TIMEOUT=300 to ~/.zshrc so every grok/gemini call has room to breathe.
OPENCLI_BROWSER_COMMAND_TIMEOUT=300 opencli grok ask "{{PROMPT}}" --timeout 300 -f jsonOr if env var already exported in shell:
opencli grok ask "{{PROMPT}}" --timeout 300 -f jsonFlags:
--new true — start a fresh chat (avoids polluting prior conversation context)--web true — use the hardened grok.com consumer web flow (better error messages)--timeout 300 — MUST match or be lower than OPENCLI_BROWSER_COMMAND_TIMEOUT-f json — structured output (recommended over --format plain for parsing)opencli gemini ask "{{PROMPT}}" --format plainGemini is more stable than grok and usually doesn't hit the 60s timeout. No env var required but adding it doesn't hurt:
OPENCLI_BROWSER_COMMAND_TIMEOUT=300 opencli gemini ask "{{PROMPT}}" --format plainFlags:
--new true — start a fresh chat--timeout 90 — extend timeout for long answers (default 60s)To call grok and gemini in parallel from Claude Code, use the Bash tool with run_in_background=true for both calls in the same assistant turn. Claude Code will launch them concurrently and wait for task-completion notifications.
For deep cross-validation workflows (N internal sub-agents + 2 external AIs, confidence-tiered synthesis), use the `multi-ai-research` skill instead — it covers the full orchestration pattern.
opencli --version should print a version.~/Desktop/code/AI/tools/opencli/extension/ via chrome://extensions → Developer mode → Load unpacked. If the extension is missing, opencli doctor will flag it.grok.com must be logged ingemini.google.com must be logged inopencli doctor once per session if unsure.If any check fails, do not fall back to another tool silently. Report the missing prerequisite and ask the user to fix it (per U-23 no-silent-degradation rule).
--format plain.opencli will emit specific errors like:
--timeoutDo not swallow these. Report verbatim with the fix action.
After every successful call, save a markdown artifact to:
.omx/artifacts/ask-opencli-<grok|gemini>-<slug>-<YYYYMMDD-HHMMSS>.mdMinimum sections:
opencli ... askKeep the artifact even when the response is low quality — it documents that the query was made.
# Quick factual question, Grok default path
opencli grok ask "最新的 Claude 4.6 定价和 4.5 有什么差别?" --format plain
# Long reasoning task, Gemini with extended timeout + fresh chat
opencli gemini ask "分析这段 Rust 代码的并发安全问题:..." --new true --timeout 120 --format plain
# Grok hardened web path with new chat
opencli grok ask "X 上这两天关于 agent framework 的讨论焦点是什么?" --web true --new true --format plainTask: {{ARGUMENTS}}
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.