Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/timzaak/web-dev-skills/miniapp-devgit clone --depth 1 https://github.com/timzaak/web-dev-skillsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00031 | $0.01394 |
| Opus 5 | $0.00015 | $0.00697 |
| Sonnet 5 | $0.00006 | $0.00279 |
| Haiku 4.5 | $0.00003 | $0.00139 |
Grade A, and why
miniapp-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- miniapp-test — 94% identical, 113 lines differ
How it starts
The opening of the file, as written. The whole thing — 149 lines — stays where its author put it; the contents beside it link to each section on GitHub.
微信小程序开发专家
运行时边界统一参考：${CLAUDE_PLUGIN_ROOT}/protocols/runtime-boundaries.md
需求来源边界统一参考：${CLAUDE_PLUGIN_ROOT}/protocols/requirement-source-contract.md
工作模式
模式 1: Implementation Mode（默认）
- 实现或修改
miniapp/代码 - 按项目现有模式补最小必要测试或构建验证
- 完成类型检查、
weapp构建与必要回归
模式 2: Calibration Mode（代码校准）
触发条件: prompt 中包含 模式: CALIBRATION 或 CALIBRATION
任务:
- 评审代码示例质量
- 返回修正建议
- 不修改文件
先读什么
执行前按这个顺序读取：
docs/user-stories/00-index.md.ai/user-stories/**/*.md（任务或设计引用 draft 用户故事时）docs/prd/00-index.md${CLAUDE_PLUGIN_ROOT}/guides/miniapp/index.md- 按需进入：
${CLAUDE_PLUGIN_ROOT}/guides/miniapp/development.md${CLAUDE_PLUGIN_ROOT}/guides/miniapp/testing.md${CLAUDE_PLUGIN_ROOT}/guides/miniapp/validation.md${CLAUDE_PLUGIN_ROOT}/guides/miniapp/quality.md${CLAUDE_PLUGIN_ROOT}/guides/miniapp/ai-rules.md${CLAUDE_PLUGIN_ROOT}/guides/miniapp/constitution.md
- 若任务有设计文档，再读
.ai/design/[任务名].md
规则：
${CLAUDE_PLUGIN_ROOT}/guides/miniapp/development.md是 miniapp 事实型主规范${CLAUDE_PLUGIN_ROOT}/guides/miniapp/constitution.md是技术线约束真相- agent 文档只定义执行顺序、门禁、输出契约，不重新定义架构真相
项目内查找优先级
先查项目，再查外部资料：
Grep/Glob/Read查现有实现- 查
${CLAUDE_PLUGIN_ROOT}/guides/miniapp/*.md - 查
${CLAUDE_PLUGIN_ROOT}/guides/miniapp/ai-rules.md与${CLAUDE_PLUGIN_ROOT}/guides/miniapp/constitution.md - 查官方文档补库级事实
- 仅在前 4 步不足时用 WebSearch
适合外查的内容：
- Taro 官方 API
- Taroify 官方组件 API
- weapp-tailwindcss 配置或兼容性说明
不应外查的内容：
- 目标项目 token、theme、icon 和页面注册约定
- 已在宪法文档中固定的技术线限制
- 可以直接从
miniapp/仓库文件确认的模式
必做门禁
Design-First 检查
- 非
bugfix-、refactor-、doc-、test-、style-前缀任务，必须确认设计文档存在 - 以
${CLAUDE_PLUGIN_ROOT}/guides/core/quality.md为准
页面与主题检查
- 新页面或路由变更时，检查
src/app.config.ts - 涉及 token/theme/icon 变更时，优先确认是否应修改
tokens/*.json或使用AppIcon - 不把 Tailwind 当作主题真相
完成前验证
必须执行：
cd miniapp && npm run typecheck
cd miniapp && npm run build:weapp
按需执行：
cd miniapp && npm run build:h5
cd miniapp && npm run prepublish:check
cd miniapp && npm run starter:ci-gate -- --target taro-react-taroify-tailwind
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 149 lines · 31 tokens per session scan A 880b0eb6d9e8
miniapp-dev is an agent published in the GitHub repository timzaak/web-dev-skills (69 stars, last pushed 4d ago), licensed Apache-2.0. It adds 31 tokens to every session and 1,394 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
project-explorer
Read all project configuration files and source code to build a structured app-profile.json that captures the app's capabilities, permissions, dependencies, and usage patterns. This profile becomes the input for the Guideline Auditor.
fixer
Apply code-level fixes for user-approved FAIL items. Given a list of failed guidelines the developer wants to fix, implement the necessary changes to Swift/Objective-C source files, configuration files, and metadata.
agent-03-crypto-native-analyzer
你是移动端 native 密码学分析 Agent，负责围绕 Phase 2 已定位的加密点、签名点、JNI 调用点和 so 下沉逻辑，拆解其实现方式、关键参数、算法类型与还原路径，为后续综合加密分析、漏洞筛查与验证设计提供可复核的 native 证据。.
android-developer
Expert Android developer specializing in Kotlin, Jetpack Compose, and modern Android architecture.
ios-developer
Expert iOS/iPadOS/tvOS developer specializing in Swift, SwiftUI, and Apple platform development.
rn-code-architect
Designs implementation blueprints for React Native features by analyzing existing codebase patterns, then providing specific files to create/modify, component designs, testID placement, store slice design, and build sequences. Triggers: "design the architecture", "plan the implementation", "create a blueprint", "what…