Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add davidtoby/agent-skills --skill lark-appsgit clone --depth 1 https://github.com/davidtoby/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/davidtoby/agent-skills/lark-apps)<a href="https://agentmods.dev/skills/davidtoby/agent-skills/lark-apps"><img src="https://agentmods.dev/badge/skills/davidtoby/agent-skills/lark-apps.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00331 | $0.05358 |
| Opus 5 | $0.00166 | $0.02679 |
| Sonnet 5 | $0.00066 | $0.01072 |
| Haiku 4.5 | $0.00033 | $0.00536 |
Grade A, and why
lark-apps scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
97% identical to lark-apps — 49 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 123 lines — stays where its author put it; the contents beside it link to each section on GitHub.
apps (v1)
妙搭应用属于用户资产。默认用 --as user；认证、scope、exit-10、高风险确认、_notice 等通用处理只读 ../lark-shared/SKILL.md，不要在本 skill 里复制。妙搭应用有两条开发路径：本地开发（拉源码本地写）/ 云端会话（妙搭 AI 生成）。
身份与授权
妙搭应用是用户的个人资产，统一 --as user（见开头）。已有用户身份可用时直接执行业务命令，不要为了预防权限问题主动重新登录，否则可能中断原任务并触发不必要的设备授权。仅当 CLI 明确返回未登录或缺少本域 scope 时，一次性执行：
lark-cli auth login --domain apps
因缺权限失败（error.subtype == "missing_scope"）时的通用处理见 ../lark-shared/SKILL.md，同样按 --domain apps 授权；授权成功后只恢复原业务操作，不扩展任务范围。
意图路由
按具体操作查命令（开发路径先用下方「选择开发路径」判定表定好再进来取命令）：
| 用户意图 | 先用 | 按需读取 |
|---|---|---|
| 创建新应用资产、拿 app_id | +create |
lark-apps-create.md |
| 找已有 app_id、按名字过滤应用 | +list --keyword <name> |
lark-apps-list.md |
| 查单个应用详情（类型、名称、发布状态等） | +get --app-id <app_id> |
lark-apps-get.md |
| 改应用名或描述 | +update |
lark-apps-update.md |
| HTML 应用 / 创意模式 — 写 HTML 页面/网站、静态页、PPT/deck、落地页、仪表盘、UI mockup、原型、线框图、视觉探索 | 加载 creative-design/creative-design.md（含完整开发与发布流程） |
creative-design/creative-design.md |
| 旧版存量 HTML 应用（无 Git 管理）继续上传已有静态产物 | +html-publish（仅兼容旧链路；新建 html / 创意模式 / creative-design 产物不得使用） |
lark-apps-html-publish.md |
开发已有应用 / 初始化本地仓库（开发方式已定为本地后；先解析 app_id，勿 +create 新建） |
+init（或手动 +git-credential-init + 原生 git）。执行前必读 lark-apps-local-dev.md，含端到端流程和领域规则 |
lark-apps-init.md, lark-apps-git-credential.md |
本地开发时 .env.local 损坏/丢失，重新拉取启动期环境变量 |
+env-pull |
lark-apps-env-pull.md |
| 管理应用环境变量（查看/设置/删除） | +env-list, +env-set, +env-delete |
lark-apps-env.md |
| 查线上日志、Trace、请求数、错误率、延迟、CPU、memory、PV/UV/访问量 | +log-list, +log-get, +trace-list, +trace-get, +metric-list, +analytics-list |
lark-apps-observability.md |
| 看表 / 看结构 / 初始化多环境 / 导入导出数据 / 变更追溯 / 行级审计 / dev→online 发布 / 时间点恢复 / 查 DB 用量 | +db-table-list、+db-table-get、+db-env-create、+db-data-export/+db-data-import、+db-changelog-list、+db-audit-status/+db-audit-enable/+db-audit-disable/+db-audit-list、+db-env-diff/+db-env-migrate、+db-recovery-diff/+db-recovery-apply、+db-quota-get |
lark-apps-db.md |
| 逐条执行 SQL（SELECT / DML / DDL）；建表 / 改表 / 写 SQL 的平台规范 | +db-execute |
lark-apps-db-execute.md（含「平台 SQL 规范」：审计列 / RLS / user_profile / 禁用 SQL / PG 陷阱） |
| 管理应用文件存储：上传/下载本地文件、列出/查看/删除已存文件、生成临时分享链接、查存储用量 | +file-upload/+file-download/+file-list/+file-get/+file-sign/+file-delete/+file-quota-get |
lark-apps-file.md |
| 调试应用运行时缓存：查看/删除单个业务 key、清空指定环境缓存 | +cache-get/+cache-delete/+cache-clear |
lark-apps-cache.md |
| 部署/上线应用（"部署""上线""推上去并部署""发布到云端"）；查发布状态/历史 | 本地开发链路先按 lark-apps-local-dev.md 确认本次改动已 git commit + git push，再用 +release-create / +release-get；查历史用 +release-list |
lark-apps-local-dev.md, lark-apps-release-create.md, lark-apps-release-get.md, lark-apps-release-list.md |
| 设置或查看运行时可见范围 | +access-scope-set, +access-scope-get |
对应 access-scope reference |
| 创意模式（html）应用的评论相关操作 | 创意模式应用评论走 lark-drive 文档评论体系，读取 ../lark-drive/SKILL.md 了解评论能力 |
../lark-drive/SKILL.md |
管理 app_... 应用内角色、角色成员，或查询用户匹配角色 |
+role-list/get/create/update/delete, +role-member-list/add/remove, +role-match-list |
lark-apps-role.md |
| 云端 Agent 生成/迭代应用（开发方式已定为云端后） | +session-create -> +chat -> +session-get |
lark-apps-cloud-dev.md |
| 管理妙搭应用开放 API Key（创建/查看/启停/重置/删除凭证；密钥仅 create/reset 一次性返回） | +openapi-key-list/get/create/update/enable/disable/delete/reset |
lark-apps-openapi-key.md |
| 管理妙搭应用自动化触发器（定时/记录变更/Webhook/飞书审批四类触发器的查询/创建/更新/启停；Webhook URL·Token 一次性回显、不落盘） | +automation-list/get/create/update/enable/disable |
lark-apps-automation.md |
| 查看某次会话某一轮（turn）的回复消息（含仍在生成中的本轮）/ 导出上一轮模型回复（"这一轮回复了什么""上一轮的回复""导出某轮消息"） | 先 +session-get（取 latest_turn.turn_id）-> +session-messages-list --turn-id <id>（仅 user 身份；分页用 --page-token） |
lark-apps-session-messages-list.md |
| 外部能力(AI模型能力和飞书平台能力)集成/插件/Plugin/Capability | +plugin-install, +plugin-list, +plugin-uninstall |
lark-apps-plugin-install.md, lark-apps-plugin-uninstall.md, lark-apps-plugin-list.md |
What ships with it
53 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- creative-design/agents/assets/vision-probe.png 263 B
- creative-design/agents/fork-verifier-agent.md 3.9 KB
- creative-design/agents/vision-probe-agent.md 1.3 KB
- creative-design/assets/index.html 1.0 KB
- creative-design/creative-design.md 32 KB
- creative-design/references/aily.md 4.2 KB
- creative-design/references/animated-video.md 5.4 KB
- creative-design/references/charts.md 9.4 KB
- creative-design/references/claude.md 3.2 KB
- creative-design/references/codex.md 2.8 KB
- creative-design/references/data-report.md 8.5 KB
- creative-design/references/frontend-design.md 9.0 KB
- creative-design/references/hi-fi-design.md 2.8 KB
- creative-design/references/interactive-prototype.md 2.2 KB
- creative-design/references/make-a-deck.md 16 KB
- creative-design/references/visual-exposure.md 8.3 KB
- creative-design/references/wireframe.md 1.3 KB
- creative-design/starter-components/android-frame.jsx 8.1 KB
- creative-design/starter-components/animations.jsx 25 KB
- creative-design/starter-components/browser-window.jsx 4.2 KB
- creative-design/starter-components/deck-stage.js 113 KB runs code
- creative-design/starter-components/design-canvas.jsx 77 KB
- creative-design/starter-components/ios-frame.jsx 12 KB
- creative-design/starter-components/macos-window.jsx 8.2 KB
- creative-design/starter-components/tweaks-panel.jsx 35 KB
- references/lark-apps-access-scope-get.md 1.1 KB
- references/lark-apps-access-scope-set.md 2.0 KB
- references/lark-apps-automation.md 25 KB
- references/lark-apps-cache.md 4.5 KB
- references/lark-apps-cloud-dev.md 8.5 KB
- references/lark-apps-create.md 1.6 KB
- references/lark-apps-db-execute.md 14 KB
- references/lark-apps-db.md 13 KB
- references/lark-apps-env-pull.md 1.8 KB
- references/lark-apps-env.md 2.8 KB
- references/lark-apps-file.md 5.7 KB
- references/lark-apps-get.md 1.6 KB
- references/lark-apps-git-credential.md 2.0 KB
- references/lark-apps-html-publish.md 3.6 KB
- references/lark-apps-init.md 2.2 KB
- references/lark-apps-list.md 2.0 KB
- references/lark-apps-local-dev.md 10 KB
- references/lark-apps-observability.md 3.7 KB
- references/lark-apps-openapi-key.md 4.5 KB
- references/lark-apps-plugin-install.md 1.4 KB
- references/lark-apps-plugin-list.md 733 B
- references/lark-apps-plugin-uninstall.md 719 B
- references/lark-apps-release-create.md 2.1 KB
- references/lark-apps-release-get.md 2.0 KB
- references/lark-apps-release-list.md 1.1 KB
- references/lark-apps-role.md 8.1 KB
- references/lark-apps-session-messages-list.md 3.1 KB
- references/lark-apps-update.md 1.0 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 123 lines · 331 tokens per session scan A ac9d03482e7f
lark-apps is a skill published in the GitHub repository davidtoby/agent-skills (10 stars, last pushed 1mo ago), licensed MIT. It adds 331 tokens to every session and 5,358 once invoked, about $0.0017 per session on Opus 5. A static security scan graded it A with 0 findings. It is 97% identical to lark-apps, differing in 49 lines, and is treated as a copy.
Other skills, from other repositories
azure-auth
Microsoft Entra ID (Azure AD) authentication for React SPAs with MSAL.js and Cloudflare Workers JWT validation using jose library. Full-stack pattern with Authorization Code Flow + PKCE. Prevents 8 documented errors. Use when: implementing Microsoft SSO, troubleshooting AADSTS50058 loops, AADSTS700084 refresh token…
d3-viz
Creating interactive data visualisations using d3.js. This skill should be used when creating custom charts, graphs, network diagrams, geographic visualisations, or any complex SVG-based data visualisation that requires fine-grained control over visual elements, transitions, or interactions. Use this for bespoke…
ai-sdk-ui
Build React chat interfaces with Vercel AI SDK v6. Covers useChat/useCompletion/useObject hooks, message parts structure, tool approval workflows, and 18 UI error solutions. Prevents documented issues with React Strict Mode, concurrent requests, stale closures, and tool approval edge cases. Use when: implementing AI…
frontend-patterns
Frontend development patterns for React, Next.js, state management, performance optimization, and UI best practices.
auto-animate
Zero-config animations for React, Vue, Solid, Svelte, Preact with @formkit/auto-animate (3.28kb). Prevents 15 documented errors including React 19 StrictMode bugs, SSR imports, conditional parents, viewport issues, drag & drop conflicts, and CSS transform bugs. Use when: animating lists/accordions/toasts…
coding-standards
Universal coding standards, best practices, and patterns for TypeScript, JavaScript, React, and Node.js development.