Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add FlanChanXwO/pixiv-cli --skill pixiv-cli-prgit clone --depth 1 https://github.com/FlanChanXwO/pixiv-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/flanchanxwo/pixiv-cli/pixiv-cli-pr)<a href="https://agentmods.dev/skills/flanchanxwo/pixiv-cli/pixiv-cli-pr"><img src="https://agentmods.dev/badge/skills/flanchanxwo/pixiv-cli/pixiv-cli-pr.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00062 | $0.01031 |
| Opus 5 | $0.00031 | $0.00515 |
| Sonnet 5 | $0.00012 | $0.00206 |
| Haiku 4.5 | $0.00006 | $0.00103 |
Grade A, and why
pixiv-cli-pr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 78 lines — stays where its author put it; the contents beside it link to each section on GitHub.
pixiv-cli Pull Request
按仓库流程准备和维护 GitHub PR。先读 AGENTS.md、现有 locale 的 CONTRIBUTING 和
.github/PULL_REQUEST_TEMPLATE.md。代码审查使用 pixiv-cli-review,CI 诊断使用
pixiv-cli-ci,合并后的版本说明交给 pixiv-cli-release-notes。
授权与范围
- 默认只读。创建或更新 PR、push、请求 reviewer、评论、merge 或关闭前,要取得用户对该动作的明确授权。
- 先确认 branch、base、remote 和 diff 范围,不要带入无关的既有改动。
- PR、commit、日志和检查输出不得包含 token、Cookie、授权码、代理凭据、私有 URL、下载内容、本地数据库或机器配置。
- 普通 PR 不编辑
changelog/unreleased/或预写最终版本说明。用户可见的 CLI、MCP、SDK、config、workflow 或安全语义变化要同步对应文档。
准备 PR
-
收集范围:
git status --short git branch --show-current git diff --stat git diff --name-status确认当前不是 detached HEAD,并解析仓库的 default branch,不凭空假定为
main。 -
检查公开契约、架构边界、相关文档和产品
skills/pixiv-cli/。需要代码审查时运行pixiv-cli-review;发现问题先报告,不把修复混进单纯的 PR 准备。 -
PR 正文保留模板的三个部分:
变更、验证、自查。不要添加版本分类、breaking 标记或隐藏 metadata。 -
Verification 只记录实际运行过的完整命令和结果。按范围选择:
- 文档或 agent-only:
go test ./scripts/tests/documentation -count=1、git diff --check; - Go 或行为改动:聚焦测试、
go test ./... -count=1、go vet ./...,必要时sh scripts/build.sh; - 共享、认证、下载、CLI、MCP 或 SDK:补跑
go test -race ./... -count=1; - workflow 或 release 脚本:运行对应
scripts/cmd/*policy 和受影响的scripts/tests。
未运行真实 Pixiv/FANBOX API、native host 或受保护 release evidence 时,说明原因和剩余风险。
- 文档或 agent-only:
创建或更新 PR
-
获得授权后先 push 当前分支,不让
gh pr create隐式 fork 或 push:git push --set-upstream origin <branch> -
从仓库模板创建 PR:
gh pr create \ --repo FlanChanXwO/pixiv-cli \ --base <default-branch> \ --head <owner>:<branch> \ --title "<focused title>" \ --template .github/PULL_REQUEST_TEMPLATE.md非交互创建时,把填好的模板写入临时文件,再传给
--body-file。只有用户明确指定时才添加 reviewer、draft、label、assignee 或 project。 -
更新后复查模板和脱敏情况:
gh pr edit <number> --body-file <prepared-body> gh pr view <number> --json number,title,body,baseRefName,headRefName,url -
用
pixiv-cli-ci查看 required checks,用pixiv-cli-review处理审查。不要自动 merge;merge 需要单独授权。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 78 lines · 62 tokens per session scan A 5e270d06c538
pixiv-cli-pr is a skill published in the GitHub repository FlanChanXwO/pixiv-cli (131 stars, last pushed today), licensed MIT. It adds 62 tokens to every session and 1,031 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
vhs-e2e-gif
Record a test run, a TUI session, or any terminal command as a GIF with VHS and attach it to a GitHub PR as a release-hosted asset, never a repo commit. Use when asked to record an e2e run, demo a fix on a PR, attach a GIF or screen recording to a pull request, show a test passing visually, or produce a terminal…
gh-skill
Manage agent skills with gh skill. Use this skill to discover, preview, install, update, and publish Agent Skills so an agent can self-manage the skills available in its environment.
gh-find-prs
Survey open Codewhale PRs and triage each for mergeability and disposition against the real landing branch.
gh
Patterns for invoking the GitHub CLI (gh) from agents. Covers structured output, pagination, repo targeting, search vs list, gh api fallback.
hunk-extensions
Maps the hunkdiff/extension authoring surface for Hunk, the terminal diff viewer — hiding or reordering reviewed files, docked panes, alternate file views, commands and key bindings, dialogs, workspace writes, themes, syntax languages, VCS backends, lifecycle events. Use when writing, debugging, or installing a Hunk…
hunk-launch-video
Produces Hunk videos by driving the real TUI headlessly in a PTY, compositing captioned 1080p frames in Chromium, and encoding with ffmpeg. Use for feature demos, workflow explainers, announcements, launch videos, and full-release roundups.