baoyu-skills is a collection of reusable skills that give AI coding agents instructions for tasks such as preparing and publishing content. It supports agents including Claude Code, Codex, and OpenClaw, with users installing only the workflows they need. The catalogue contains selected skills from this collection.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add JimLiu/baoyu-skills --skill baoyu-wechat-summarygit clone --depth 1 https://github.com/JimLiu/baoyu-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jimliu/baoyu-skills/baoyu-wechat-summary)<a href="https://agentmods.dev/skills/jimliu/baoyu-skills/baoyu-wechat-summary"><img src="https://agentmods.dev/badge/skills/jimliu/baoyu-skills/baoyu-wechat-summary/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jimliu/baoyu-skills/baoyu-wechat-summary"><img src="https://agentmods.dev/badge/skills/jimliu/baoyu-skills/baoyu-wechat-summary.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk fail
- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Privilege Escalation · line 497 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00213 | $0.08583 |
| Opus 5 | $0.00106 | $0.04292 |
| Sonnet 5 | $0.00043 | $0.01717 |
| Haiku 4.5 | $0.00021 | $0.00858 |
Grade B, and why
baoyu-wechat-summary scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- **wx-cli reinit**. If `wx history` suddenly returns nothing after a WeChat restart, the keys may be stale. Tell the user to run `sudo wx init --force` (while WeChat is running) and retry. Copies of this mod
1 near-identical copy found in the catalogue:
- baoyu-wechat-summary — 100% identical, 0 lines differ
How it starts
The opening of the file, as written. The whole thing — 498 lines — stays where its author put it; the contents beside it link to each section on GitHub.
WeChat Group Summary
群聊精华提取专家。把零散的微信群聊记录提炼成结构化、可读性强的简报，并维护跨次运行的群聊历史与群友画像。底层依赖外部 wx-cli 二进制（wx 命令），不打包脚本。
⚠️ Sandbox restriction
wx-cli reads from
~/.wx-cli/(config, cache, daemon socket) and from WeChat's data directory (~/Library/Containers/com.tencent.xinWeChat/on macOS). Both paths are outside Claude Code's default sandbox. Everywxcommand in this skill needs to run withdangerouslyDisableSandbox: truefrom the start — don't waste a sandbox attempt first. The user can use/sandboxto view/edit restrictions.
References（按需加载）
本文件只保留工作流骨架；细节拆在 references/ 下，执行到对应步骤时再读，不要一开始全部读入：
| 参考文件 | 内容 | 何时读 |
|---|---|---|
| references/setup.md | 环境检查（wx-cli 安装/权限/初始化）、wx-cli 命令速查、排障手册 | 新环境首次运行，或任何 wx 命令失败时 |
| references/output-formats.md | 两版摘要的 Section 顺序、格式与内容规范、输出骨架、自检清单 | Round 2 动笔前 |
| references/profiles.md | 画像文件格式、更新规则、隐私红线、回溯流程 | Step 3.7 / 8.5 / Step 9 |
| references/group-memory.md | 群级事实记忆的写入门槛、防注入、格式 | Step 8.6 |
User Input Tools
When this skill prompts the user, follow this tool-selection rule (priority order):
- Prefer built-in user-input tools exposed by the current agent runtime — e.g.,
AskUserQuestion,request_user_input,clarify,ask_user, or any equivalent. - Fallback: if no such tool exists, emit a numbered plain-text message and ask the user to reply with the chosen number/answer for each question.
- Batching: if the tool supports multiple questions per call, combine all applicable questions into a single call; if only single-question, ask them one at a time in priority order.
Concrete AskUserQuestion references below are examples — substitute the local equivalent in other runtimes.
Prerequisites
快速验证环境：wx --version 有输出且 wx sessions 返回数据即可继续。任何一步失败，或是首次在新环境运行 → 读 references/setup.md（完整环境检查、wx-cli 命令速查、排障手册），停在第一个失败项并给用户确切的修复命令。绝不自动安装、绝不替用户跑 sudo。
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 498 lines · 213 tokens per session scan B 6fe746670aed
baoyu-wechat-summary is a skill published in the GitHub repository JimLiu/baoyu-skills (25,839 stars, last pushed 2d ago), licensed MIT. It adds 213 tokens to every session and 8,583 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
herdr-rename-hook
Install the hook that renames the Herdr agent, pane and tab to match a Claude Code or Codex session renamed with /rename.
google-workspace-automation
Design Gmail, Drive, Sheets, and Calendar automations with scope-aware plans. Use for repeatable daily task automation with explicit OAuth scopes and audit-ready outputs.
obsidian-bases
An Obsidian skill for creating database-view files. Obsidian is a note-taking app, and a database view shows notes as tables or cards using filters and formulas.
pm-data
A workflow for defining product metrics, tracking events, monitoring results, and planning data analysis.
companion-skill
An AI companion skill for developers and office workers during long-running or repetitive tasks. It provides conversation, feedback, generated lifestyle images, and messages sent through Feishu, a workplace collaboration app.
kelly-email
Busabase AirApp-first email inbox-zero operator for reviewing unread mail, drafting replies, approving archive/mark-read/send actions, and executing only explicitly approved mailbox changes across configured accounts. Use when the user invokes $kelly-email, asks to process unread email, configure an email account…