Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jiushiwon/wg-skills --skill icon-catch-skillgit clone --depth 1 https://github.com/jiushiwon/wg-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jiushiwon/wg-skills/icon-catch-skill)<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/icon-catch-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/icon-catch-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/icon-catch-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/icon-catch-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Data Exfiltration · line 49 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 50 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 52 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.01876 |
| Opus 5 | $0.00010 | $0.00938 |
| Sonnet 5 | $0.00004 | $0.00375 |
| Haiku 4.5 | $0.00002 | $0.00188 |
Grade A, and why
icon-catch-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 148 lines — stays where its author put it; the contents beside it link to each section on GitHub.
icon-catch-skill — 图标抓取规范
本技能提供图标抓取流程，不执行本地脚本。Claude 应根据以下规范，直接调用 Iconify API 或浏览器工具完成下载。
数据源
所有图标来自 Iconify 聚合平台，免费、无需 Key。
| 源名 | Iconify prefix | 风格特点 | 推荐场景 |
|---|---|---|---|
lucide |
lucide |
现代线性，命名与前端术语对齐 | 默认首选，大多数 UI 场景 |
tabler |
tabler |
5000+ 业务图标，含 filled 变体 | 电商/金融/医疗等细分业务 |
heroicons |
heroicons |
outline/solid，Tailwind 官方 | Tailwind / 简洁后台 |
phosphor |
ph |
6 种风格 | 需要多状态切换的图标 |
remix |
ri |
中文语义匹配度高 | 国内业务 |
feather |
feather |
280+ 极简基础图标 | 轻量产品 |
simple-icons |
simple-icons |
3000+ 品牌单色 Logo | 品牌 Logo、第三方登录 |
mdi |
mdi |
数量庞大 | 兜底 |
未指定源时，默认先用 Iconify 聚合搜索；若无结果，再按上表优先级逐个尝试单个库。
使用前询问规范
当用户要求抓图标时，Claude 必须先询问用户想用的图标库，给出风格推荐，再执行。示例：
准备抓 home 图标，可选图标库：
- lucide — 现代线性，前端默认推荐（推荐）
- tabler — 业务图标丰富
- heroicons — Tailwind 官方
- phosphor — 多粗细风格
- remix — 中文语义友好
- 全部自动 — 从所有库中挑最合适的（默认）
你想用哪个？直接回车默认全部自动。
如果用户明确指定了库（如"用 lucide 风格"），则不再询问。
标准抓取流程
- 理解语义：从用户需求提取图标用途词（如「个人中心入口」→
user）。 - 询问图标库：向用户展示可选库及风格，确认后执行；用户已指定则跳过。
- 英文关键词：优先使用英文搜索；中文需求参考
references/icon-sources.md的中英文映射表。 - 搜索图标：调用 Iconify API：
- 聚合搜索：
GET https://api.iconify.design/search?query={英文词}&limit={数量} - 指定库搜索：
GET https://api.iconify.design/search?query={英文词}&prefix={prefix}&limit={数量}
- 聚合搜索：
- 挑选最优：按优先级
lucide → tabler → heroicons → ph → ri → feather → simple-icons → mdi挑选，同库时优先选名称与搜索词最匹配的图标。 - 下载 SVG：
GET https://api.iconify.design/{prefix}/{name}.svg?color=%23{颜色}&width={尺寸}&height={尺寸} - 落地保存：保存到项目图标目录（uniapp 默认
static/icons/，Web 项目src/assets/icons/或用户指定目录）。 - 展示图标询问（可选）：下载完成后，询问用户是否需要输出一个「图标展示」公共 class（居中 icon + 圆角正方形浅色背景）。需要则按下方「图标展示」规范输出。
- 批量场景：逐个语义词执行，保持颜色、尺寸一致，确保风格统一。
参数规范
| 参数 | 说明 | 示例 |
|---|---|---|
out |
输出目录 | ./static/icons |
color |
图标颜色（hex，不带 #） |
666 / 3B82F6 |
size |
宽高（px） | 24 |
name |
自定义文件名（不含扩展名） | icon-home |
图标展示（可选）
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 148 lines · 21 tokens per session scan A 48eb688e147d
icon-catch-skill is a skill published in the GitHub repository jiushiwon/wg-skills (99 stars, last pushed yesterday), licensed Apache-2.0. It adds 21 tokens to every session and 1,876 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
webgl-holographic-foil
A self-contained WebGL2 hero: thin-film interference over a crushed-foil surface whose palette shifts with the viewing angle; move the cursor to tilt the film.
html-ppt-hermes-cyber-terminal
OpenDesign + BYOK: choosing and wiring your own model, hands-on — cost, quality, and the routing decision. Built as a decision-grade AI literacy deck for engineers, IT, applied-AI teams.
html-ppt-taste-brutalist
16:9 HTML deck in tactical-telemetry / CRT-terminal taste. Deactivated-CRT charcoal slides, white-phosphor monospace, hazard-red accent, scanline overlay, ASCII syntax, density over decoration. Distilled from Leonxlnx/taste-skill brutalist-skill (Tactical Telemetry mode).
visual-ralph
Visual Ralph orchestration for frontend UI from generated references, static references, or live URL targets, using $ralph with built-in visual verdict and pixel-diff evidence until the implementation matches and leaves a reproducible design system.
accessibility
Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, design intent verification, and the Accessibility Planner workflow.
make-resume
A Chinese-language tool for creating editable HTML resumes that can be changed in a browser and printed to PDF. It uses available resume templates when they are installed and otherwise provides a simpler fallback.