Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jiushiwon/wg-skills --skill react-native-generate-skillgit clone --depth 1 https://github.com/jiushiwon/wg-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jiushiwon/wg-skills/react-native-generate-skill)<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/react-native-generate-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/react-native-generate-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/react-native-generate-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/react-native-generate-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 7 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 39 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 41 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 85 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 103 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 104 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 107 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 108 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00162 | $0.02279 |
| Opus 5 | $0.00081 | $0.01140 |
| Sonnet 5 | $0.00032 | $0.00456 |
| Haiku 4.5 | $0.00016 | $0.00228 |
Grade A, and why
react-native-init-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.
React Native Init Skill
面向完全不懂编程的小白，一键生成标准化、开箱即用的 React Native 移动端应用骨架。
与其他前端初始化技能的区别
| 维度 | vue-generate-skill | electron-vue3-skill | 本 skill |
|---|---|---|---|
| 目标用户 | 零基础小白 | 零基础小白 | 零基础小白 |
| 运行环境 | 浏览器 | 桌面端 | 移动端（iOS/Android） |
| 框架 | Vue3 | Vue3 + Electron | React Native |
| 环境安装 | 自动检测 | 自动检测 | 自动检测 + 复杂依赖（Java/Android SDK/Xcode） |
| 打包 | npm run build | electron-builder | Expo / react-native-cli |
| 平台 | Web | Windows/macOS/Linux | iOS + Android |
| 交互次数 | 2个问题 | 2个问题 | 3个问题 |
不重复造轮子：请求层复用 frontend-request-skill（如有 API 需求）；React 部分遵循 React 社区最佳实践。
依赖
- Java JDK：Android 开发需要 JDK 17+
- Android Studio：Android SDK 管理
- Xcode（macOS）：iOS 开发
- Node.js：>= 18 LTS
- npm / yarn：包管理
核心能力清单（10 项）
| # | 能力 | 说明 |
|---|---|---|
| 1 | 环境探测 | 自动检测 Node.js、Java、Android SDK、Xcode（macOS）环境 |
| 2 | 自动安装 | 初始化项目、安装依赖、检查环境兼容性 |
| 3 | Expo 推荐 | 默认使用 Expo（简化配置） |
| 4 | 一键启动 | npx expo start：启动开发服务器 |
| 5 | 开发模式 | 热重载、Expo Go 实时预览 |
| 6 | 生产打包 | npx expo build:android / npx expo build:ios |
| 7 | 导航 | React Navigation 配置 |
| 8 | 状态管理 | Zustand / Context API |
| 9 | UI 组件 | React Native 基础组件 |
| 10 | 网络请求 | Fetch / axios 配置 |
生成流程
第一步：询问用户（只问 3 个问题）
1. 项目名叫什么？（默认 my-rn-app）
2. 使用 Expo 还是 React Native CLI？（默认 Expo，推荐）
3. 需要哪些常用依赖？（如 React Navigation、状态管理、UI 库等）
不做：不问技术细节——全部自动选最佳实践。
第二步：环境探测
按 references/env-setup.md 流程执行：
- 检测 Node.js 是否安装（需 >= 18 LTS）
- 检测 Java JDK（Android 开发需要 JDK 17+）
- 检测 Android Studio / SDK（Android 开发）
- 检测 Xcode（macOS iOS 开发）
- 若未安装：给出明确的中文提示 + 下载链接
第三步：生成项目骨架
按 references/skeleton.md 的目录结构与代码模板，现场生成全部文件。
生成顺序：
- 创建项目（Expo 推荐）
- 安装核心依赖
- 配置导航
- 配置状态管理
- 创建示例页面
- 写入项目说明（
README.md）
第四步：自动安装与启动
生成完成后：
- 运行
npm install - 提示用户运行
npx expo start启动
第五步：交付清单
向用户汇报完整交付物：
✅ 项目 {{project}} 生成完毕！
📁 生成的文件：
- 项目配置：app.json, package.json, tsconfig.json
- 入口文件：App.tsx
- 页面示例：src/screens/HomeScreen.tsx
- 导航配置：src/navigation/AppNavigator.tsx
- 状态管理：src/store/index.ts
- 工具函数：src/utils/*
🚀 启动方式：
开发模式： npx expo start （按 i 启动 iOS，a 启动 Android）
Web预览： npx expo start --web
📦 打包命令：
Android： npx expo build:android
iOS： npx expo build:ios（需要 Apple 开发者账号）
📱 运行方式：
1. 手机安装 Expo Go
2. 扫描终端显示的二维码
3. 即可实时预览
⚠️ 环境要求：
Android 开发：JDK 17+、Android Studio
iOS 开发：macOS + Xcode
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 215 lines · 162 tokens per session scan A 50c6641bb4d7
react-native-init-skill is a skill published in the GitHub repository jiushiwon/wg-skills (97 stars, last pushed yesterday), licensed Apache-2.0. It adds 162 tokens to every session and 2,279 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
expo-native-ui
Framework (OSS). Build beautiful, native-feeling Expo screens. Covers Apple HIG styling, semantic colors, native controls, SF Symbols, media, visual effects, gradients, storage, and responsive layout. For routing and navigation, use the expo-router skill; for motion and animation, use the expo-animation skill.
expo-web-to-native
Framework (OSS). Migrate an existing web React app to a native iOS/Android app with Expo. Use when the user wants to turn a website into a mobile app, port a Next.js/Vite/CRA React codebase to React Native, reuse web code on native incrementally, or asks how web idioms (the DOM, CSS, React Router, localStorage…
truesheet-usage
Consumer-side guide for integrating @lodev09/react-native-true-sheet into a React Native app. Use this skill whenever the user wants to add, configure, control, or debug a bottom sheet using TrueSheet — including ref-based sheets, named global sheets, web support with TrueSheetProvider/useTrueSheet, React Navigation…
building-ui
Complete guide for building beautiful apps with Expo Router. Covers fundamentals, styling, components, navigation, animations, patterns, and native tabs.
use-dom
Use Expo DOM components to run web code in a webview on native and as-is on web. Migrate web code to native incrementally.
assess-react-native-migration
Assesses whether and how an existing mobile product should migrate to React Native. Use when auditing one or more product repositories for migration readiness, including products whose iOS, Android, and other clients live in separate directories or repositories; choosing brownfield, greenfield, or a checkpoint-based…