Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jiushiwon/wg-skills --skill uniapp-app-generate-skillgit clone --depth 1 https://github.com/jiushiwon/wg-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-app-generate-skill)<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-app-generate-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/uniapp-app-generate-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-app-generate-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/uniapp-app-generate-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 39 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 239 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 250 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 503 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Excessive Agency · line 140 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium MCP Rug Pull · line 147 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00106 | $0.01301 |
| Opus 5.5 | $0.00042 | $0.00520 |
| Sonnet 5.5 | $0.00021 | $0.00260 |
| Haiku 4.5 | $0.00011 | $0.00130 |
Grade A, and why
uniapp-app-generate-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
UniApp 三端项目初始化技能
将模糊的小程序想法转化为生产级的 uni-app 项目，统一架构、设计令牌、静态资源、编码标准。
核心能力
| 能力 | 说明 |
|---|---|
| 四阶段工作流 | 需求 → 初始化 → 开发 → 交付 |
| 动态主题系统 | 单色系生成 50~900 调色板 |
| 静态资源 | TabBar 图标 + 占位图 |
| 三端兼容 | 小程序 / H5 / App 一套代码 |
| 平台抽象层 | 登录/分享/图片统一封装 |
三端差异处理
1.1 小程序 vs H5 vs App 核心差异
| 维度 | 小程序 | H5 | App |
|---|---|---|---|
| 渲染方式 | 微信WebView | 浏览器 | 原生渲染 |
| API | wx.xxx | browser APIs | plus.xxx |
| 路由 | wx.navigateTo | history API | native navigation |
| 登录 | wx.login | OAuth | OAuth / 第三方 SDK |
| 支付 | wx.requestPayment | 微信 JSAPI | 第三方 SDK |
| 推送 | 订阅消息 | Web Push | 推送 SDK |
| 发布 | 微信后台 | CDN | 应用商店 |
1.2 条件编译
<template>
<!-- #ifdef MP-WEIXIN -->
<text>微信小程序特有</text>
<!-- #endif -->
<!-- #ifdef H5 -->
<text>H5 特有</text>
<!-- #endif -->
<!-- #ifdef APP-PLUS -->
<text>App 特有</text>
<!-- #endif -->
</template>
1.3 平台判断
// src/utils/platform.ts
export const isMpWeixin = () => {
// #ifdef MP-WEIXIN
return true;
// #endif
return false;
};
export const isH5 = () => {
// #ifdef H5
return true;
// #endif
return false;
};
export const isApp = () => {
// #ifdef APP-PLUS
return true;
// #endif
return false;
};
1.4 打包命令差异
| 平台 | 开发命令 | 打包命令 |
|---|---|---|
| 微信小程序 | npm run dev:mp-weixin |
npm run build:mp-weixin |
| H5 | npm run dev:h5 |
npm run build:h5 |
| App (Android) | npm run dev:app-plus |
npm run build:app-plus |
| App (iOS) | - | HBuilderX 打包 |
工作流程
Phase 1: 需求确认
问用户 3-5 个关键问题：
- 小程序解决什么问题？目标用户是谁？
- 核心功能有哪些？列出 3-5 个核心页面
- 倾向哪种视觉风格？清新健康 / 极简工具 / 活泼社区 / 商务数据
- 底部 TabBar 需要几个入口？
- 是否需要用户登录？
Phase 2: 项目初始化
- 复制 boilerplate 模板
- 替换占位符（项目名、描述）
- 创建标准目录结构
- 生成 CLAUDE.md / AGENTS.md
Phase 3: 主题系统
- 询问主题配置（主色/成功/警告/错误色）
- 生成 theme.json
- 运行
npm run theme:sync - 验证
npm run theme:check
Phase 4: 开发
- 布局设计（TabBar + 页面）
- 核心页面（首页/列表/详情/我的）
- 公共组件（AppButton/AppCard/AppInput 等）
- 状态管理（Pinia）
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/boilerplate/.claudeignore 68 B
- assets/boilerplate/.env.example 386 B
- assets/boilerplate/.eslintrc.cjs 1.3 KB runs code
- assets/boilerplate/.gitignore 68 B
- assets/boilerplate/index.html 304 B
- assets/boilerplate/package.json 1.7 KB
- assets/boilerplate/README.md 2.6 KB
- assets/boilerplate/scripts/.theme-scale.json 515 B
- assets/boilerplate/scripts/check-colors.js 4.5 KB runs code
- assets/boilerplate/scripts/sync-theme.js 6.5 KB runs code
- assets/boilerplate/scripts/verify.js 853 B runs code
- assets/boilerplate/src/api/index.ts 97 B runs code
- assets/boilerplate/src/api/modules/demo.ts 635 B runs code
- assets/boilerplate/src/api/modules/user.ts 312 B runs code
- assets/boilerplate/src/App.vue 710 B
- assets/boilerplate/src/components/AppButton/AppButton.vue 1.7 KB
- assets/boilerplate/src/components/AppButton/index.ts 99 B runs code
- assets/boilerplate/src/components/AppCard/AppCard.vue 283 B
- assets/boilerplate/src/components/AppCard/index.ts 93 B runs code
- assets/boilerplate/src/components/AppEmpty/AppEmpty.vue 966 B
- assets/boilerplate/src/components/AppEmpty/index.ts 96 B runs code
- assets/boilerplate/src/components/AppInput/AppInput.vue 1.5 KB
- assets/boilerplate/src/components/AppInput/index.ts 96 B runs code
- assets/boilerplate/src/components/AppNavbar/AppNavbar.vue 2.4 KB
- assets/boilerplate/src/components/AppNavbar/index.ts 99 B runs code
- assets/boilerplate/src/components/AppPopup/AppPopup.vue 2.2 KB
- assets/boilerplate/src/components/AppPopup/index.ts 96 B runs code
- assets/boilerplate/src/components/AppTab/AppTab.vue 1.5 KB
- assets/boilerplate/src/components/AppTab/index.ts 90 B runs code
- assets/boilerplate/src/constants/colors.ts 2.5 KB runs code
- assets/boilerplate/src/constants/enums.ts 237 B runs code
- assets/boilerplate/src/constants/env.ts 293 B runs code
- assets/boilerplate/src/constants/index.ts 99 B runs code
- assets/boilerplate/src/constants/pages.ts 405 B runs code
- assets/boilerplate/src/main.ts 244 B runs code
- assets/boilerplate/src/manifest.json 1.9 KB
- assets/boilerplate/src/pages.json 1.5 KB
- assets/boilerplate/src/pages/form/index.vue 2.6 KB
- assets/boilerplate/src/pages/index/index.vue 1.5 KB
- assets/boilerplate/src/pages/list/index.vue 3.1 KB
- assets/boilerplate/src/pages/profile/index.vue 2.4 KB
- assets/boilerplate/src/static/avatar-placeholder.png 2.2 KB
- assets/boilerplate/src/static/images/empty-data.png 2.9 KB
- assets/boilerplate/src/static/README.md 1000 B
- assets/boilerplate/src/static/tab-bar/data-active.png 1.2 KB
- assets/boilerplate/src/static/tab-bar/data.png 1.2 KB
- assets/boilerplate/src/static/tab-bar/home-active.png 864 B
- assets/boilerplate/src/static/tab-bar/home.png 865 B
- assets/boilerplate/src/static/tab-bar/profile-active.png 1.6 KB
- assets/boilerplate/src/static/tab-bar/profile.png 1.6 KB
- assets/boilerplate/src/stores/index.ts 63 B runs code
- assets/boilerplate/src/stores/modules/app.ts 330 B runs code
- assets/boilerplate/src/stores/modules/user.ts 646 B runs code
- assets/boilerplate/src/styles/_functions.scss 1.2 KB
- assets/boilerplate/src/styles/_mixins.scss 571 B
- assets/boilerplate/src/styles/config/_theme-config.scss 439 B
- assets/boilerplate/src/styles/global.scss 557 B
- assets/boilerplate/src/styles/tokens/_components.scss 1.4 KB
- assets/boilerplate/src/styles/tokens/_primitive.scss 1.7 KB
- assets/boilerplate/src/styles/tokens/_semantic.scss 1.0 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +4 lines 5dcf49b9a808
- 18d ago Changed · -376 lines · -14 tokens per session d1e6413a4604
- 1mo ago Changed da1360afef73
- 2mo ago First seen · 533 lines · 120 tokens per session scan A 54e395caaa2d
uniapp-app-generate-skill is a skill published in the GitHub repository jiushiwon/wg-skills (122 stars, last pushed 4d ago), licensed Apache-2.0. It adds 106 tokens to every session and 1,301 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
konsta-ui
Builds Capacitor app UI with Konsta UI v5 (Tailwind CSS v4-based iOS and Material components for React 19, Vue 3, Svelte 5) - CSS-first setup (@import 'tailwindcss'; @import 'konsta/react/theme.css';), --color-brand- colors in @theme, , KonstaProvider when mixing with Ionic, ios:/material: variants…
capacitor-vue
Guides the agent through Vue-specific patterns for Capacitor app development. Covers Vue 3 Composition API with Capacitor plugins, custom composables for native features, reactive plugin state, lifecycle hook patterns, Vue Router deep link integration, platform detection, PWA Elements setup, Quasar Framework…
ionic-vue
Guides the agent through Ionic Vue development patterns — project structure, Vue-specific Ionic components (IonPage, IonRouterOutlet, IonTabs), navigation with Vue Router and useIonRouter, Ionic lifecycle hooks (onIonViewWillEnter, onIonViewDidEnter, onIonViewWillLeave, onIonViewDidLeave), composable utilities…
ionic-framework-mcp
Guides the agent through connecting an MCP client to the hosted, unofficial Ionic Framework MCP server by Capawesome, which serves the official Ionic Framework documentation for v9 and v8, the component API reference, the official usage examples for Angular, React, Vue and vanilla JavaScript, and the Ionic blog.…
uview-pro
A component guide for uView Pro, a UI library for uni-app applications. uni-app is a Vue-based framework for building apps for mobile, web, and several mini-program platforms.
uniappx-project-creator
Provides one-command project creation for uni-app-x including Vue 3 + TypeScript + Vite setup, configuration, and template generation. Use when the user asks to create a uni-app-x project with a single command, needs to initialize a new uni-app-x project, or generate uni-app-x project structure.