Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jiushiwon/wg-skills --skill uniapp-app-generate-skillgit clone --depth 1 https://github.com/jiushiwon/wg-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-app-generate-skill)<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-app-generate-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/uniapp-app-generate-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-app-generate-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/uniapp-app-generate-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 39 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 239 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 250 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 503 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Excessive Agency · line 140 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium MCP Rug Pull · line 147 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00120 | $0.05164 |
| Opus 5 | $0.00060 | $0.02582 |
| Sonnet 5 | $0.00024 | $0.01033 |
| Haiku 4.5 | $0.00012 | $0.00516 |
Grade A, and why
uniapp-app-generate-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 533 lines — stays where its author put it; the contents beside it link to each section on GitHub.
UniApp App Generate Skill
Overview
This skill transforms a vague mini-program idea into a production-ready uni-app project with consistent architecture, design tokens, static assets, and coding standards. It follows a four-phase workflow, and leverages ponytail, ui-ux-pro-max, frontend-design, and image-forge-skill skills for high-quality output with minimal code.
- Pre-development: brainstorm, scope, and produce a detailed specification.
- Project initialization: scaffold the project, directory structure, CLAUDE.md, AGENTS.md, and .claudeignore.
- Development: implement the theme system, generate icons/images, design the layout, and build core pages.
- Post-development: lint, verify the build, and hand the project back to the user.
When to Use
Invoke this skill when the user asks for:
- "帮我做一个 uniapp 小程序"
- "初始化一个微信小程序项目"
- "用 uniapp 搭建一个 xxx 小程序"
- "帮我生成一个小程序的标准项目结构"
- Any request that involves creating a new uni-app mini-program from scratch
Workflow Summary
Phase 1: Pre-development
→ Ask clarifying questions about purpose, users, features, and style
→ Write spec.md with scope, pages, data model, and API outline
Phase 2: Project Initialization
→ Copy boilerplate from assets/boilerplate/
→ Replace placeholders
→ Create standard directory structure
→ Generate CLAUDE.md and AGENTS.md from templates
→ Create .claudeignore and .env
Phase 3: Development
→ Ask for theme configuration and set up dynamic theme system
→ Optionally design with frontend-design / ui-ux-pro-max
→ Implement with ponytail principles and cross-platform rules
→ Generate icons via image-forge-skill (or placeholders)
→ Optionally fetch real photos via Pexels API
→ Choose layout pattern and implement tabBar + pages
→ Build core pages: home, list/detail, profile
→ Ensure WeChat / H5 / App compatibility
Phase 4: Post-development
→ Run npm run lint
→ Run npm run dev:mp-weixin or build verification
→ Check mini-program-checklist.md
→ Summarize deliverables
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/boilerplate/.claudeignore 68 B
- assets/boilerplate/.env.example 386 B
- assets/boilerplate/.eslintrc.cjs 1.3 KB runs code
- assets/boilerplate/.gitignore 68 B
- assets/boilerplate/index.html 304 B
- assets/boilerplate/package.json 1.7 KB
- assets/boilerplate/README.md 2.6 KB
- assets/boilerplate/scripts/.theme-scale.json 515 B
- assets/boilerplate/scripts/check-colors.js 4.5 KB runs code
- assets/boilerplate/scripts/sync-theme.js 6.5 KB runs code
- assets/boilerplate/scripts/verify.js 853 B runs code
- assets/boilerplate/src/api/index.ts 97 B runs code
- assets/boilerplate/src/api/modules/demo.ts 635 B runs code
- assets/boilerplate/src/api/modules/user.ts 312 B runs code
- assets/boilerplate/src/App.vue 710 B
- assets/boilerplate/src/components/AppButton/AppButton.vue 1.6 KB
- assets/boilerplate/src/components/AppButton/index.ts 99 B runs code
- assets/boilerplate/src/components/AppCard/AppCard.vue 283 B
- assets/boilerplate/src/components/AppCard/index.ts 93 B runs code
- assets/boilerplate/src/components/AppEmpty/AppEmpty.vue 966 B
- assets/boilerplate/src/components/AppEmpty/index.ts 96 B runs code
- assets/boilerplate/src/components/AppInput/AppInput.vue 1.4 KB
- assets/boilerplate/src/components/AppInput/index.ts 96 B runs code
- assets/boilerplate/src/components/AppNavbar/AppNavbar.vue 3.3 KB
- assets/boilerplate/src/components/AppNavbar/index.ts 99 B runs code
- assets/boilerplate/src/components/AppPopup/AppPopup.vue 2.2 KB
- assets/boilerplate/src/components/AppPopup/index.ts 96 B runs code
- assets/boilerplate/src/components/AppTab/AppTab.vue 1.5 KB
- assets/boilerplate/src/components/AppTab/index.ts 90 B runs code
- assets/boilerplate/src/constants/colors.ts 2.5 KB runs code
- assets/boilerplate/src/constants/enums.ts 237 B runs code
- assets/boilerplate/src/constants/env.ts 293 B runs code
- assets/boilerplate/src/constants/index.ts 99 B runs code
- assets/boilerplate/src/constants/pages.ts 405 B runs code
- assets/boilerplate/src/main.ts 244 B runs code
- assets/boilerplate/src/manifest.json 1.9 KB
- assets/boilerplate/src/pages.json 1.5 KB
- assets/boilerplate/src/pages/form/index.vue 2.6 KB
- assets/boilerplate/src/pages/index/index.vue 1.5 KB
- assets/boilerplate/src/pages/list/index.vue 2.9 KB
- assets/boilerplate/src/pages/profile/index.vue 2.4 KB
- assets/boilerplate/src/static/avatar-placeholder.png 2.2 KB
- assets/boilerplate/src/static/images/empty-data.png 2.9 KB
- assets/boilerplate/src/static/README.md 994 B
- assets/boilerplate/src/static/tab-bar/data-active.png 1.2 KB
- assets/boilerplate/src/static/tab-bar/data.png 1.2 KB
- assets/boilerplate/src/static/tab-bar/home-active.png 864 B
- assets/boilerplate/src/static/tab-bar/home.png 865 B
- assets/boilerplate/src/static/tab-bar/profile-active.png 1.6 KB
- assets/boilerplate/src/static/tab-bar/profile.png 1.6 KB
- assets/boilerplate/src/stores/index.ts 63 B runs code
- assets/boilerplate/src/stores/modules/app.ts 330 B runs code
- assets/boilerplate/src/stores/modules/user.ts 646 B runs code
- assets/boilerplate/src/styles/_functions.scss 1.2 KB
- assets/boilerplate/src/styles/_mixins.scss 571 B
- assets/boilerplate/src/styles/config/_theme-config.scss 439 B
- assets/boilerplate/src/styles/global.scss 557 B
- assets/boilerplate/src/styles/tokens/_components.scss 1.4 KB
- assets/boilerplate/src/styles/tokens/_primitive.scss 1.6 KB
- assets/boilerplate/src/styles/tokens/_semantic.scss 1.0 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 533 lines · 120 tokens per session scan A 54e395caaa2d
uniapp-app-generate-skill is a skill published in the GitHub repository jiushiwon/wg-skills (99 stars, last pushed yesterday), licensed Apache-2.0. It adds 120 tokens to every session and 5,164 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
capacitor-vue
Guides the agent through Vue-specific patterns for Capacitor app development. Covers Vue 3 Composition API with Capacitor plugins, custom composables for native features, reactive plugin state, lifecycle hook patterns, Vue Router deep link integration, platform detection, PWA Elements setup, Quasar Framework…
ionic-vue
Guides the agent through Ionic Vue development patterns — project structure, Vue-specific Ionic components (IonPage, IonRouterOutlet, IonTabs), navigation with Vue Router and useIonRouter, Ionic lifecycle hooks (onIonViewWillEnter, onIonViewDidEnter, onIonViewWillLeave, onIonViewDidLeave), composable utilities…
ionic-framework-mcp
Guides the agent through connecting an MCP client to the hosted, unofficial Ionic Framework MCP server by Capawesome, which serves the official Ionic Framework documentation for v9 and v8, the component API reference, the official usage examples for Angular, React, Vue and vanilla JavaScript, and the Ionic blog.…
uview-pro
A component guide for uView Pro, a UI library for uni-app applications. uni-app is a Vue-based framework for building apps for mobile, web, and several mini-program platforms.
mobile-responsive
A guide for making Vue 3 and Element Plus administration pages work well on phones as well as desktop screens. Vue 3 is a JavaScript interface framework, and Element Plus is its UI component library.
sk-code-mobile-cli
Read-only Svelte design-system and source-convention evidence for the Pi Remote Mobile-CLI app.