Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add jiushiwon/wg-skills --skill uniapp-style-skillgit clone --depth 1 https://github.com/jiushiwon/wg-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-style-skill)<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-style-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/uniapp-style-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jiushiwon/wg-skills/uniapp-style-skill"><img src="https://agentmods.dev/badge/skills/jiushiwon/wg-skills/uniapp-style-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 9 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Prompt Injection · line 391 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 391 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 2383 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 2383 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 3439 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 3619 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 3619 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 3666 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 3666 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00209 | $0.40394 |
| Opus 5 | $0.00105 | $0.20197 |
| Sonnet 5 | $0.00042 | $0.08079 |
| Haiku 4.5 | $0.00021 | $0.04039 |
Grade A, and why
uniapp-style-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 4,864 lines — stays where its author put it; the contents beside it link to each section on GitHub.
uniapp 设计系统与组件规范 Skill
Overview
本 skill 提供 uniapp 微信小程序项目的设计系统与组件开发规范。
与相关 skill 的定位边界：
| Skill | 职责 | 与本 skill 的关系 |
|---|---|---|
| uniapp-standard-skill | 通用开发规范（红线规则、目录结构、接口规范） | 前置依赖，本 skill 专注 UI 与视觉层面 |
| uniapp-theme-skill | 主题系统引擎：基于 CSS 变量的三维度（色阶+尺寸+圆角）一键换肤 | 默认引用。本 skill 的中性色阶（文字灰/背景灰/边框灰）由自己管理；品牌主色及色阶生成委托给 theme-skill。未安装 theme-skill 时，$theme-primary 回退到 _theme-config.scss 的默认值 #1CC8C4 |
| uniapp-components-skill | 登录鉴权与安全规范 | 无交集（命名易与 page-components-skill 混淆，勿混用） |
| uniapp-page-components-skill | 常用组件化页面生成（BaseCard 托底 + 6 类页面组件：Tab+列表/聊天/朋友圈/商品详情/我的/图片卡片） | 正交关系，互补协作（style-skill 定义组件视觉规范，page-components-skill 落地为可复用页面组件，并遵循本 skill 红线） |
打开
demo.html可查看 Design Token 速查盘：色彩 / 尺寸 / 组件 Token / 触发词 四合一可视化。主题色可切换，所有色阶通过 CSScolor-mix()动态重算。中性色阶独立不变。
When to Use
- "样式规范是什么"
- "uniapp 设计系统"
- "Design Tokens"
- "组件规范"
- "屏幕适配"
- "uniapp 样式怎么写"
- "主题配置"
- "颜色变量"
- "字体大小规范"
- "间距规范"
- "深色模式"
- "dark mode"
- "设计审计"
- "扫描硬编码样式"
- "修复硬编码"
- "文字颜色"
- "文字层级"
- "色阶"
- "中性色"
- "背景颜色"
- "页面布局"
- "列表页布局"
- "详情页布局"
- "表单布局"
- "动画"
- "动效"
- "过渡动画"
- "渐显"
- "滑入"
- "骨架屏动画"
快速索引
| 规范主题 | 位置 | 说明 |
|---|---|---|
| 红线规则 | #一-红线规则 | 专属强制规范（34 条） |
| Design Tokens | #二-Design-Tokens-架构 | 四层 Token 架构 |
| 主题配置 | #三-主题配置 | 品牌色、功能色、深色模式开关 |
| 排版系统 | #四-排版系统 | 字号、行高、字重、字体家族、文本层级（H1-H4+Body+Caption） |
| 间距系统 | #五-间距系统 | 基于 4rpx 基数的间距阶梯 + Page Gutter + 模块间距 |
| 语义变量 | #六-语义变量 | 中性色阶总览（6.0）+ 文字颜色（基色自动派生）/背景/功能色/边框/圆角/阴影/Z 层级 / 组件级 Token（6.9） |
| SCSS 函数与混入 | #七-SCSS-函数与混入 | 色板生成、布局/文本/安全区/细线混入 |
| 动画与过渡 | #八-动画与过渡 | 时长、缓动曲线 Token + 开箱即用动画预设类（8.4） |
| 按钮组件 | #九-按钮组件规范 | Button 组件 + 底部固定按钮全局样式 |
| 核心组件 | #十-核心组件规范 | Card/Modal/Toast/Input/NavBar/Popup/Divider/Badge/ListItem/Avatar/Checkbox/Grid/Image/状态组件 |
| 交互状态 | #十一-交互状态 | 8 种交互状态 + 最小触摸区域 44pt |
| 组件开发 | #十二-组件开发规范 | 目录结构、命名、props/emit/slots、禁止第三方组件库 |
| 屏幕适配 | #十三-屏幕适配规范 | 安全区/rpx/滚动/横屏/鸿蒙/胶囊/自定义导航栏/底部菜单全局实施 |
| 深色模式 | #十四-深色模式 | prefers-color-scheme 适配策略与 Token 参考值 |
| 设计审计 | #十五-设计合规审计 | 扫描 D01-D34 违规（21 条自动 + 13 条人工审查） |
| Utility 工具类 | #十六-Utility-全局工具类 | Flex/间距/文字/背景/圆角/阴影等高频原子类 |
| 无障碍对比度 | #十七-无障碍颜色对比度 | WCAG AA 文字背景对比度规范 + 自动检测 |
| 页面布局 | #十八-页面布局模式 | 10 个通用 layout zone 类 + 5 种页面骨架（列表/详情/表单/设置/首页） |
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 4,864 lines · 209 tokens per session scan A 70975c4bb080
uniapp-style-skill is a skill published in the GitHub repository jiushiwon/wg-skills (100 stars, last pushed yesterday), licensed Apache-2.0. It adds 209 tokens to every session and 40,394 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
chakra-ui-builder
Build responsive, accessible UI components and layouts using Chakra UI v3, install or configure Chakra UI in new and existing projects, and design scalable themes using tokens, semantic tokens, recipes, and slot recipes. Use this skill whenever a user asks to build, create, or generate any UI component, page, form…
visual-ralph
Visual Ralph orchestration for frontend UI from generated references, static references, or live URL targets, using $ultragoal with built-in visual verdict and pixel-diff evidence until the implementation matches and leaves a reproducible design system.
frontend-ui-dark-ts
Build dark-themed React applications using Tailwind CSS with custom theming, glassmorphism effects, and Framer Motion animations. Use when creating dashboards, admin panels, or data-rich interfaces with a refined dark aesthetic.
reveal-hover-effect
Build cursor-following spotlight reveals that expose a second aligned image through a soft radial mask. Use for hover-to-color, before-and-after, x-ray, material, texture, product-detail, and illustrated hero effects where a desaturated or embossed base image should remain visible while another treatment follows an…
frontend-visual-qa
Audits already-rendered web, landing-page, HTML deck/slide, browser tool/game, dashboard/admin, design-system, and desktop UIs using real-browser or native-app journeys, inspected screenshots, DOM geometry, responsive or projection viewports, and a bundled Playwright sweep. Use after UI implementation to find…
prototype-web
A clickable, high-fidelity web product prototype with navigation, a hero section, feature cards, steps, social proof, and optional pricing. It is designed to resemble a finished landing page while remaining a prototype.