Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add laolaoshiren/claude-code-skills-zh --skill eslint-fixgit clone --depth 1 https://github.com/laolaoshiren/claude-code-skills-zhWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/laolaoshiren/claude-code-skills-zh/eslint-fix)<a href="https://agentmods.dev/skills/laolaoshiren/claude-code-skills-zh/eslint-fix"><img src="https://agentmods.dev/badge/skills/laolaoshiren/claude-code-skills-zh/eslint-fix/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/laolaoshiren/claude-code-skills-zh/eslint-fix"><img src="https://agentmods.dev/badge/skills/laolaoshiren/claude-code-skills-zh/eslint-fix.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.00915 |
| Opus 5 | $0.00039 | $0.00458 |
| Sonnet 5 | $0.00016 | $0.00183 |
| Haiku 4.5 | $0.00008 | $0.00092 |
Grade A, and why
eslint-fix scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
ESLint 修复助手
工作流程
1. 识别项目工具链
读取:
package.json中的 scripts、devDependencies和packageManager。- npm、pnpm、Yarn 或 Bun 的 lockfile。
eslint.config.*、.eslintrc.*、.eslintignore、Prettier 和 TypeScript 配置。- 适用的仓库规则、Git 状态和用户指定的文件范围。
优先运行仓库已有的 lint script。只有确认 ESLint 已被当前项目锁定并安装时,才使用对应包管理器的本地执行方式。若缺失依赖,先报告;安装包、更新 lockfile 或迁移配置需要单独授权。
2. 建立只读基线
先对用户指定或本轮相关范围运行不修改文件的检查,记录:
- 实际命令、ESLint 版本和退出状态。
- error / warning 数量、涉及文件和规则。
- 基线中已有的问题与本轮引入的问题。
不要默认扫描整个大型仓库,也不要用未锁定依赖、可能联网下载新版本的 npx 调用。
3. 预览可修复范围
- 使用项目现有命令支持的
--fix-dry-run、JSON 输出或等价能力判断预计改动。 - 检查当前 Git diff,确认目标文件没有与用户修改重叠。
- 区分可自动修复、需要理解代码语义、需要配置决策三类问题。
- 展示预计修改范围;可能产生大面积格式 diff 或改变逻辑时先取得确认。
4. 限定范围修复
- 只对已确认的文件执行
--fix,不自动扩大到整个仓库。 - 对
no-explicit-any、未处理 Promise、React Hooks 依赖等语义规则,结合类型、调用方和运行路径修改,不能机械替换。 - 不为消除报错而默认禁用规则、加入全局 ignore、修改 formatter 顺序或降低严重级别。
- Prettier 与 ESLint 的执行顺序以项目现有 scripts 和集成配置为准。
常见可自动修复规则包括 semi、quotes、indent、no-trailing-spaces、comma-dangle、arrow-parens 和 prefer-const;dry-run 和 diff 只能预览改动,最终仍需按风险运行类型检查、测试或构建。
5. 复验
实际修改后:
- 重新运行目标范围 lint。
- 按改动风险运行类型检查、相关测试或构建。
- 查看 Git diff,确认没有 lockfile、生成物或无关格式变化。
- 记录未解决规则、原因和建议下一步。
安全边界
- 未经明确授权,不安装或升级依赖,不修改 lockfile、ESLint 配置、Prettier 配置或项目脚本。
- 不覆盖工作树中已有修改;目标文件存在重叠时先报告。
- 不声称“已修复”或“可编译”,除非对应命令真实运行并成功。
- Windows 与 Linux 都优先使用项目已有 scripts 和路径,不硬编码 shell 专属命令。
输出
## ESLint 检查结果
- 范围:
- ESLint / 包管理器版本:
- 基线:X error,Y warning
- 实际命令与退出状态:
## 修改
| 文件 | 规则 | 处理方式 |
|------|------|----------|
## 复验
- lint:
- 类型检查 / 测试 / 构建:
- 未解决问题与原因:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 84 lines · 79 tokens per session scan A 1d24d3668208
eslint-fix is a skill published in the GitHub repository laolaoshiren/claude-code-skills-zh (836 stars, last pushed yesterday), licensed MIT. It adds 79 tokens to every session and 915 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
postmortem-solo
Run a lightweight, blame-free postmortem after an incident, failed launch, or missed deadline — for one person. Use when the user says "that didn't go well", "the launch flopped", "we had an outage", "I missed my deadline", or wants to learn from a recent failure.
bug-from-user
Convert a vague user complaint into a reproducible bug report a solo dev can act on. Use when the user pastes a confusing customer message, says "user says it's broken but I can't repro", "this email makes no sense", or wants to triage a bug report.
tool-calling-tutor
Use when a tool-calling agent does not call a tool, sends wrong arguments, loops without stopping, or needs a function schema. Guides a four-branch diagnosis and five-step schema repair. Do not use for framework-specific, MCP-server, or production-observability questions.
investigate
Systematically investigate bugs, test failures, build errors, performance issues, or unexpected behavior by cycling through characterize-isolate-hypothesize-test steps. Use when the user asks to "investigate this bug", "debug this", "figure out why this fails", "find the root cause", "why is this broken"…
audit
Project-wide health audit pipeline that fans out to all analysis skills in parallel, evaluates findings, and produces a unified report at .turbo/audit.md. Use when the user asks to "audit the project", "run a full audit", "project health check", "audit my code", "codebase audit", or "comprehensive review".
consult-oracle
Consult ChatGPT Pro via ChatGPT browser automation for problems that resist standard approaches. Use when stuck on a very hard problem, when standard approaches have failed, when multiple debugging attempts haven't worked, or when the user says "ask the oracle", "consult oracle", "consult chatgpt", "I'm completely…