Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/lh17708357536-gif/flutter-cn-overseas-app-skillsnpx agentmods add skills/lh17708357536-gif/flutter-cn-overseas-app-skills/cn-android-flavorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lh17708357536-gif/flutter-cn-overseas-app-skills/cn-android-flavor)<a href="https://agentmods.dev/skills/lh17708357536-gif/flutter-cn-overseas-app-skills/cn-android-flavor"><img src="https://agentmods.dev/badge/skills/lh17708357536-gif/flutter-cn-overseas-app-skills/cn-android-flavor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lh17708357536-gif/flutter-cn-overseas-app-skills/cn-android-flavor"><img src="https://agentmods.dev/badge/skills/lh17708357536-gif/flutter-cn-overseas-app-skills/cn-android-flavor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00085 | $0.04716 |
| Opus 5 | $0.00043 | $0.02358 |
| Sonnet 5 | $0.00017 | $0.00943 |
| Haiku 4.5 | $0.00009 | $0.00472 |
Grade A, and why
cn-android-flavor scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sI https://<PROD_DOMAIN>/static/downloads/<APP_NAME>-cn.apk | head -8 How it starts
The opening of the file, as written. The whole thing — 416 lines — stays where its author put it; the contents beside it link to each section on GitHub.
中国大陆 Android(cn flavor)发布 Skill
适用于华为 / 小米 / OPPO / vivo / 应用宝等国内市场。所有
<PLACEHOLDER>替换为项目实际值。
1. 硬约束(不可违反)
- ❌ cn flavor 禁止包含 Firebase / Google Services / Google Play Services SDK — 华为 HMS 审核直接拒;国内用户无 Google 服务无法使用
- ❌ cn flavor 禁止指向
googleapis.com/gstatic.com等 Google CDN — 国内被墙,加载失败 - ❌ 禁止采集 IMEI / MEID / IMSI / Settings.Secure.ANDROID_ID / MAC — 工信部专项整治禁项
- ✅ 必须用 JPush(或同类国内推送) — 不用境外 FCM
- ✅ applicationId 与海外包隔离 — 例如 cn =
com.acme.myapp、overseas =com.acme.myapp.intl - ✅ ICP 备案 App 名称必须与
<application android:label>完全一致
2. build.gradle.kts flavor 模板
前提:
flutter create默认生成 Groovy DSL(build.gradle),本节模板是 Kotlin DSL。如果项目还没迁,先mv build.gradle build.gradle.kts并按 KTS 语法改写(apply plugin: "x"→id("x")、def→val)。
android {
flavorDimensions += "market"
productFlavors {
create("cn") {
dimension = "market"
applicationId = "<APP_PACKAGE>" // 例:com.acme.myapp
manifestPlaceholders["MARKET"] = "cn"
manifestPlaceholders["JPUSH_PKGNAME"] = applicationId as Any
manifestPlaceholders["JPUSH_APPKEY"] = jpushAppKey // 从 key.properties 读
manifestPlaceholders["JPUSH_CHANNEL"] = jpushChannel // 例:huawei / xiaomi / oppo / default
}
// overseas flavor 见 overseas-android-google-play skill
}
}
// ⚠️ 不要在这里手动 add("cnImplementation", "cn.jiguang.sdk:jpush:x.y.z")。
// `jpush_flutter` Flutter 插件已经声明了 JPush native 依赖,再手动加会触发
// duplicate class / 版本冲突。版本统一由 pubspec.yaml 锁。
//
// 仅在不使用 jpush_flutter(直接调原生)时,才需要在这里手动 add cnImplementation。
android/key.properties(不进 git,CI 通过环境变量注入):
storeFile=keystore/release.jks
storePassword=...
keyAlias=...
keyPassword=...
jpushAppKey=<JPUSH_APP_KEY>
jpushChannel=default
build.gradle.kts 顶部读取:
val keystoreProperties = Properties()
val keystoreFile = rootProject.file("key.properties")
if (keystoreFile.exists()) {
keystoreFile.inputStream().use { keystoreProperties.load(it) }
}
val jpushAppKey = keystoreProperties.getProperty("jpushAppKey")?.takeIf { it.isNotBlank() }
?: System.getenv("JPUSH_APP_KEY")
?: throw GradleException("cn release build requires jpushAppKey in key.properties or JPUSH_APP_KEY env")
val jpushChannel = keystoreProperties.getProperty("jpushChannel")?.takeIf { it.isNotBlank() }
?: System.getenv("JPUSH_CHANNEL")
?: "default"
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 416 lines · 85 tokens per session scan A 67609f9678cb
cn-android-flavor is a skill published in the GitHub repository lh17708357536-gif/flutter-cn-overseas-app-skills (20 stars, last pushed 2mo ago), licensed MIT. It adds 85 tokens to every session and 4,716 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
automobileapp
Automates the full mobile app release pipeline — version management, localized metadata, multi-device screenshot generation, i18n translations, and store submission for iOS and Android. Use when the user asks to "release my app", "bump the version", "generate store screenshots", "update metadata in all languages"…
managing-app-localizations
Manages i18n translation files and store metadata localization across iOS, Android, and Google Play. Use when the user says "add a language", "fix missing translations", "translate strings", "audit i18n", "missing locale keys", or any task involving language support. Source of truth for translation keys is…
selecting-app-locales
Enforces locale selection before any localisation, metadata, screenshot, or i18n task begins. Use when starting a new app, adding languages, preparing for store submission, or any time the locale set is unknown or unconfirmed. Presents both the Android BCP 47 locale list (localeconfig.xml) and the Apple App Store…
app-store-preflight-compliance
Pre-submission compliance scanner workflow for Apple App Store apps. Use when reviewing iOS, macOS, tvOS, watchOS, or visionOS projects (Swift, Objective-C, React Native, Expo) for App Store rejection risks, submission readiness, privacy compliance, or guideline violations.
ios-marketing-capture
Use when the user wants to automate capture of marketing screenshots for a SwiftUI iOS app across multiple locales, devices, or appearances. Covers full-screen shots, isolated element renders (carousel cards, widgets), and reproducible output naming. Triggers on marketing screenshots, locale screenshots, widget…
maui-localization-theming
Implement MAUI localization and theming. USE FOR: RESX/AppResources, runtime culture switching, RTL/FlowDirection, platform language metadata, AppThemeBinding, DynamicResource, light/dark/system themes, UserAppTheme. DO NOT USE FOR: general layout, accessibility audits, icon/splash assets.