Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add NocodeMrLi/mini-program-engineering-skill-suite --skill mini-program-implementation-skillgit clone --depth 1 https://github.com/NocodeMrLi/mini-program-engineering-skill-suiteWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nocodemrli/mini-program-engineering-skill-suite/mini-program-implementation-skill)<a href="https://agentmods.dev/skills/nocodemrli/mini-program-engineering-skill-suite/mini-program-implementation-skill"><img src="https://agentmods.dev/badge/skills/nocodemrli/mini-program-engineering-skill-suite/mini-program-implementation-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nocodemrli/mini-program-engineering-skill-suite/mini-program-implementation-skill"><img src="https://agentmods.dev/badge/skills/nocodemrli/mini-program-engineering-skill-suite/mini-program-implementation-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00139 | $0.01117 |
| Opus 5.5 | $0.00056 | $0.00447 |
| Sonnet 5.5 | $0.00028 | $0.00223 |
| Haiku 4.5 | $0.00014 | $0.00112 |
Grade A, and why
mini-program-implementation-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/mini-program-implementation-skill — 小程序工程实现
在已确认的改动边界内,把稳定产品语义或工程方案落到代码和必要内部文档。保护现有项目、用户已有改动与已验收行为;实现完成后只报告匹配证据,不等于正式验收。
进入条件与边界
- 接收已确认规格/架构、明确的小型实现目标,或已有项目的事实图和改动边界。
- 已有项目先读取规则、相关源码/配置/文档、版本控制状态、测试与构建方式;记录用户已有改动,不覆盖、不回退、不顺手整理无关文件。
- 产品语义、数据规则、权限或外部服务影响尚不明确时,停在决策点;单纯可观察故障但根因未知时转入调试阶段。
- 不新增未获来源支持的入口、状态、付费、广告、权限理由或业务逻辑;不把内部实现细节擅自扩写到公开说明。
受控实现流程
- 写出目标、允许修改文件/模块、必须保护内容、明确不做项、验证命令与回滚条件,建立修改前基线。
- 识别真实事实源,区分手写源码、生成脚本、配置、资源和构建产物;应修改生成脚本时不直接把生成结果当唯一修复点。
- 为新增行为或缺陷先建立能失败的测试或最小复现,执行
RED并确认失败原因正确。 - 写最小改动到
GREEN,运行目标测试;再做不改变行为的REFACTOR,每一步保持范围可审查。 - 检查空、错误、边界、重复操作、异步与受影响共享契约;发现相邻问题只记录,不静默扩大范围。
- 复核差异、用户已有改动、敏感内容和必要内部文档,运行与风险相称的静态、单元或集成检查。
- 使用 工程实现工作流 自检,并按 实现交接模板 交给验证阶段。
涉及资产时建立资产谱系,至少记录原始/衍生关系、处理工具与方式、目标槽位、尺寸、透明通道、SHA-256、批准范围和替换关系。命令中断或超时后把在途写入记为 unknown,先刷新工作区、进程、产物和日志,不盲目重放。
涉及云资产、批量数据或会改变运行行为的派生资产时,同时按 云资产、批量导入与派生资产交付工作流 分离 manifest、执行、完整性复验和报告;上传或导入成功不能自动升级为运行时已接线、真实页面已使用或用户已验收。
最低输出
- 实现目标、输入事实、假设、改动边界与保护项。
- 逐文件改动清单,以及为何属于当前目标。
RED → GREEN → REFACTOR或无法采用测试驱动时的明确理由与替代证据。- 已执行验证、结果、未验证层级、残余风险和回滚方式。
- 云资产触发时的 manifest 指纹、远端基线、执行计数、完整性结果、失败清单、激活/回滚记录和不可推出状态。
- 状态最多报告到证据支持的
implemented、built或locally-verified;不得推导真机、云端、验收、上传或发布。
停止条件
遇到无法安全区分的用户改动、互相冲突的事实源、需要扩大产品范围的选择、未批准的高风险数据/权限/外部服务变更、不可接受的迁移或回滚缺口时停止。不得以覆盖文件、重置工作区或跳过失败测试强行推进。
独立与套件协作
独立安装时,本 Skill 可完成边界明确的代码实现。位于套件中时,接收规格、架构或调试阶段的稳定交接,只输出实现差异与验证入口,不直接调用其他组件脚本。
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago Changed · +3 lines f1fd108f0760
- 1mo ago First seen · 45 lines · 139 tokens per session scan A d9744d5ab6c7
mini-program-implementation-skill is a skill published in the GitHub repository NocodeMrLi/mini-program-engineering-skill-suite (91 stars, last pushed yesterday), licensed MIT. It adds 139 tokens to every session and 1,117 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
nature-statistics
A guide for checking or writing how statistical analyses are reported in scientific papers submitted to Nature or similar high-impact journals.
baoyu-youtube-transcript
A tool for downloading the written captions, subtitles, chapter information, speaker labels, and cover image from a YouTube video using its URL or ID.
playwright-cli
Automates browser interactions for testing and validating your own web applications using playwright-cli. Use when you need terminal-first browser control for navigation, form filling, screenshots, tracing, bound browser sessions, debugging, or generating Playwright test code. Only use against applications you own or…
playwright-frontend
For frontend engineers authoring UI — how to make components reliably locatable by tests and AI agents. Covers the official Playwright locator priority, semantic/accessible markup first, and how to add valid, unique, stable data-testid attributes (naming convention, uniqueness in lists, stability rules) for React…
cesiumjs-imagery
CesiumJS imagery layers - ImageryProvider, ImageryLayer, ImageryLayerCollection, WMS, WMTS, Bing, OpenStreetMap, ArcGIS, Mapbox, tile discard policies. Use when adding or swapping base map layers, configuring imagery providers, layering multiple map sources, or creating split-screen imagery comparisons.
ase-meta-quorum
Query multiple foreign AIs in parallel and synthesize a consensus ("quorum") answer with a consensus rating. Use when the user wants a quorum, a consensus answer, or the opinions of multiple AIs on a question.