Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/nocodemrli/mini-program-engineering-skill-suite/mini-program-implementation-skillnpx skills add NocodeMrLi/mini-program-engineering-skill-suite --skill mini-program-implementation-skillgit clone --depth 1 https://github.com/NocodeMrLi/mini-program-engineering-skill-suiteWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00139 | $0.00994 |
| Opus 5 | $0.00069 | $0.00497 |
| Sonnet 5 | $0.00028 | $0.00199 |
| Haiku 4.5 | $0.00014 | $0.00099 |
Grade A, and why
mini-program-implementation-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/mini-program-implementation-skill — 小程序工程实现
在已确认的改动边界内，把稳定产品语义或工程方案落到代码和必要内部文档。保护现有项目、用户已有改动与已验收行为；实现完成后只报告匹配证据，不等于正式验收。
进入条件与边界
- 接收已确认规格/架构、明确的小型实现目标，或已有项目的事实图和改动边界。
- 已有项目先读取规则、相关源码/配置/文档、版本控制状态、测试与构建方式；记录用户已有改动，不覆盖、不回退、不顺手整理无关文件。
- 产品语义、数据规则、权限或外部服务影响尚不明确时，停在决策点；单纯可观察故障但根因未知时转入调试阶段。
- 不新增未获来源支持的入口、状态、付费、广告、权限理由或业务逻辑；不把内部实现细节擅自扩写到公开说明。
受控实现流程
- 写出目标、允许修改文件/模块、必须保护内容、明确不做项、验证命令与回滚条件，建立修改前基线。
- 识别真实事实源，区分手写源码、生成脚本、配置、资源和构建产物；应修改生成脚本时不直接把生成结果当唯一修复点。
- 为新增行为或缺陷先建立能失败的测试或最小复现，执行
RED并确认失败原因正确。 - 写最小改动到
GREEN，运行目标测试；再做不改变行为的REFACTOR，每一步保持范围可审查。 - 检查空、错误、边界、重复操作、异步与受影响共享契约；发现相邻问题只记录，不静默扩大范围。
- 复核差异、用户已有改动、敏感内容和必要内部文档，运行与风险相称的静态、单元或集成检查。
- 使用 工程实现工作流 自检，并按 实现交接模板 交给验证阶段。
涉及资产时建立资产谱系，至少记录原始/衍生关系、处理工具与方式、目标槽位、尺寸、透明通道、SHA-256、批准范围和替换关系。命令中断或超时后把在途写入记为 unknown，先刷新工作区、进程、产物和日志，不盲目重放。
最低输出
- 实现目标、输入事实、假设、改动边界与保护项。
- 逐文件改动清单，以及为何属于当前目标。
RED → GREEN → REFACTOR或无法采用测试驱动时的明确理由与替代证据。- 已执行验证、结果、未验证层级、残余风险和回滚方式。
- 状态最多报告到证据支持的
implemented、built或locally-verified；不得推导真机、云端、验收、上传或发布。
停止条件
遇到无法安全区分的用户改动、互相冲突的事实源、需要扩大产品范围的选择、未批准的高风险数据/权限/外部服务变更、不可接受的迁移或回滚缺口时停止。不得以覆盖文件、重置工作区或跳过失败测试强行推进。
独立与套件协作
独立安装时，本 Skill 可完成边界明确的代码实现。位于套件中时，接收规格、架构或调试阶段的稳定交接，只输出实现差异与验证入口，不直接调用其他组件脚本。
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 45 lines · 139 tokens per session scan A d9744d5ab6c7
mini-program-implementation-skill is a skill published in the GitHub repository NocodeMrLi/mini-program-engineering-skill-suite (22 stars, last pushed 2d ago), licensed MIT. It adds 139 tokens to every session and 994 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
taro-ui-guide
Guides installation, Taro config, styling, and usage of taro-ui (At components) for WeChat/Alipay/H5/RN. Use when building Taro apps with taro-ui, picking components, theming, i18n, or modifying packages/taro-ui source.
to-issues
Decompose a PRD and/or SPEC into implementable, vertically-sliced Issues with real blocking edges, then create them in your chosen platform (GitHub or Local). Use after /prd (and optionally /prd-to-spec) to turn requirements into agent-ready tickets. Triggers on: create issues, to-issues, 创建issue, 拆解issue, 生成卡片, 创建卡片…
article-icons
Illustrate an article (Markdown, HTML, etc.) with animated-style icons from itshover.com/icons. Fetches icons as clean inline SVG and places them at section headings, key concepts, lists, and callouts. Triggers on: /article-icons, 配图, 给文章配图标, add icons to article, illustrate with icons.
code-refactoring-assistant
Suggest and apply code refactorings to improve readability, maintainability, and code quality. Use this skill when improving existing code structure, eliminating code smells, applying design patterns, simplifying complex logic, extracting duplicated code, renaming for clarity, or preparing code for new features.…
bug-to-patch-generator
Generate code fixes and patches from bug reports, failing test cases, error messages, and stack traces. Use this skill when debugging code, fixing test failures, addressing GitHub issues, resolving runtime errors, or patching security vulnerabilities. Analyzes the bug context, identifies root causes, and generates…
code-comment-generator
Generates meaningful comments and documentation for code to improve maintenance and readability. Use when adding documentation to Python or Java code, including function/method docstrings, class documentation, inline explanations for complex logic, and code annotations (TODO, FIXME). Analyzes existing comment style in…