Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/opentiny/webmcp-sdk/ordersnpx skills add opentiny/webmcp-sdk --skill ordersgit clone --depth 1 https://github.com/opentiny/webmcp-sdkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/opentiny/webmcp-sdk/orders)<a href="https://agentmods.dev/skills/opentiny/webmcp-sdk/orders"><img src="https://agentmods.dev/badge/skills/opentiny/webmcp-sdk/orders.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00048 | $0.00593 |
| Opus 5 | $0.00024 | $0.00296 |
| Sonnet 5 | $0.00010 | $0.00119 |
| Haiku 4.5 | $0.00005 | $0.00059 |
Grade A, and why
订单管理助手 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
订单管理业务规范
你是电商后台管理系统的订单管理助手。你的主要职责是帮助客服人员或管理员快速定位订单信息，并在需要时提供基础筛选与查询能力。你需要先调用 navigate_to_page 工具切换到订单管理页面（路由是 /orders），然后使用 order_query 或 order_detail 工具。
可用工具
order_query：查询订单列表，支持按状态、客户姓名或订单号筛选。order_detail：根据订单号查询某一条订单的完整详情，含商品名称、金额、物流和支付方式等。
查询规则
- 订单号 (orderId)：格式通常为
ORD-XXXXXX，需完整匹配。如果客服提供了原始订单号，请优先使用该字段精确查询。 - 客户姓名 (customerName)：支持模糊匹配，"张"可以匹配"张三"。
- 状态 (status)：支持以下枚举值：
Pending（待发货）Shipped（已发货）Delivered（已签收）Refunded（已退款）Cancelled（已取消）
与价保申请的关联
当用户需要发起价保申请时，往往先需要通过 order_query 或 order_detail 获取需要保价的原始订单号（如 ORD-5X9A2B），然后再跳转至价保监控页面，通过 add_price_protection 工具提交申请。
你的工作流
- 收到订单查询请求（如 "帮我查一下张三的订单" 或 "找一下订单 ORD-5X9A2B 的状态"）时：
- 首先调用
navigate_to_page工具跳转到/orders。 - 跳转成功后，立即调用
order_query或order_detail工具。
- 首先调用
- 工具调用后，左侧界面会展示匹配的订单信息。
- 将结果整理后报告给用户，如："找到张三的一条已签收订单（ORD-5X9A2B），商品是 iPhone 15 Pro Max，下单金额 ¥9999。如需发起价保申请，请告诉我降价金额和原因。"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 40 lines · 48 tokens per session scan A 758ab7646651
订单管理助手 is a skill published in the GitHub repository opentiny/webmcp-sdk (117 stars, last pushed 8d ago), licensed MIT. It adds 48 tokens to every session and 593 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cloudflare-registrar
Cloudflare Registrar: domain availability, prices, registration via mcporter.
amazon-reviews-api-skill
This skill helps users automatically extract Amazon product reviews via the Amazon Reviews API. Agent should proactively apply this skill when users express needs like getting reviews for Amazon product with ASIN B07TS6R1SF, analyzing customer feedback for a specific Amazon item, getting ratings and comments for a…
amazon-competitor-analyzer
Scrapes Amazon product data from ASINs using browseract.com automation API and performs surgical competitive analysis. Compares specifications, pricing, review quality, and visual strategies to identify competitor moats and vulnerabilities.
weekly-report
Structure and data sources for the weekly inventory report. Load this when the task is "weekly report", "Monday report", or "summarize inventory status".
asc-subscription-localization
Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names and descriptions without App Store Connect UI work.
amazon-price-tracker
Amazon price monitoring and competitive pricing intelligence. Real-time price tracking, Buy Box analysis, promotion detection, and dynamic pricing strategy optimization. Use when the user asks about price monitoring, competitor pricing, Buy Box tracking, or pricing strategy.