Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add redfox-data/redfox-community-dsh --skill wechat-prohibited-wordgit clone --depth 1 https://github.com/redfox-data/redfox-community-dshWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word)<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.02734 |
| Opus 5 | $0.00023 | $0.01367 |
| Sonnet 5 | $0.00009 | $0.00547 |
| Haiku 4.5 | $0.00005 | $0.00273 |
Grade A, and why
wechat-prohibited-word scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 275 lines — stays where its author put it; the contents beside it link to each section on GitHub.
公众号违禁词查询
简介
公众号违禁词查询是一款专为公众号内容创作者和运营人员设计的合规检测工具，基于官方违禁词库实时同步，覆盖广告法、医疗美容、金融风险等 10+ 类目。
通过简单的文案输入，你可以：
- 🔍 快速扫描文案中的违禁词与敏感表述，加粗标注风险位置
- 💡 获取每个违禁词的向上文语境的替换建议
- ✏️ 直接拿到一份替换后的合规文案，复制即可发布
- 📎 自动生成纯文本文件，方便存档和协作
适用于公众号运营、新媒体编辑、品牌市场团队、设计师等需要确保文案合规发布的场景。
本 Skill 基于 Python 脚本，通过 API 调用远端违禁词检测服务，支持文本、文件、网页、图片四种输入方式。
功能特性
核心功能
| 功能 | 说明 |
|---|---|
| 违禁词扫描 | 基于官方违禁词库，覆盖广告法极限词、医疗美容、金融风险、教育培训等 10+ 类目 |
| 风险标注 | 命中违禁词在原文中加粗显示，同时汇总违禁词类型与数量 |
| 智能替换 | 每个违禁词提供结合上下文的替换表达，附更换理由，不是机械同义词替换 |
| 优化文案生成 | 直接输出替换后的完整合规版本，替换处加粗标记，保持原文语气和风格 |
特色亮点
- 四种输入方式：支持直接粘贴文案、上传 TXT/DOC/DOCX 文件、上传图片自动提取文字、粘贴网页链接
- 长文案分批检测：超过 3000 字自动提醒，支持按自然断句处切割分批检测，结果自动合并
- 英文误匹配过滤：内置英文单词识别，不会把 "Glasswing" 中的 "ass" 误判为违禁词
- 网络异常容错：API 请求遇到 5xx、超时、连接失败时自动重试，无需手动干预
- 数据隐私保护：文案通过加密连接发送至检测服务，不在本地存储
一键安装
前置条件
- Python 3.7+ 运行环境
- pip 包管理器
- 已注册 红狐Hub 账号并获取 API Key
安装步骤
- 将本 Skill 文件夹放入你的平台 Skill 目录
- 安装 Python 依赖：
pip install requests python-docx beautifulsoup4 playwright
playwright install chromium
- 配置 API Key（见下方）
API Key 配置
获取 API Key
配置方式
| 配置方式 | 操作 | 说明 |
|---|---|---|
| 环境变量（推荐） | export REDFOX_API_KEY=ak_xxxxxxxx |
在当前终端会话生效 |
| Shell 配置文件 | 将上述 export 语句写入 ~/.bashrc 或 ~/.zshrc，执行 source ~/.bashrc |
永久生效，脚本自动读取 |
脚本获取 Key 的优先级：环境变量
REDFOX_API_KEY→ Shell 配置文件自动扫描 → 提示用户配置
使用指南
基础使用
方式一：直接粘贴文案
最常用的方式，适合快速检测草稿：
用户：帮我看下这篇公众号草稿有没有违禁词：这款美白神器真的太有效了，用了三天就白了一个度
助手：自动检测并输出违禁词标注、替换建议表和优化后文案
方式二：上传文件
支持 TXT、DOC、DOCX 格式，直接上传即可自动读取检测。
方式三：上传图片
上传海报截图或推文截图，系统自动提取图中文字进行检测（仅提取文字内容，不分析图片视觉风格）。
方式四：粘贴网页链接
提供文章 URL，系统自动抓取页面正文内容进行检测。
注意事项：
- 平台固定为公众号，无需手动指定
- 单次建议不超过 3000 字，超过会询问你是否分批检测
- 超过 10000 字的内容暂不支持，建议手动分批
- PDF 文件不支持，请转为图片或文本文件后上传
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 275 lines · 46 tokens per session scan A c490589fb89f
wechat-prohibited-word is a skill published in the GitHub repository redfox-data/redfox-community-dsh (5 stars, last pushed yesterday), licensed MIT. It adds 46 tokens to every session and 2,734 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
dsh-hooks-authoring
Instructions for writing and debugging dsh-hooks-plugin scripts, which run during tool or session events such as before a tool call or after it finishes. These scripts return JSON decisions such as allowing, asking about, or denying an action.
web-artifact-designer
A design workflow for producing self-contained HTML or SVG files that open directly in a browser. It covers visual work such as posters, infographics, landing pages, charts, banners, cards, and interface mockups.
healthcare-phi-compliance
Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors. Use when code touches PHI or PII in a healthcare system, or when auditing access control…
customs-trade-compliance
Codified expertise for customs documentation, tariff classification, duty optimization, restricted party screening, and regulatory compliance across multiple jurisdictions. Informed by trade compliance specialists with 15+ years experience. Includes HS classification logic, Incoterms application, FTA utilization, and…
hipaa-compliance
HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.
prediction-market-risk-review
Review prediction-market, basket, oracle, and trading-agent workflows for compliance, safety, data-quality, privacy, and execution risk. Use before any workflow handles venue auth, user portfolio data, API keys, or trade planning.