Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add redfox-data/redfox-community-dsh --skill wechat-prohibited-wordgit clone --depth 1 https://github.com/redfox-data/redfox-community-dshWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word)<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/wechat-prohibited-word.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00069 | $0.03097 |
| Opus 5.5 | $0.00028 | $0.01239 |
| Sonnet 5.5 | $0.00014 | $0.00619 |
| Haiku 4.5 | $0.00007 | $0.00310 |
Grade A, and why
wechat-prohibited-word scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 285 lines — stays where its author put it; the contents beside it link to each section on GitHub.
公众号违禁词查询
简介
公众号违禁词查询是一款专为公众号内容创作者和运营人员设计的合规检测工具，基于官方违禁词库实时同步，覆盖广告法、医疗美容、金融风险等 10+ 类目。
通过简单的文案输入，你可以：
- 🔍 快速扫描文案中的违禁词与敏感表述，加粗标注风险位置
- 💡 获取每个违禁词的向上文语境的替换建议
- ✏️ 直接拿到一份替换后的合规文案，复制即可发布
- 📎 自动生成纯文本文件，方便存档和协作
适用于公众号运营、新媒体编辑、品牌市场团队、设计师等需要确保文案合规发布的场景。
本 Skill 基于 Python 脚本，通过 API 调用远端违禁词检测服务，支持文本、文件、网页、图片四种输入方式。
功能特性
核心功能
| 功能 | 说明 |
|---|---|
| 违禁词扫描 | 基于官方违禁词库，覆盖广告法极限词、医疗美容、金融风险、教育培训等 10+ 类目 |
| 风险标注 | 命中违禁词在原文中加粗显示，同时汇总违禁词类型与数量 |
| 智能替换 | 每个违禁词提供结合上下文的替换表达，附更换理由，不是机械同义词替换 |
| 优化文案生成 | 直接输出替换后的完整合规版本，替换处加粗标记，保持原文语气和风格 |
特色亮点
- 四种输入方式：支持直接粘贴文案、上传 TXT/DOC/DOCX 文件、上传图片自动提取文字、粘贴网页链接
- 长文案分批检测：超过 3000 字自动提醒，支持按自然断句处切割分批检测，结果自动合并
- 英文误匹配过滤：内置英文单词识别，不会把 "Glasswing" 中的 "ass" 误判为违禁词
- 网络异常容错：API 请求遇到 5xx、超时、连接失败时自动重试，无需手动干预
- 数据隐私保护：文案通过加密连接发送至检测服务，不在本地存储
一键安装
前置条件
- Python 3.7+ 运行环境
- pip 包管理器
- 已注册 红狐Hub 账号并获取 API Key
安装步骤
- 将本 Skill 文件夹放入你的平台 Skill 目录
- 安装 Python 依赖：
pip install requests python-docx beautifulsoup4 playwright
playwright install chromium
- 配置 API Key（见下方）
API Key 配置
获取 API Key
配置方式
| 配置方式 | 操作 | 说明 |
|---|---|---|
| 环境变量（推荐） | export REDFOX_API_KEY=ak_xxxxxxxx |
在当前终端会话生效 |
| Shell 配置文件 | 将上述 export 语句写入 ~/.bashrc 或 ~/.zshrc，执行 source ~/.bashrc |
永久生效，脚本自动读取 |
脚本获取 Key 的优先级：环境变量
REDFOX_API_KEY→ Shell 配置文件自动扫描 → 提示用户配置
💳 积分不足充值（支付宝接管）
当脚本以退出码 3 结束、并在 stdout 打印 ===PAYMENT_REQUIRED_JSON_START=== 区块时，表示当前 API Key 积分不足（接口 code=3210，兼容 3201）。响应体 data 内含结构化支付信息：cashierUrl（支付宝收银台链接）、amount（订单金额，元）、goodsName（商品名称）、outTradeNo（订单号）。
脚本退出码含义：0 正常返回（含"未检测到违禁词"）；1 参数/鉴权/接口错误；3 积分不足，需要充值——按 references/alipay-recharge.md 唤起支付宝充值，到账后自动用原始参数重跑脚本。
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +10 lines · +23 tokens per session 9acb309ee516
- 1mo ago First seen · 275 lines · 46 tokens per session scan A c490589fb89f
wechat-prohibited-word is a skill published in the GitHub repository redfox-data/redfox-community-dsh (8 stars, last pushed 5d ago), licensed MIT. It adds 69 tokens to every session and 3,097 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
dsh-hooks-authoring
Instructions for writing and debugging dsh-hooks-plugin scripts, which run during tool or session events such as before a tool call or after it finishes. These scripts return JSON decisions such as allowing, asking about, or denying an action.
web-artifact-designer
A design workflow for producing self-contained HTML or SVG files that open directly in a browser. It covers visual work such as posters, infographics, landing pages, charts, banners, cards, and interface mockups.
healthcare-phi-compliance
Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors. Use when code touches PHI or PII in a healthcare system, or when auditing access control…
hipaa-compliance
HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.
customs-trade-compliance
Codified expertise for customs documentation, tariff classification, duty optimization, restricted party screening, and regulatory compliance across multiple jurisdictions. Informed by trade compliance specialists with 15+ years experience. Includes HS classification logic, Incoterms application, FTA utilization, and…
prediction-market-risk-review
Review prediction-market, basket, oracle, and trading-agent workflows for compliance, safety, data-quality, privacy, and execution risk. Use before any workflow handles venue auth, user portfolio data, API keys, or trade planning.