Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add serejaris/kimi-skills --skill kimi-widgetgit clone --depth 1 https://github.com/serejaris/kimi-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/serejaris/kimi-skills/kimi-widget)<a href="https://agentmods.dev/skills/serejaris/kimi-skills/kimi-widget"><img src="https://agentmods.dev/badge/skills/serejaris/kimi-skills/kimi-widget/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/serejaris/kimi-skills/kimi-widget"><img src="https://agentmods.dev/badge/skills/serejaris/kimi-skills/kimi-widget.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00069 | $0.00778 |
| Opus 5 | $0.00034 | $0.00389 |
| Sonnet 5 | $0.00014 | $0.00156 |
| Haiku 4.5 | $0.00007 | $0.00078 |
Grade A, and why
kimi-widget scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Kimi Widget
A widget is a compact visual or interactive surface rendered inline in the conversation: diagrams, dashboards, calculators, sliders, comparisons, timelines, state machines, small simulations. Use one when seeing structure helps the user understand, compare, inspect, or act on the answer better than prose alone.
When to generate a widget
- The answer has spatial, sequential, systemic, comparative, numeric, or interactive structure.
- The user does not need to say "show", "visualize", "chart", or "widget" — proactive widgets are expected when the structure is there.
- If the user gives a compact visual spec without a verb ("REST vs GraphQL table", "checkout state machine", "pricing calculator"), render it as a widget instead of only describing it.
Do not use a widget for: ordinary prose answers, routine line-by-line code explanations, file lists / galleries / final deliverables, blocking input workflows, destructive or native actions, or large long-lived apps.
Runtime contract
The widget runs in a sandboxed iframe with the Kimi design system CSS already loaded. All CSS variables, form-element styles, and SVG classes are available at runtime — reference them, do not redefine them.
- Allowed: HTML, SVG, CSS, inline JavaScript, native browser APIs.
- Not allowed: external scripts, modules, stylesheets, images, fonts, CDN libraries, npm
packages,
fetch, or WebSocket. For charts/diagrams use SVG, Canvas, CSS, or plain DOM. - Text goes in your response, visuals go in the widget. All explanatory prose, intros, and summaries live OUTSIDE the widget.
- After the widget renders, don't narrate it. Once you've called the widget tool and the widget is done, do not re-summarize or repeat what you just did — the visual speaks for itself. Say only what the widget cannot.
- Sending intent back. An interactive widget may call
window.sendPrompt(text)(when the host injects it) to push the user's next intent into the conversation. Writetextas a real user message — what the user would actually type — never a robotic confirmation like "I selected option A, please proceed." - Never hardcode colors, fonts, or border-radius — always use
var(--xxx). Hardcoded values break dark mode and look inconsistent with the host UI.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/icons/Add.svg 585 B
- assets/icons/AllSelected.svg 1.9 KB
- assets/icons/Bad.svg 1.9 KB
- assets/icons/Ban.svg 777 B
- assets/icons/Bookmark.svg 1.6 KB
- assets/icons/Browser.svg 2.1 KB
- assets/icons/Catalog.svg 718 B
- assets/icons/Change.svg 868 B
- assets/icons/Check.svg 450 B
- assets/icons/CheckboxEmpty.svg 480 B
- assets/icons/CheckboxIn.svg 491 B
- assets/icons/Clip.svg 2.1 KB
- assets/icons/Close.svg 659 B
- assets/icons/Code.svg 1.2 KB
- assets/icons/Collapse.svg 837 B
- assets/icons/Comment.svg 1.0 KB
- assets/icons/Completed.svg 3.3 KB
- assets/icons/Copy.svg 1.0 KB
- assets/icons/Create.svg 1.4 KB
- assets/icons/DarkMode.svg 1.0 KB
- assets/icons/Data.svg 3.5 KB
- assets/icons/Delete.svg 1.3 KB
- assets/icons/Desktop.svg 1.3 KB
- assets/icons/Diagram.svg 776 B
- assets/icons/Dislike.svg 1.9 KB
- assets/icons/DocDone.svg 1.4 KB
- assets/icons/Document.svg 1.3 KB
- assets/icons/Dot.svg 248 B
- assets/icons/Down.svg 602 B
- assets/icons/Download.svg 1.2 KB
- assets/icons/Edit.svg 1.4 KB
- assets/icons/Enter.svg 724 B
- assets/icons/Error.svg 1.9 KB
- assets/icons/Exclamation.svg 863 B
- assets/icons/Expand.svg 693 B
- assets/icons/Folder.svg 911 B
- assets/icons/FolderOpen.svg 1.6 KB
- assets/icons/FullScreen.svg 1.9 KB
- assets/icons/GoBack.svg 2.6 KB
- assets/icons/Group.svg 1.4 KB
- assets/icons/Histogram.svg 1.0 KB
- assets/icons/History.svg 891 B
- assets/icons/Image.svg 1.4 KB
- assets/icons/Info.svg 916 B
- assets/icons/Left.svg 587 B
- assets/icons/LeftRight.svg 1.0 KB
- assets/icons/LightMode.svg 2.6 KB
- assets/icons/Like.svg 1.9 KB
- assets/icons/Linechart.svg 819 B
- assets/icons/Link.svg 1.4 KB
- assets/icons/List.svg 724 B
- assets/icons/LoadingDone.svg 1.3 KB
- assets/icons/LoadingRight.svg 899 B
- assets/icons/Locate.svg 1.3 KB
- assets/icons/Magnify.svg 1.2 KB
- assets/icons/MathFormula.svg 1.3 KB
- assets/icons/Message.svg 885 B
- assets/icons/Minify.svg 977 B
- assets/icons/Minus.svg 324 B
- assets/icons/Mobile.svg 773 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 58 lines · 69 tokens per session scan A 4935451f5a36
kimi-widget is a skill published in the GitHub repository serejaris/kimi-skills (6 stars, last pushed 1mo ago), licensed MIT. It adds 69 tokens to every session and 778 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
frontend-design
Create distinctive, production-grade frontend interfaces with high design quality. Use when the user asks to build landing pages, websites, dashboards, web components, or any frontend UI. Generates creative, polished code that avoids generic AI aesthetics.
slop-eval
Objectively evaluate a UI/web design against the pols.dev anti-slop design law: detect catalogued slop tells with cited evidence, score 8 weighted axes (color, type, components, layout, motion, execution, signature, cohesion), and emit a Slop Report with a 0–100 Slop Index and grade. Use when the user asks to…
theming
Use when building a theme or theming system for an interface. Covers token architecture, dark mode, contrast preservation across themes, and generating a coherent palette from a seed colour.
design-systems
Use when building or maintaining a component library and design tokens. Covers token architecture, component API design, variants and states, documentation, and governing adoption across a codebase.
liquid-glass
Liquid glass — Apple-style frosted, refracting surfaces. Use when the user asks for glassmorphism, frosted/translucent panels, cards, menus or a glass topbar; when a glass surface looks wrong (gray, flat, invisible, unreadable text); or when another skill needs the glass recipe.
color-accessibility
Trigger on: check contrast, WCAG contrast, accessible colors, readable text color, fix low-contrast, dimmed text color, palette accessibility, pastel color, textcolor for background, make this color readable, UI theme contrast, Neovim highlight contrast. Evaluate, fix, and generate accessible fg/bg pairs with the…