Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ssbun/csl-agent-kit/venom-clinpx skills add SSBun/csl-agent-kit --skill venom-cligit clone --depth 1 https://github.com/SSBun/csl-agent-kitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00055 | $0.00913 |
| Opus 5 | $0.00028 | $0.00456 |
| Sonnet 5 | $0.00011 | $0.00183 |
| Haiku 4.5 | $0.00006 | $0.00091 |
Grade A, and why
venom-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Usage
Use venom-cli [project-path] guidance for Zhihu iOS projects. Always pass -p <project-path> to the actual CLI command once the project path is known.
Preflight
Before running venom-cli commands, verify the binary is on PATH:
command -v venom-cli && venom-cli --version
If missing, ask the user before installing globally. Explain that this installs the venom-cli executable on their system via npm:
npm install --global @ssbun/venom-cli
If the user declines installation, stop. Do not run build/make/integrate commands until preflight passes.
Project Path
The CLI accepts -p, --project <path> option to specify project directory.
Check pre-configured projects first — venom-cli stores project paths in config:
venom-cli config list
If a project is listed in config, use its path. Otherwise ask user for root project path. Always pass -p <path> explicitly.
Command Discovery
Run --help to explore commands and options. venom-cli uses nested subcommands — use --help at each level to discover available subcommands, options, and flags.
venom-cli --help # top-level commands
venom-cli <command> --help # subcommand options
venom-cli <command> <subcommand> --help # nested subcommand details
Key Commands
doctor— Check environment (Ruby, Bundler, CocoaPods, Git, Xcode). Use--fixto auto-repair.devices— List simulators/devices. Run beforebuildto pick target.build— Incremental compile. Fast. Use for checking build errors after code edits. Supports--scheme,--run,--debug,--verbose.make— Regenerate Podfile + pod install using binary caches. Full recompile.make-source— Same asmakebut from source (no cache). Full recompile, slower.integrate list/switch/clone/remove/status— Component dependency management.gen-asset-code— Generate Swift/ObjC resource access code for component.config get/set/list— Manage venom-cli configuration.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 91 lines · 55 tokens per session scan A 187efa88cd05
venom-cli is a skill published in the GitHub repository SSBun/csl-agent-kit (10 stars, last pushed 3d ago), licensed MIT. It adds 55 tokens to every session and 913 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
agent-squad-swift
Use when building or modifying a Swift app that uses the AgentSquad Swift framework — on-device multi-agent orchestration for iOS 16+ / macOS 14+: orchestrator, agents (Agent, GroundedAgent), classifier routing, LLM clients (OpenAI-compatible), tools (native + MCP), tool UIs/widgets, on-device storage, tracing, and…
kotlin-specialist
Provides idiomatic Kotlin implementation patterns including coroutine concurrency, Flow stream handling, multiplatform architecture, Compose UI construction, Ktor server setup, and type-safe DSL design. Use when building Kotlin applications requiring coroutines, multiplatform development, or Android with Compose.…
expo-module
Framework (OSS). Guide for creating and writing Expo native modules and views using the Expo Modules API (Swift, Kotlin, TypeScript). Covers module definition DSL, native views, shared objects, config plugins, lifecycle hooks, autolinking, and type system. Use when building or modifying native modules for Expo. Not…
app-implement-feature
Guide for implementing features in baguette — a Swift CLI + WebSocket server that drives iOS simulators via private SimulatorKit. Use this skill when: (1) Adding a new gesture, button, keyboard surface, stream format, or device-chrome behaviour (anything that lands across Domain / Infrastructure / App +…
kotlin-multiplatform
Platform abstraction decision-making for Amethyst KMP project. Guides when to abstract vs keep platform-specific, source set placement (commonMain, jvmAndroid, platform-specific), expect/actual patterns. Covers primary targets (Android, JVM/Desktop, iOS — all mature) with web/wasm as possible future targets.…
swiftui-dev
Use this skill for SwiftUI development, architecture, structure, performance, and Apple native app profiling. It combines.