Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ssbun/csl-agent-kit/zhihunpx skills add SSBun/csl-agent-kit --skill zhihugit clone --depth 1 https://github.com/SSBun/csl-agent-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ssbun/csl-agent-kit/zhihu)<a href="https://agentmods.dev/skills/ssbun/csl-agent-kit/zhihu"><img src="https://agentmods.dev/badge/skills/ssbun/csl-agent-kit/zhihu.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00114 | $0.02209 |
| Opus 5 | $0.00057 | $0.01104 |
| Sonnet 5 | $0.00023 | $0.00442 |
| Haiku 4.5 | $0.00011 | $0.00221 |
Grade A, and why
zhihu scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 160 lines — stays where its author put it; the contents beside it link to each section on GitHub.
知乎开放平台
当前 Skill 版本：0.2.1
通过知乎官方 CLI 使用公共知识与当前用户自己的知乎 Context。日常任务优先调用 CLI；只有开发接入场景才读取原始 HTTP API、OAuth 或 MCP 文档。
首次检查与初始化
每个 Session 第一次激活这个 Skill 时，先定位本文件所在的 Skill 根目录，再运行一次无副作用的状态检查。同一 Session 后续调用不要重复检查，也不要先调用 PATH 中来源不明的 zhihu-cli。
Skill 的安装、升级、备份与回滚由宿主管理。若宿主创建备份，应备份完整的 Skill 目录，并存放在非自动发现区域；不得在任何 Skill 自动发现目录中创建同名、带后缀或其他仍可被识别为 Skill 的备份目录，避免宿主同时发现多个 zhihu Skill。
# macOS
bash <skill-dir>/scripts/run.sh status
# Windows PowerShell
powershell -ExecutionPolicy Bypass -File <skill-dir>/scripts/run.ps1 status
根据返回 JSON 处理：
installed=false：说明 CLI 将安装到用户目录，不需要管理员权限，也不修改 PATH；询问用户是否现在安装。未得到明确同意时停止。update_check.status=unavailable：只表示本次无法确认远端版本，不得声称已是最新版；本地 CLI 可用时继续用户任务。compatible=false：当前 CLI 低于 Skill 最低要求，先请求用户授权升级，升级完成前不调用业务命令。- CLI 或 Skill 存在可选更新：先完成当前任务，再简短提醒用户；只有用户同意后才更新。
- 用户已经明确要求“安装并初始化”，或提供了明确要求完成初始化的开放平台安装 prompt：视为同时授权安装 CLI、在线验证 Access Secret，并最小读取一条本人内容作为验收；后两项会调用开放平台接口，可能消耗接口额度，无需逐项重复询问。若用户只授权安装，不执行第 9 步。
- 获得授权后，运行对应平台的
scripts/setup.sh或scripts/setup.ps1，保存 stdout JSON 中的绝对binary_path，再运行一次 status。 auth.configured=false：引导用户打开 https://developer.zhihu.com/profile，登录并手动生成 Access Secret，然后等待用户在对话中发送。- 收到 Access Secret 后，不在回复中复述完整内容。启动以下命令，并通过进程标准输入传入 Secret：
<binary_path> auth set --secret-stdin
- 配置成功且已有第 5 条初始化授权，或另行得到用户明确同意后，执行：
<binary_path> auth status --verify
<binary_path> me contents --type all --limit 1
auth status --verify 会发起一次本人内容相关请求验证凭证，me contents --type all --limit 1 会再发起一次最小业务请求验收实际命令；两次调用都可能消耗接口额度。两条命令都成功后才报告初始化完成；内容列表为空也算成功。已经安装并完成授权时，不重复初始化，直接处理当前任务。
本次任务的所有调用都使用状态检查或 setup 返回的 binary_path。下文 <CLI> 均代表这个绝对路径，不是要求 PATH 中存在裸命令。
Skill 包不携带 CLI 二进制。setup 获得用户授权后，从发布时注入的官方 HTTPS manifest 只下载当前平台版本，校验 host、文件大小、SHA-256 和二进制自报版本后安装到用户目录；不使用 sudo，也不修改 PATH。安装协议和故障处理见 CLI 使用文档。
选择能力
| 用户目标 | 命令 | 边界 |
|---|---|---|
| 找知乎回答、文章、经验或观点 | search zhihu |
返回知乎社区原始内容和链接，适合阅读、研究和保留证据 |
| 找新闻、官网或外部权威来源 | search global |
返回知乎之外的全网来源 |
| 同时需要社区观点和外部证据 | 两种搜索分别调用 | 分开检索后综合，不把两类来源混成一个黑盒 |
| 了解当前关注热点 | hot |
只代表当前热度；需要解释或核实时继续搜索 |
| 快速获得综合答案 | answer |
先检索再生成答案，不替代原始资料研究 |
| 查看我的创作、关注和收藏 | me ... |
只查询当前 Access Secret 所属账号的公开范围数据 |
What ships with it
11 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- manifest.json 314 B
- references/cli.md 13 KB
- references/http-api.md 24 KB
- references/mcp.md 17 KB
- references/oauth.md 6.1 KB
- references/open-platform.md 2.9 KB
- references/user-api.md 9.4 KB
- scripts/run.ps1 4.0 KB runs code
- scripts/run.sh 1.9 KB runs code
- scripts/setup.ps1 8.8 KB runs code
- scripts/setup.sh 7.5 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 160 lines · 114 tokens per session scan A 25e60c3a553a
zhihu is a skill published in the GitHub repository SSBun/csl-agent-kit (10 stars, last pushed 4d ago), licensed MIT. It adds 114 tokens to every session and 2,209 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
next-cache-components-optimizer
Drive a Next.js route to instant navigation by setting up an agentic loop, under Cache Components / PPR, on initial load (hard navigation) and client-side navigation (soft navigation). Encode the goal as a failing @next/playwright instant() e2e and work it to green, one verified route at a time; the shipped test then…
next-partial-prefetching-adoption
Turn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the partialPrefetching flag, opt routes in with export const prefetch = 'partial', audit Link prefetch={true} behavior, preserve existing prefetched UI with…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…