Borrowing it
Nothing to install: this file belongs to T8mars/T8-penguin-canvas. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/T8mars/T8-penguin-canvas/main/.agents/skills/zhenzhen-canvas/SKILL.mdgit clone --depth 1 https://github.com/T8mars/T8-penguin-canvasWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/t8mars/t8-penguin-canvas/zhenzhen-canvas)<a href="https://agentmods.dev/skills/t8mars/t8-penguin-canvas/zhenzhen-canvas"><img src="https://agentmods.dev/badge/skills/t8mars/t8-penguin-canvas/zhenzhen-canvas/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/t8mars/t8-penguin-canvas/zhenzhen-canvas"><img src="https://agentmods.dev/badge/skills/t8mars/t8-penguin-canvas/zhenzhen-canvas.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 12 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 204 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Data Exfiltration · line 52 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 80 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 84 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 90 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 96 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 102 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 110 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 114 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 118 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 126 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Excessive Agency · line 205 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00149 | $0.43792 |
| Opus 5 | $0.00075 | $0.21896 |
| Sonnet 5 | $0.00030 | $0.08758 |
| Haiku 4.5 | $0.00015 | $0.04379 |
Grade A, and why
zhenzhen-canvas scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 675 lines — stays where its author put it; the contents beside it link to each section on GitHub.
贞贞无限画布
2026-09-09 v3.1.5 formal release completed: fixed source/tag
d3d16054f049bfa01aa64e1432c5d382cc806f59is the non-draft, non-prerelease GitHub Latest at https://github.com/T8mars/T8-penguin-canvas/releases/tag/v3.1.5. It publishes Zhenzhen AI Workshop GPT Image 2.5 Flare/Sunburst six-model support, Budget AI House Image G v2.5 Lowprice/Flare/Sunburst, case-sensitiveMiniMax-H3V2 with four credential-free workflows, and Vosr2 image/video upscaling while preserving every v3.1.4-and-earlier node, model, workflow, Provider contract, default, and saved canvas. Focused/adjacent model suites passed120/120, Electron ABI27/27, Electron/updater/macOS/runtime/release contracts40/40, followed by TypeScript, Node syntax,4,484bilingual keys,39 actions / 294 runtime / 83/83 nodes, public/RH/Music3 checks, and a 2,952-module production build. The single Windows formal chain completed encryption of 172 backend sources plus four private files, both runtimes, native rebuild, NSIS, seven-fileapp.asarstartup contract, provenance, sealed recovery, upload, and full remote download; the legacy bundled 7za large-archive multithreading defect was handled through the dependency-supportedUSE_SYSTEM_7ZApath with installed 7-Zip 24.06, with source/archive CRC and post-build runtime digests verified. Real macOS arm64 workflow https://github.com/T8mars/T8-penguin-canvas/actions/runs/34371680596 completed same-source native dependencies, ad-hoc signing, DMG/ZIP/updater build, append-only upload, and runner download verification; an independent local verifier downloaded all three Mac assets again, and the final Windows verifier confirmed its three assets with all six present. Windows EXE is 1,375,574,801 bytes /250ff3fe7ab9060312056917dbde7e08da0989447990bb08644aa158f2d38bc1, blockmap 1,434,584 bytes /c56ab3fce2803c7b4246b73cab8cd27ddda0534cb6907209b36082b664d48557, andlatest.yml362 bytes /04f1c4e9c6b0f17d1d898f19408375fcc91d81648170bc9138b55e3da6ff417d; Mac DMG is 514,103,818 bytes /456fc655cbf3c1e44edfff370ae2b921b12096c82cb0812a8f9525e36c9cc448, ZIP 506,148,221 bytes /e2f906018576e187daa9d27e71dc2ed2683142e36219916c89aca9a09ba3983e, andlatest-mac.yml536 bytes /ee34fb2ea78fde8a5faff29f897a31d4b705140c01255ec78e8fa56209233b77. Affected-user installation, multi-device collaboration, F8-F10, human natural-language review, device-level screen-reader/touch/zoom, and installed-upgrade evidence remain deferred underowner-approved-post-release-v3.1.5and are not passed.
2026-09-09 current v3.1.5 formal release authorization: after the earlier pause, the owner explicitly requested updating
SKILL.mdandfeatures.json, pushing the new GitHub version, running the single formal Electron package through this Skill, and publishing a new Release. Fixed scope includes Zhenzhen AI Workshop GPT Image 2.5 Flare/Sunburst six-model support, Budget AI HouseMiniMax-H3V2 plus four credential-free workflows, Vosr2 image/video upscaling, and Image G v2.5lowprice/flare/sunburst, while preserving every v3.1.4-and-earlier capability, default, and saved canvas. The fixed source must pass focused regression, Electron ABI, TypeScript, bilingual catalog, capability synchronization, public/private build, encryption, both runtimes, native rebuild,app.asarstartup contracts, NSIS, provenance, and sealed recovery before it is pushed toorigin/main. Windows and real macOS arm64 must come from the same immutablev3.1.5tag, enter one non-draft/non-prerelease Latest Release, and pass full remote download verification for both updater manifests and all six assets. Affected-user installation, multi-device collaboration, F8-F10, human natural-language review, device-level screen-reader/touch/zoom, and installed-upgrade evidence may remain deferred underowner-approved-post-release-v3.1.5, but are not passed.
2026-09-09 release-pause history: the owner previously stopped v3.1.5 before its production build, which revoked the earlier authorization at that time. The owner's later explicit continue-and-publish request now controls; this stopped state is historical only.
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 452 B
- references/browser-control.md 1.7 KB
- references/commands.md 13 KB
- references/compatibility.md 16 KB
- references/creative-workflows.md 22 KB
- references/generated-capabilities.md 10 KB
- references/generated-capability-coverage.md 15 KB
- references/generated-capability-surfaces.json 97 KB
- references/production-evidence-and-acceptance.md 7.7 KB
- references/protocol.md 9.4 KB
- references/security.md 2.1 KB
- scripts/zcanvas.cjs 4.0 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +16 lines 1f9d452ac7f1
- 7d ago Changed · +4 lines ee6451f89465
- 8d ago Changed · +2 lines dfa90221bdd1
- 12d ago First seen · 653 lines · 149 tokens per session scan A 320ba524fd51
zhenzhen-canvas is a skill published in the GitHub repository T8mars/T8-penguin-canvas (566 stars, last pushed 2d ago), licensed MIT. It adds 149 tokens to every session and 43,792 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…