Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/tencentcloudbase/awesome-miniprogram-skills/order-skillnpx skills add TencentCloudBase/awesome-miniprogram-skills --skill order-skillgit clone --depth 1 https://github.com/TencentCloudBase/awesome-miniprogram-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tencentcloudbase/awesome-miniprogram-skills/order-skill)<a href="https://agentmods.dev/skills/tencentcloudbase/awesome-miniprogram-skills/order-skill"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/awesome-miniprogram-skills/order-skill.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00023 | $0.00499 |
| Opus 5 | $0.00012 | $0.00249 |
| Sonnet 5 | $0.00005 | $0.00100 |
| Haiku 4.5 | $0.00002 | $0.00050 |
Grade A, and why
order-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
外卖点餐
基于餐厅列表完成餐厅搜索、菜单浏览、线上下单与配送状态查询的能力集合。
触发场景
用户原话举例（路由命中本技能）：
- "帮我点个外卖"
- "附近有什么好吃的餐厅"
- "我想吃汉堡/川菜/日料"
- "看看这家店有什么菜"
- "我要下单"
- "我的外卖到哪了"
- "帮我查一下订单配送状态"
不适用范围
- 门店排队取号、排队进度查询 → 不在本技能范围，由排队取号技能处理
- 饮品点单、规格选择等 → 不在本技能范围，由饮品点单技能处理
- 待办事项、提醒设置等 → 不在本技能范围，由待办技能处理
- 地图导航、路线规划、电话联系餐厅等 → 不在本技能范围
前置条件
- 用户需在可用配送范围内
- 查询配送状态前需先完成下单拿到订单号
接口链路
searchRestaurants：餐厅搜索与候选餐厅列表展示。getMenuItems：查看指定餐厅的菜单与菜品列表。placeOrder：选择菜品后提交订单（需配送地址和联系电话）。getOrderStatus：基于真实订单号查询配送进度与骑手信息。
使用顺序
- 点餐前需先确定具体餐厅；没有餐厅上下文时，先展示附近餐厅列表，再查看该餐厅菜单。
- 下单前需先查看菜单并选择菜品；确认购物车、配送地址和联系电话后再执行下单。
- 查询配送状态前需先拿到有效订单号；没有有效订单时，不能直接查询配送进度。
- 所有已绑定组件的接口都应优先展示卡片，不要改成纯文本逐条展开。
What ships with it
29 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- apis/getMenuItems.js 2.3 KB runs code
- apis/getOrderStatus.js 1.3 KB runs code
- apis/placeOrder.js 2.9 KB runs code
- apis/searchRestaurants.js 1.6 KB runs code
- cloudbaserc.json 737 B
- cloudfunctions/order-skill-handler/index.js 10 KB runs code
- cloudfunctions/order-skill-handler/package.json 177 B
- components/menu-list-card/index.js 3.5 KB runs code
- components/menu-list-card/index.json 49 B
- components/menu-list-card/index.wxml 1.1 KB
- components/menu-list-card/index.wxss 2.2 KB
- components/order-confirm-card/index.js 4.0 KB runs code
- components/order-confirm-card/index.json 49 B
- components/order-confirm-card/index.wxml 2.1 KB
- components/order-confirm-card/index.wxss 3.2 KB
- components/order-status-card/index.js 1.8 KB runs code
- components/order-status-card/index.json 49 B
- components/order-status-card/index.wxml 2.2 KB
- components/order-status-card/index.wxss 3.7 KB
- components/restaurant-list-card/index.js 3.3 KB runs code
- components/restaurant-list-card/index.json 49 B
- components/restaurant-list-card/index.wxml 1.4 KB
- components/restaurant-list-card/index.wxss 2.5 KB
- data/seed.js 10 KB runs code
- index.js 1.1 KB runs code
- mcp.json 13 KB
- mp-skills.json 154 B
- README.md 2.3 KB
- utils/util.js 2.3 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 44 lines · 23 tokens per session scan A 52fe4abdb131
order-skill is a skill published in the GitHub repository TencentCloudBase/awesome-miniprogram-skills (35 stars, last pushed 2mo ago), licensed MIT. It adds 23 tokens to every session and 499 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
gzh_article
公众号图文创作 / 推文 / 官方号文章 (official account article) — 端到端：选题→搜集→成文→配图→去AI化→公众号内联样式排版→交付/草稿箱。honors user persona & style memory.
ckjia-shopping
跨平台比价与购物推荐 / Cross-platform price comparison. 淘宝 / 京东 / 天猫 / 拼多多商品聚合搜索 + 拍图识物。需要先启用 ckjia-shopping MCP server 并配置 CKJIAMCPKEY 才能用。.
weapp-vite-best-practices
面向采用 weapp-vite 项目布局仓库或已安装 weapp-vite 依赖项目的工程化实践手册，覆盖 vite.config.ts 的 weapp 配置、内置 i18n、自动路由、routeRules/layout、buildScope、自动导入组件、分包、npm、六平台单目标构建、受管 TypeScript、HMR、sourcemap、prepare、MCP、Web runtime、lib mode、worker、AI skills，以及与 weapp-ide-cli 的命令治理边界。.
native-to-weapp-vite-wevu-migration
面向原生微信、支付宝、抖音等小程序渐进迁移到 weapp-vite + 原生 或继续升级到 weapp-vite + wevu + Vue SFC 的结构化工作流，覆盖六平台单目标构建、原生扩展名保留、Web 联调边界、路线选择、工具链接入、SFC 试点、响应式升级与可回滚验证。.
weapp-vite-vue-sfc-best-practices
面向使用 weapp-vite 的小程序项目的 Vue SFC 实践手册，覆盖 script setup、纯模板 SFC、JSON 宏、definePageMeta/layout、defineModel、usingComponents、内置 i18n Behavior、JSX/TSX script block、模板指令兼容、多平台 SFC、.weapp-vite 类型支持文件与受管 prepare 工作流。.
docs-and-website-sync
面向 weapp-vite monorepo 的文档、website 与公开 skills 同步工作流。适用于源码能力变化后同步配置、CLI、React/Wevu/Vue SFC、多平台、mpcore、README、packaged docs、脚手架 AGENTS.md、AI skills 元数据和触发回归入口。.