Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TencentCloudBase/awesome-miniprogram-skills --skill order-skillgit clone --depth 1 https://github.com/TencentCloudBase/awesome-miniprogram-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tencentcloudbase/awesome-miniprogram-skills/order-skill)<a href="https://agentmods.dev/skills/tencentcloudbase/awesome-miniprogram-skills/order-skill"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/awesome-miniprogram-skills/order-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tencentcloudbase/awesome-miniprogram-skills/order-skill"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/awesome-miniprogram-skills/order-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00023 | $0.00499 |
| Opus 5.5 | $0.00009 | $0.00200 |
| Sonnet 5.5 | $0.00005 | $0.00100 |
| Haiku 4.5 | $0.00002 | $0.00050 |
Grade A, and why
order-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
外卖点餐
基于餐厅列表完成餐厅搜索、菜单浏览、线上下单与配送状态查询的能力集合。
触发场景
用户原话举例（路由命中本技能）：
- "帮我点个外卖"
- "附近有什么好吃的餐厅"
- "我想吃汉堡/川菜/日料"
- "看看这家店有什么菜"
- "我要下单"
- "我的外卖到哪了"
- "帮我查一下订单配送状态"
不适用范围
- 门店排队取号、排队进度查询 → 不在本技能范围，由排队取号技能处理
- 饮品点单、规格选择等 → 不在本技能范围，由饮品点单技能处理
- 待办事项、提醒设置等 → 不在本技能范围，由待办技能处理
- 地图导航、路线规划、电话联系餐厅等 → 不在本技能范围
前置条件
- 用户需在可用配送范围内
- 查询配送状态前需先完成下单拿到订单号
接口链路
searchRestaurants：餐厅搜索与候选餐厅列表展示。getMenuItems：查看指定餐厅的菜单与菜品列表。placeOrder：选择菜品后提交订单（需配送地址和联系电话）。getOrderStatus：基于真实订单号查询配送进度与骑手信息。
使用顺序
- 点餐前需先确定具体餐厅；没有餐厅上下文时，先展示附近餐厅列表，再查看该餐厅菜单。
- 下单前需先查看菜单并选择菜品；确认购物车、配送地址和联系电话后再执行下单。
- 查询配送状态前需先拿到有效订单号；没有有效订单时，不能直接查询配送进度。
- 所有已绑定组件的接口都应优先展示卡片，不要改成纯文本逐条展开。
What ships with it
29 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- apis/getMenuItems.js 2.3 KB runs code
- apis/getOrderStatus.js 1.3 KB runs code
- apis/placeOrder.js 2.9 KB runs code
- apis/searchRestaurants.js 1.6 KB runs code
- cloudbaserc.json 737 B
- cloudfunctions/order-skill-handler/index.js 10 KB runs code
- cloudfunctions/order-skill-handler/package.json 177 B
- components/menu-list-card/index.js 3.5 KB runs code
- components/menu-list-card/index.json 49 B
- components/menu-list-card/index.wxml 1.1 KB
- components/menu-list-card/index.wxss 2.2 KB
- components/order-confirm-card/index.js 4.0 KB runs code
- components/order-confirm-card/index.json 49 B
- components/order-confirm-card/index.wxml 2.1 KB
- components/order-confirm-card/index.wxss 3.2 KB
- components/order-status-card/index.js 1.8 KB runs code
- components/order-status-card/index.json 49 B
- components/order-status-card/index.wxml 2.2 KB
- components/order-status-card/index.wxss 3.7 KB
- components/restaurant-list-card/index.js 3.3 KB runs code
- components/restaurant-list-card/index.json 49 B
- components/restaurant-list-card/index.wxml 1.4 KB
- components/restaurant-list-card/index.wxss 2.5 KB
- data/seed.js 10 KB runs code
- index.js 1.1 KB runs code
- mcp.json 13 KB
- mp-skills.json 154 B
- README.md 2.3 KB
- utils/util.js 2.3 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 44 lines · 23 tokens per session scan A 52fe4abdb131
order-skill is a skill published in the GitHub repository TencentCloudBase/awesome-miniprogram-skills (46 stars, last pushed 4mo ago), licensed MIT. It adds 23 tokens to every session and 499 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
gzh_article
A workflow for creating articles for WeChat Official Accounts, a Chinese publishing platform. It covers choosing a topic, researching sources, writing, adding images, checking the wording, and formatting the finished article.
ckjia-shopping
A shopping search and price-comparison tool for Taobao, JD.com, Tmall, and Pinduoduo, with image-based product recognition. It requires the ckjia-shopping service and its access key to be enabled.
ecom-details-image
A guide for planning still images used to sell or explain products, including main product pictures, detail-page images, banners, lifestyle scenes, packaging, comparisons, and product demonstrations. It can provide image prompts or, when explicitly requested, use the project's own image-generation route.
cloudbase-wechat-integration
A guide for connecting CloudBase applications to WeChat services, including payments, official accounts, and user identity.
weapp-vite-best-practices
An engineering guide for building small-program projects with weapp-vite, a Vite-based toolchain for compiling mini-apps for several platforms.
weapp-devtools-e2e-best-practices
A testing workflow for WeChat mini-programs using WeChat DevTools and a headless runtime. WeChat DevTools is the official development environment; end-to-end tests check a feature through its real user flow.