Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TencentCloudBase/awesome-miniprogram-skills --skill todolist-skillgit clone --depth 1 https://github.com/TencentCloudBase/awesome-miniprogram-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tencentcloudbase/awesome-miniprogram-skills/todolist-skill)<a href="https://agentmods.dev/skills/tencentcloudbase/awesome-miniprogram-skills/todolist-skill"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/awesome-miniprogram-skills/todolist-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tencentcloudbase/awesome-miniprogram-skills/todolist-skill"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/awesome-miniprogram-skills/todolist-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00019 | $0.00293 |
| Opus 5 | $0.00010 | $0.00147 |
| Sonnet 5 | $0.00004 | $0.00059 |
| Haiku 4.5 | $0.00002 | $0.00029 |
Grade A, and why
todolist-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
简单待办清单
基于云开发数据库直接完成待办事项查询、添加、完成切换与删除的简单教学示例。
触发场景
用户原话举例（路由命中本技能）：
- "帮我看下待办列表"
- "新增一个待办：明天交周报"
- "把『明天交周报』标记完成"
- "删掉那个买咖啡豆的待办"
- "我的 todo 还有哪些没做"
不适用范围
- 复杂项目管理、多人协作、日历提醒、文件附件等诉求 → 不在本技能范围
- 门店排队、下单支付、导航等诉求 → 不在本技能范围
使用顺序
- 查看待办列表无需前置条件，可直接查询。
- 修改某条待办状态前需先拿到真实 todoId；没有 todoId 时先展示列表，再从列表中选择具体待办。
- 新增、切换完成状态、删除后都重新展示最新待办列表。
What ships with it
16 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- apis/addTodo.js 1.2 KB runs code
- apis/deleteTodo.js 1.2 KB runs code
- apis/getTodoList.js 1.0 KB runs code
- apis/toggleTodo.js 1.2 KB runs code
- cloudbaserc.json 668 B
- cloudfunctions/todolist-skill-handler/index.js 3.8 KB runs code
- cloudfunctions/todolist-skill-handler/package.json 183 B
- components/todo-list-card/index.js 3.9 KB runs code
- components/todo-list-card/index.json 49 B
- components/todo-list-card/index.wxml 1.4 KB
- components/todo-list-card/index.wxss 3.0 KB
- index.js 1.0 KB runs code
- mcp.json 6.5 KB
- mp-skills.json 154 B
- README.md 2.0 KB
- utils/util.js 3.2 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 29 lines · 19 tokens per session scan A 9bcf70108f72
todolist-skill is a skill published in the GitHub repository TencentCloudBase/awesome-miniprogram-skills (36 stars, last pushed 2mo ago), licensed MIT. It adds 19 tokens to every session and 293 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
airtable-automation
Automate Airtable tasks via Rube MCP (Composio): records, bases, tables, fields, views. Always search tools first for current schemas.
agency-os
Notion-as-source-of-truth dispatch board for running your work like an AI agency. One Tasks database is the source of truth; tasks flow Suggestion through Discussion, To-Do, In Progress, and Done with subtasks, recurring cadences, dependencies, and template subtrees. Batch execution fans approved To-Do rows out to…
obsidian-bases
Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries. Use when working with .base files, creating database-like views of notes, or when the user mentions Bases, table views, card views, filters, or formulas in Obsidian.
tech-stack-detective
Reverse-engineer a company's tech stack from public signals — job listings, StackShare, GitHub, engineering blog, and their live website. Use this skill when a user asks "what tech does Stripe use", "what's Linear's stack", "what does Notion run on", "reverse engineer [company]'s tech stack", "what framework does…
agent
Default browser automation agent — click, fill forms, navigate, log in, and extract structured data from any website using a natural-language goal, or run the same task across multiple sites in parallel. New users get 600 free automation credits to start; beyond that it draws on your plan's automation credits (unlike…
postgresql-development-cloudbase
Use when building, debugging, or evaluating CloudBase PostgreSQL / CloudBase PG / PG mode apps, including Postgres schema setup, queryPgDatabase/managePgDatabase, JS SDK v3 app.rdb() CRUD/RPC, PG HTTP API fallback, RLS-style permissions, username-password auth, and Web CMS/admin CRUD flows backed by CloudBase PG.