Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/tincopper/neeko/neeko-checknpx skills add tincopper/neeko --skill neeko-checkgit clone --depth 1 https://github.com/tincopper/neekoWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00054 | $0.05234 |
| Opus 5 | $0.00027 | $0.02617 |
| Sonnet 5 | $0.00011 | $0.01047 |
| Haiku 4.5 | $0.00005 | $0.00523 |
Grade A, and why
neeko-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 208 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Neeko Check
Neeko 代码审核规范（Code Reviewer）
定位：本 skill 是代码审核器，审核代码是否符合三层标准：
- 项目规范 ——
AGENTS.md（单一事实源）+ 下方 15 大 pillar- 业界最佳实践 ——
AGENTS.md中「业界最佳实践（React / Rust 通用底线）」章节- 架构设计 ——
AGENTS.md架构基本原则 + 15 大 pillar审核标准以
AGENTS.md为单一事实源，本 skill 负责引用并对齐，不重复定义标准。 若审核中发现标准缺失，应提示补充到AGENTS.md，而非在本 skill 内新增规则。
核心使命
死守单机 OS 资源底线，捍卫多平台编译一致性，确保 Neeko 长期架构可维护性。
Step 0：确定审核范围（增量 / 全量）
审核动作前必须先确定范围，避免误扫全库或漏审改动。
- 运行
git status --short与git diff --name-only HEAD，判断当前是否有未提交 / 已暂存的改动文件。 - 有改动文件 → 走【增量审核】：
- 只对改动文件应用相关 pillar 与最佳实践，不扫描全库。
- 除非用户明确说「全量审核 / 检查整个项目 / full check」，否则不得扩大范围。
- 无改动文件（工作树干净）→ 走【全量审核】：对全库应用全部 pillar 与最佳实践。
- 审查报告开头必须标注模式：
模式：增量（N 个文件）或模式：全量。
跨平台判定器（Cross-Platform Trigger）
审核时先判定改动是否涉及跨平台。命中任一信号 → 判定「涉及跨平台」，必须执行下方【跨平台验证清单】。
【路径信号】
- 改动文件位于
src-tauri/src/platform/**（适配器目录） - 改动文件出现
#[cfg(target_os)]/#[cfg(not(target_os))]/#[cfg(windows)]等条件编译 - 改动涉及路径拼接、分隔符、
PathBuf/Path/ 硬编码\\或/
【OS 原语信号】改动涉及以下任一能力：
- PTY / 终端读写、SSH、WSL 分发
- 进程启动 / 杀死（
std::process、Command）、进程树、job object - 文件系统监控（watcher）、symlink、reveal（在文件管理器中显示）
- 系统托盘、全局快捷键、菜单
- IDE 启动、shell 启动、host_path（路径映射）
- 文件 URL、git credential、devtools
【前端信号】
- 快捷键修饰键（Command vs Control）
- 平台路径处理、
navigator.platform/@tauri-apps/api平台判断
跨平台验证清单（Cross-Platform Verification）
命中跨平台判定后，逐项核对（对齐 pillar 3 / 15）：
- 路径：100% 使用
PathBuf/Path，禁止硬编码分隔符。 - 集中化：同一接口需 3 平台实现时，必须抽到
src-tauri/src/platform/<theme>/，禁止在函数体内平铺多平台#[cfg]块。 - 门面完整性：
platform/<theme>/mod.rs的mod xxx;与pub use xxx::*;必须同时#[cfg(target_os)]门控。 - 编译期而非运行期：平台差异用编译期 cfg + 每平台文件，禁止
Box<dyn Trait>抽象平台差异。 - 三端适配完整：改动若涉及 PTY/SSH/路径/视窗，必须一次性交出 Windows/macOS/Linux 全套适配代码，禁止
// TODO敷衍。 - 本地局限声明：本地只能编译当前平台，其余平台编译正确性由 CI 三平台矩阵（
.github/workflows/ci.yml的backend-check/backend-test）兜底——审查结论中注明「其余平台需 CI 验证」。 - 边界豁免：
job_object、wsl、macOS 菜单（app_menu.rs）、简单 shell 选择策略，无需抽入platform/。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 208 lines · 54 tokens per session scan A 0b700bd277c6
neeko-check is a skill published in the GitHub repository tincopper/neeko (10 stars, last pushed 3d ago), licensed Apache-2.0. It adds 54 tokens to every session and 5,234 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
reskin
Author a NEW skin for the reskinnable-demo app. A skin is a self-contained domain plugin under src/skins/ / that implements the frozen Skin contract (src/shell/skin-contract.ts) to swap the app's entire experience — brand, theme, layout, pages, tools, data, and agent — as a live sales demo. Use when the user says "add…
copilotkit-channels
Use for the CODE half of a managed Intelligence Channel with Slack or Microsoft Teams: customising the Channel a CLI-scaffolded project already ships, or — for a project the CLI did not generate — writing the Channel declaration, the long-running host, and the awaited activation call. Teams provider setup is in scope…
copilotkit-setup
Use when adding CopilotKit to an existing project or bootstrapping a new CopilotKit project from scratch. Covers framework detection, package installation, runtime wiring (managed Intelligence or self-hosted SSE), provider setup, and first working chat integration.
setup-slack-channel
Use for the PROVIDER half of getting a locally running CopilotKit Channels agent to answer in Slack, when no Slack app exists yet — setting up a Channels bot in Slack for the first time, creating the Slack app and its tokens, attaching it to a managed Intelligence Channel, or when a Channel reports setuprequired, sits…
runtime
@copilotkit/runtime — mount a fetch-native CopilotRuntime on any JS server, wire middleware, pick an AgentRunner, instantiate BuiltInAgent (Factory Mode with TanStack AI is the preferred default) or plug in any of 12 external agent frameworks (Mastra, LangGraph, CrewAI Crews/Flows, PydanticAI, ADK, LlamaIndex, Agno…
copilotkit-develop
Use when building AI-powered features with CopilotKit v2 -- adding chat interfaces, registering frontend tools, sharing application context with agents, handling agent interrupts, and working with the CopilotKit runtime.