Wanwu is an enterprise platform for building AI agents, workflows, retrieval-augmented applications, and managing models in multi-tenant environments. It is designed for developers and enterprise teams delivering AI applications and integrations. The catalogue entries provide skills and agents for using the platform.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/unicomai/wanwu/notesnpx skills add UnicomAI/wanwu --skill notesgit clone --depth 1 https://github.com/UnicomAI/wanwuWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/unicomai/wanwu/notes)<a href="https://agentmods.dev/skills/unicomai/wanwu/notes"><img src="https://agentmods.dev/badge/skills/unicomai/wanwu/notes.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.02995 |
| Opus 5 | $0.00000 | $0.01497 |
| Sonnet 5 | $0.00000 | $0.00599 |
| Haiku 4.5 | $0.00000 | $0.00299 |
Grade A, and why
notes scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Notes (笔记)
⛔ Before ANY write (
import_doc/append_doc): validate ALL string fields (content,title) are legal UTF-8. Non-UTF-8 content causes irreversible garbled text in IMA. See root SKILL.md § MANDATORY RULES for platform-specific validation methods.
API base path: openapi/note/v1
通过 IMA OpenAPI 管理用户个人笔记，支持读取（搜索、列表、获取内容）和写入（新建、追加）。
完整的数据结构和接口参数详见 references/api.md。
隐私规则： 笔记内容属于用户隐私，在群聊场景中只展示标题和摘要，禁止展示笔记正文。
接口决策表
| 用户意图 | 调用接口 | 关键参数 |
|---|---|---|
| 搜索/查找笔记 | search_note |
query_info（QueryInfo 对象） |
| 查看笔记本列表 / 列出笔记本 | list_notebook |
cursor(必填，首页传"0") + limit(必填) |
| 列出笔记/获取多篇笔记信息 | list_note |
folder_id(选填,空为全部) + sort_type + cursor(首次传"") + limit |
| 读取笔记正文 | get_doc_content |
note_id + target_content_format(必填，推荐0纯文本) |
| 新建一篇笔记（用户明确说"新建/创建笔记"时走此接口） | import_doc |
content + content_format(必填，固定1) + 可选 folder_id |
| 往已有笔记追加内容（⚠️ 敏感操作：用户必须明确指定目标笔记，否则先确认再操作） | append_doc |
note_id + content + content_format(必填，固定1) |
⚠️ 新建 vs. 追加 — 行为规则
新建笔记（import_doc） 和 追加内容到已有笔记（append_doc） 是两个完全不同的操作，务必正确区分：
明确走新建的信号词
用户说以下任一表述时，直接调用 import_doc 创建新笔记：
- "新建笔记"、"创建笔记"、"写一篇笔记"
- "新建一篇笔记记录这些内容"
明确走追加的信号词
用户说以下任一表述时，调用 append_doc 追加到已有笔记（但仍需确认目标笔记，见下方规则）：
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 192 lines · 0 tokens per session scan A 0e57115fd6d9
notes is a skill published in the GitHub repository UnicomAI/wanwu (2,456 stars, last pushed today), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 2,995 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
Book2Skill
Convert one or more TXT, Markdown, DOCX, or PDF documents into a reusable skill zip backed by normalized Markdown, extracted images, and a grounded JSONL knowledge index. Invoke this skill before inspecting task files, then execute its workflow directly without listing directories.
dify-skills
Dify 工作流和插件开发的完整技能体系 - 模块化、渐进式、实用导向.
google-workspace
Gmail, Calendar, Drive, Docs, Sheets via gws CLI or Python.
box
Box manages cloud files, sharing, search, and metadata.
apple-notes
Manage Apple Notes via the memo CLI on macOS (create, view, search, edit).
co-mail-and-drive
Read and send mail from the user's own Gmail or Outlook account, send from the agent's own address, manage their Outlook contacts, and list/search/download/upload their Google Drive files — with co gmail, co outlook, co email, and co gdrive. Use when the user asks about their inbox, an email they received or want to…