Borrowing it
Nothing to install: this file belongs to wjxcom/wjx-ai-kit. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/wjxcom/wjx-ai-kit/master/.claude/skills/wjx-cli-use/SKILL.mdgit clone --depth 1 https://github.com/wjxcom/wjx-ai-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wjxcom/wjx-ai-kit/wjx-cli-use)<a href="https://agentmods.dev/skills/wjxcom/wjx-ai-kit/wjx-cli-use"><img src="https://agentmods.dev/badge/skills/wjxcom/wjx-ai-kit/wjx-cli-use/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wjxcom/wjx-ai-kit/wjx-cli-use"><img src="https://agentmods.dev/badge/skills/wjxcom/wjx-ai-kit/wjx-cli-use.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00107 | $0.08262 |
| Opus 5.5 | $0.00043 | $0.03305 |
| Sonnet 5.5 | $0.00021 | $0.01652 |
| Haiku 4.5 | $0.00011 | $0.00826 |
Grade A, and why
wjx-cli-use scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 352 lines — stays where its author put it; the contents beside it link to each section on GitHub.
wjx-cli 使用指南
wjx-cli 是问卷星 OpenAPI 的命令行工具。命令格式:wjx <模块> <操作> [选项]。
通过 AI 安装并启用 wjx-cli:先执行
npm install -g wjx-cli@latest,成功后再执行wjx skill install --force;安装后命令名是wjx,请用wjx --version验证,不要运行wjx-cli --version。
AI 安装与配置任务模板
需要 AI 自动完成安装和配置时,把下面整段话发给 AI;AI 应按顺序执行,拿到 API Key 前暂停等待,不要跳过连接验收:
请帮我安装并配置问卷星 CLI(wjx-cli):
0. 预检当前操作系统和 shell。检查 `node --version`、`npm --version`,并在命令可用时先检查 `wjx --version`。Windows 还要用 `Get-Command node,npm,wjx -ErrorAction SilentlyContinue`、`where.exe node`、`where.exe npm`、`where.exe wjx`,并检查 `C:\Program Files\nodejs\node.exe` 和 `%LOCALAPPDATA%\Programs\nodejs\node.exe`。同时记录 `npm prefix -g`,确认 npm 全局 bin 在当前 PATH。一个 shell 报“找不到命令”不能证明软件未安装。
1. 若绝对路径能找到 Node.js,直接用该路径验证版本;若只是当前 shell 的 PATH 未刷新,刷新 PATH 或启动新的 shell 后重新检查。只有确认 Node.js 不存在时才引导我从 https://nodejs.org 安装 LTS;版本低于 20 时停止并引导升级。不要在证据不足时运行 winget、安装器或后台安装进程。安装/升级后必须在新进程再次验证 `node --version` 和 `npm --version`。
2. Node.js >= 20 且 npm 可用后,先检查 `wjx --version`。若 wjx 已存在且版本 >= 0.4.1,跳过重复安装;若 wjx 缺失、版本过低或执行失败,才执行 `npm install -g wjx-cli@latest`。npm 包名是 `wjx-cli`,安装后的命令名是 `wjx`;npm 退出码为 0 不等于安装完成,必须刷新 PATH(如有需要)并再次运行 `wjx --version`。每个命令都要读取自身的真实退出码,不要用 `head`/`tail` 管道的退出码代替。禁止运行 `wjx-cli --version`。确认 CLI 可执行后,再执行 `wjx skill install --force`,并确认技能文件已落盘。
3. 引导我获取问卷星 API Key:
- 公网用户:让我访问 https://www.wjx.cn/weixinlogin.aspx?redirecturl=%2Fnewwjx%2Fmanage%2Fuserinfo.aspx%3FshowApiKey%3D1,微信扫码登录后复制 Key
- 私有化部署用户:把上面的 www.wjx.cn 换成我的域名(例如 xxx.sojump.cn),登录链接和后续 `--base-url` 必须使用同一个域名
等我把 Key 发给你(可能还会附带域名)。未收到 Key 前暂停,不要猜测、伪造或从其他文件读取凭据。
4. 拿到 Key 后执行 `wjx init --api-key <我的Key>`;私有化部署用户加 `--base-url https://<我的域名>`。不要在回复、日志或文件中回显完整 API Key,只允许显示脱敏状态。
5. 运行 `wjx doctor` 验证连接;逐项确认 API Key 已配置、Base URL 正确、网络/API 检查通过。任一步失败都不得口述“安装成功”,先报告实际失败阶段和下一步。
6. 最后运行 `wjx survey list --format table` 做一次人工验收,看到真实列表才说明接好了;这一步只用于人类查看,不要用表格推断总数、分页或填写链接。
如果用户只提供了 API Key 而没有明确域名,使用公网地址;如果用户提供了私有化域名,API Key 获取链接和 --base-url 必须同时使用该域名。
全局选项:--api-key <key> 覆盖凭据,--format table 表格输出,--dry-run 预览请求不发送,--stdin 从管道读 JSON 参数。低于 0.4.1 的 CLI 必须先升级。
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +1 lines edbfd70d2647
- 1mo ago Changed · -1 lines 589f3d948127
- 1mo ago Changed · +11 lines 88bde667829d
- 1mo ago Changed · -4 lines · -1 tokens per session e6a6452bf7bb
- 1mo ago Changed · +15 lines 8591cad4e19d
- 1mo ago Changed · +74 lines · -9 tokens per session 966d606ee45a
- 1mo ago First seen · 256 lines · 117 tokens per session scan A 75d112c8f9b7
wjx-cli-use is a skill published in the GitHub repository wjxcom/wjx-ai-kit (22 stars, last pushed 3d ago), licensed MIT. It adds 107 tokens to every session and 8,262 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
pipefy-ai-agents
Use this skill when the user wants to create, read, update, delete, or troubleshoot AI agents (conversational agents with behaviors). Includes pre-flight validation and pipe-scoped knowledge bases (list, plain text/document/data lookup CRUD, access probe) attached via dataSourceIds. For traditional automations and AI…
pipefy-automations
Use this skill when the user wants to create, read, update, or delete traditional automations (if/then rules) or AI automations (prompt-driven). For AI agents (conversational), see pipefy-ai-agents.
pipefy-portal-setup
Use this skill when the user wants to list, create, or configure Pipefy portals (main hub, pages, page elements, sub-portals, publish/unpublish). Uses Interfaces and internalapi. Not for pipes/cards.
pipefy-api-fallback
Use this skill when a toolkit operation fails AND the introspection skill could not resolve the problem. This is the last-resort fallback (Tier 3): call the Pipefy GraphQL API directly using curl or httpx, authenticating with the Service Account (OAuth2) or a Personal Access Token (PAT) available as env var. Follow…
pipefy-pipes-and-cards
Use this skill when the user wants to read, create, update, or delete pipes, phases, phase fields, labels, cards, comments, or field conditions. Use the seed-pipe-across-phases workflow when populating empty phases for demos or QA.
pipefy-ipaas
Use when the user wants to build, test, publish, or manage iPaaS (Advanced Automations) flows: multi-step integrations with external apps (Slack, Gmail, Google Sheets), incoming webhooks, schedules, routers, code steps, or iPaaS data tables. Driven through a per-pipe catalog discovered at runtime. For native if/then…