Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add wpsnote/wpsnote-skills --skill review-notesgit clone --depth 1 https://github.com/wpsnote/wpsnote-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wpsnote/wpsnote-skills/review-notes)<a href="https://agentmods.dev/skills/wpsnote/wpsnote-skills/review-notes"><img src="https://agentmods.dev/badge/skills/wpsnote/wpsnote-skills/review-notes/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wpsnote/wpsnote-skills/review-notes"><img src="https://agentmods.dev/badge/skills/wpsnote/wpsnote-skills/review-notes.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00165 | $0.01909 |
| Opus 5.5 | $0.00066 | $0.00764 |
| Sonnet 5.5 | $0.00033 | $0.00382 |
| Haiku 4.5 | $0.00016 | $0.00191 |
Grade A, and why
review-notes scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 51 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Review Notes(审查代码笔记,子 skill)
本 skill 为 coding-assistant 的子 skill,负责技术笔记的创建与编辑并写入 WPS 笔记保存;编码规范、单测、编译/lint 由主 skill 负责。
何时触发
自动启动(以下任一即启动读取与写入 WPS 笔记、生成技术文档):
- 编码工具 + 关键词:用户使用 Cursor、Codex、Claude Code、AS code 等编码工具进行编写、审查或优化代码时,且用户提到「架构」「设计图」「核心方法」「关键技术」时,自动读取当前文件/工程上下文并写入 WPS 笔记,生成或更新技术文档。
- 用语:审阅代码、技术文档、总结关键代码、记录关键技术点、记入笔记、生成技术文档、把这段记入笔记、记一下这个实现、整理成笔记。
- 场景:使用上述编码工具编写或审查代码且涉及核心技术点(如 Android、iOS、JNI/Rust、文档/资源/网络等);代码或注释中出现「核心代码」「关键实现」「技术要点」「生成技术文档」。
- 优化完成后:用户优化代码或优化类完成后,若该类或该段代码的注释中出现「技术文档」「总结」「笔记」等相关字样,则自动启动并写入笔记;执行时仍按先查后编、标题与类/目录强相关、等待用户指令直接辅助等既有规则。
执行流程
- 确认范围:根据用户当前选中的代码、当前打开的文件或当前目录,确定要写入笔记的技术点与核心代码段;确定当前类名或「目录/类名」用于匹配已有笔记。
- 先查后编:先 list_notes 查看是否已有与当前类/目录相关的笔记(标题包含类名或目录/类名子串即视为匹配)。若已存在:read_note + get_note_outline 获取 note_id 与最新 block 列表,不新建,直接在该笔记上编辑。仅当不存在匹配笔记时才 create_note 新建;创建后将该 note_id 视为本会话「当前笔记」。
- 完整笔记结构:笔记必须包含 7 个二级标题:核心技术(配图)、核心代码、关键技术点、核心类和职责、调用链(mermaid,可配图)、架构概览(配图)、注意事项。其中架构、核心技术、调用链的图示:优先使用 generate_image(WPS 笔记)根据描述生成图片,再用 insert_image 插入;不可用时用 mermaid 或官网/掘金/维基 insert_image。见 reference §0.2、§2.1。
- 笔记标题:新建时标题简洁、专业,与当前类或目录强相关(类名或「目录/类名」)。见 reference/reference.md。
- 调用链:笔记中的「调用链」须用 mermaid 格式(flowchart 或 sequenceDiagram),见 reference。
- 核心代码:可从以下方式获取并写入笔记——注释内关键字(注释中出现「核心代码」「关键实现」「技术要点」等时,读取对应行/块或函数体)、用户复制的代码块(用户复制后告知)、剪切板中的代码块(用户告知剪切板已粘贴代码)、本文件选中代码、用户指定的某一个函数(取完整函数体)。写入时优先用
edit_block(op="insert")/edit_block(op="replace")以代码块形式写入该笔记。 - 写入/更新 WPS 笔记:在已确定的笔记上执行
edit_block/batch_edit、核心代码区、insert_image、find_tags等;笔记须写入 WPS 笔记并保存。 - 用户新增标题:当用户在笔记中新增二级标题或其他小标题时,根据用户诉求在该标题下补充相应内容(
edit_block(op="insert"))。 - 等待用户指令并直接辅助:确定当前笔记后,等待用户后续意图(插入图片、插入核心代码、修改标题、全局替换等),直接在该笔记上完成,无需用户再单独发「对某笔记做某操作」的指令。用户说「这篇」「当前笔记」「就这个」时沿用已确定的 note_id。
- 主动更新:在用户未关闭当前笔记期间,约 1 分钟后或适当时机主动刷新并更新该笔记(如根据当前文件/工程变化补充内容、更新调用链等),直至用户主动关闭当前笔记。见 reference §0.4。
- 全局替换:用户修改笔记中某处标题、人名或关键术语时,直接在该笔记内全局替换(
search_note_content/read_note定位,再用edit_block(op="replace")/batch_edit替换)。 - 整理格式:创建或编辑后自动整理笔记格式;见 reference。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 51 lines · 165 tokens per session scan A 3b314e13747f
review-notes is a skill published in the GitHub repository wpsnote/wpsnote-skills (183 stars, last pushed today), licensed MIT. It adds 165 tokens to every session and 1,909 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
research-hub
Use research-hub to operate Zotero, Obsidian, and NotebookLM research workflows through CLI, MCP, REST, and dashboard. Trigger when the user asks to find papers, ingest sources, organize a literature review, build Obsidian research notes, upload sources to NotebookLM, inspect clusters, generate AI briefs, or maintain…
write-docs-cn
A guide to writing project documentation, especially README files. It explains how tutorials differ from reference material and where each kind of information belongs.
write-tech-cn
A writing guide for Chinese technical documents such as READMEs, tutorials, blogs, and technical explanations. It focuses on direct conclusions, clear actions, natural Chinese, and consistent technical terms.
pdf-image-text-extractor
A tool for reading text from images and PDF files, including scanned documents. OCR means recognizing printed or handwritten characters in an image and turning them into editable text.
youtube-digest
A transcript extractor for YouTube videos. It reads available subtitles or automatically generated captions, can translate non-Chinese captions into Chinese, and can export the text to Excel, a spreadsheet application.
hyalo-okf
Maintain Open Knowledge Format vaults with Hyalo's OKF index, log, and conformance commands.