Borrowing it
Nothing to install: this file belongs to YinkaiYu/topology-gomoku. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/YinkaiYu/topology-gomoku/main/.codex/SKILL.mdgit clone --depth 1 https://github.com/YinkaiYu/topology-gomokuWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yinkaiyu/topology-gomoku/codex)<a href="https://agentmods.dev/skills/yinkaiyu/topology-gomoku/codex"><img src="https://agentmods.dev/badge/skills/yinkaiyu/topology-gomoku/codex/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yinkaiyu/topology-gomoku/codex"><img src="https://agentmods.dev/badge/skills/yinkaiyu/topology-gomoku/codex.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.00900 |
| Opus 5 | $0.00032 | $0.00450 |
| Sonnet 5 | $0.00013 | $0.00180 |
| Haiku 4.5 | $0.00006 | $0.00090 |
Grade A, and why
minitool-zip-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
小工具 ZIP 构建指南
小工具是一种基于离线 H5 实现的 app 形式：你写一套标准网页（以 index.html 为入口），打包成 .zip，由容器（PC 模拟器 / 真机 WebView）加载运行。它本质就是 Web，HTML/CSS/JS 经验直接适用——只是运行在受控容器里：纯本地、不联网，所有资源须打包在内，且部分 Web 能力被收紧。
目标产物：可直接上传的 .zip 静态包，在 PC 模拟器与真机行为一致。
何时使用
- 从零新建小工具页面并打包成
.zip - 将已有纯 H5 页面改写为小工具规范并打包
工作流程
每一步动手前必须先读对应 reference 并严格遵守其全部约束，不要凭记忆产出：
- 编写 / 适配 HTML — 先读 zip-artifact-spec.md：目录结构、
index.html模板、路径与资源引用规则，按其编写 - 端能力合规 — 先读 device-capabilities.md：对照「不可用能力 / 行为」逐项核对，命中项移除或改用其给出的替代写法
- Native 能力（JSBridge） — 需要发笔记、存相册、跳原生页等能力时，先读 jsbridge-api.md：仅使用文档列出的
window.xhs.miniTool.*API，参数与必填项以该文档为准，未列出的字段不要传 - 跨端适配 — 先读 cross-platform-h5.md：触摸、滚动、安全区、PC vs 真机差异
- 正确性自查 — 静态核对页面能正常运行、无违规能力（被禁 API 无调用 / 残留、脚本加载顺序、引用资源都在 zip 内、改写时未误改业务逻辑），见 zip-artifact-spec.md 自检清单
- 打包 — 逐条核对各 reference 末尾的自检清单，全部通过后再打包
产出前提：交付的 zip 必须同时满足
zip-artifact-spec.md、device-capabilities.md与（若使用 JSBridge）jsbridge-api.md的全部约束。任何约束以 reference 为准。
Reference
| 文档 | 何时读 |
|---|---|
| zip-artifact-spec.md | 写 HTML / 打包时：目录结构、index.html 模板、路径与资源引用规则、打包自检 |
| device-capabilities.md | 处理端能力时：哪些 Web 能力可用 / 不可用及替代写法、如何实现常见交互（手势、拍照、选图等） |
| jsbridge-api.md | 调用 Native 能力时：window.xhs.miniTool.* 全量 API、参数约束、示例与常见组合 |
| cross-platform-h5.md | 适配多端时：触摸、滚动、安全区、PC 模拟器与真机差异 |
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed fbf75c182fa8
- 10d ago First seen · 42 lines · 65 tokens per session scan A 9b8ce3c466bf
minitool-zip-builder is a skill published in the GitHub repository YinkaiYu/topology-gomoku (10 stars, last pushed 4d ago), licensed MIT. It adds 65 tokens to every session and 900 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
douyin-upload
A workflow for using the sau command-line tool to log in to Douyin, the Chinese short-video platform, check account cookies, and publish videos or image-and-text posts.
kuaishou-upload
A workflow for using the sau command-line tool to log in to Kuaishou, a Chinese social media platform, check account cookies, and publish videos or image-and-text posts.
xiaohongshu-upload
A workflow for using the sau command-line tool to log in to Xiaohongshu, a Chinese social media platform, check account cookies, and publish videos or image-and-text posts.
bilibili-upload
A workflow for using the sau command-line tool to log in to Bilibili, a Chinese video-sharing platform, check an account, and upload videos.
html-to-ugui
A pipeline for turning HTML interface prototypes into Unity UGUI Prefabs, which are reusable Unity interface objects. It uses browser-rendered layout data to preserve positions, images, text, controls, and device-adaptation intentions.
image-to-threejs
REQUIRES uv + Python 3.12 and a one-time git clone — unlike the other asset skills, this one is not Node-only. Turn a generated reference image into a rigged, procedural Three.js prop — code, not a mesh file. Generate ONE clean product-shot reference with vg generate, author a component spec (parts, materials, pivots…