Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Zhangs-11/zs-skills --skill aihotgit clone --depth 1 https://github.com/Zhangs-11/zs-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhangs-11/zs-skills/aihot)<a href="https://agentmods.dev/skills/zhangs-11/zs-skills/aihot"><img src="https://agentmods.dev/badge/skills/zhangs-11/zs-skills/aihot/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhangs-11/zs-skills/aihot"><img src="https://agentmods.dev/badge/skills/zhangs-11/zs-skills/aihot.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00286 | $0.07032 |
| Opus 5 | $0.00143 | $0.03516 |
| Sonnet 5 | $0.00057 | $0.01406 |
| Haiku 4.5 | $0.00029 | $0.00703 |
Grade C, and why
aihot scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
> **范围澄清**：这条 UA 要求**只针对 `/api/public/*` API 端点**。`/aihot-skill/{install.sh,SKILL.md,README.md}` 安装入口 nginx 上**特意豁免** UA 黑名单（设计前提就是给 `curl -fsSL ... | bash` 一行装用），用 default curl UA 直通 200。不要把"先决条件"误推广到所有 aihot.virxact.co Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
description: AI HOT (aihot.virxact.com) 中文 AI 资讯查询 Skill。当用户想知道"今天 AI 圈有什么"、"AI 日报"、"AI HOT"、"AI 资讯"、"AI 热点"、"最近 AI"、"OpenAI/Anthropic/Google 最近发布了什么"、"AI hot today"、"AI news today"、"看一下 AI 行业动态"、"今天有什么大模型发布"、"昨天 AI 圈"、" This is a copy
98% identical to aihot — 6 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 417 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AI HOT Skill
让 Agent 用最自然的中文查询拿到 aihot.virxact.com 上每天的 AI HOT 日报和全部 AI 动态，不需要打开浏览器。SKILL.md 标准格式，跨 Claude Code / Codex CLI / Cursor / Gemini CLI / OpenCode / 任何兼容平台可用。
线上：https://aihot.virxact.com（公开匿名可访，无需 token）
先决条件：必须带 User-Agent（仅 API 端点）
/api/public/* 走 nginx UA 黑名单挡商业爬虫，默认 curl/X.Y UA 会被 403 Forbidden。调 API 时所有 curl 都必须带浏览器 UA：
UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
# 之后所有调 API 的 curl 都加 -H "User-Agent: $UA"，例如：
curl -sH "User-Agent: $UA" "https://aihot.virxact.com/api/public/daily"
后面"工作流"章节的 curl 例子为了简洁默认你已经设了 $UA——实际调用必须加 -H "User-Agent: $UA"，不要忘。漏掉这一步会让你以为接口挂了，实际只是被 403 挡了。
范围澄清：这条 UA 要求只针对
/api/public/*API 端点。/aihot-skill/{install.sh,SKILL.md,README.md}安装入口 nginx 上特意豁免 UA 黑名单（设计前提就是给curl -fsSL ... | bash一行装用），用 default curl UA 直通 200。不要把"先决条件"误推广到所有 aihot.virxact.com 路径。
什么时候用
路由优先级（第一原则）：默认走精选
items?mode=selected——它是 AI HOT 每天精挑细选的"主菜单"，覆盖用户关心的事且数据新鲜。
- 仅当用户在话里明确说出"日报" 二字才走
daily（编辑成品，按 UTC 整日切片，跟"过去 24 小时 / 今天"等滚动窗口对不上）- 仅当用户明确说"全部 / 完整 / 所有 / 全量" 才走
mode=all（含未精选的次要条目，量大但杂）- "今天 AI 圈"、"过去 24 小时大新闻"、"最近 AI 圈有啥" 等宽问题 = 默认精选 + 时间窗（since），不要默认走日报或全部
这是为了对齐用户的语义优先级：精选是主菜单，日报和全部是用户特意点单的备选，不应抢默认。
| 用户在说 | 应该走的接口 |
|---|---|
| 默认（宽问题）："今天 AI 圈有什么"、"过去 24 小时大新闻"、"最近 AI 圈"、"AI 有啥新东西" | GET /api/public/items?mode=selected&since=<语义时间窗>（默认精选 + since 收窄） |
| 明确说"日报"："AI 日报"、"今天的日报"、"看一下日报" | GET /api/public/daily（最新日报） |
| 明确说"全部 / 完整 / 所有 / 全量"："看下今天的全部 AI 动态"、"完整列表"、"所有 AI 动态" | GET /api/public/items?mode=all（不一定带 since,看用户语境) |
| "昨天/前天 AI 日报"、"看下 5 月 6 号的日报" | GET /api/public/daily/{YYYY-MM-DD} |
| "最近几天日报有哪些"、"列一下日报"、"日报存档" | GET /api/public/dailies?take=N |
| "看下精选条目"、"AI HOT 精选" | GET /api/public/items?mode=selected |
| "最近的模型发布"、"AI 产品发布"、"AI 行业动态"、"AI 论文" | GET /api/public/items?mode=selected&category=...&since=<7d 前>（默认精选 + 类别） |
| "最近一周的 AI 动态"、"5 天前到现在的发布" | GET /api/public/items?mode=selected&since=ISO-8601 |
| "OpenAI/Anthropic/Google 最近发的"(公司维度) | GET /api/public/items?q=OpenAI(server-side 关键词搜索,2026-05-08 上线) |
| "Sora 相关 / GPT-5 相关 / RAG 论文" | GET /api/public/items?q=<关键词>(在 title + 中文 title + 中文 summary 三列匹配) |
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 417 lines · 286 tokens per session scan C 50859a57f643
aihot is a skill published in the GitHub repository Zhangs-11/zs-skills (2 stars, last pushed 4d ago), licensed MIT. It adds 286 tokens to every session and 7,032 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). It is 98% identical to aihot, differing in 6 lines, and is treated as a copy.
Other skills, from other repositories
jacky-motion2-0-srt
A workflow for turning a Chinese spoken script and matching SRT subtitle file into a single 16:9 HTML information animation. SRT is a subtitle file that stores text with start and end times; the animation follows those times and adds recorded-screen placeholders when needed.
ally-skill
A Chinese-language content-writing guide based on anonymized experiences, observations, and opinions, with business analysis and comedy-style pacing.
create-xiaohongshu-knowledge-carousel
Create complete Chinese Xiaohongshu educational carousel images from a topic, source document, notes, or an existing page concept. Use when Codex must plan every definition and meaning without compressing knowledge points, maintain a recurring character and visual system, directly render fully typeset 3:4 final pages…
content-score-and-fix-cn
A Chinese-language content review and editing role for short-video scripts, spoken copy, titles, product content, cover images, and videos up to 60 seconds.
chinese-git-workflow
A reference for configuring Git with Chinese code-hosting services such as Gitee, Coding.net, GitLab China, and CNB, including SSH, HTTPS, credentials, CI, and repository mirroring.
chinese-documentation
A Chinese technical-documentation style guide covering spacing, punctuation, numbers, terminology, and links when Chinese and English appear together.