Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/zhinjs/zhin/plugin-publishnpx skills add zhinjs/zhin --skill plugin-publishgit clone --depth 1 https://github.com/zhinjs/zhinWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00058 | $0.02030 |
| Opus 5 | $0.00029 | $0.01015 |
| Sonnet 5 | $0.00012 | $0.00406 |
| Haiku 4.5 | $0.00006 | $0.00203 |
Grade A, and why
plugin-publish scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 222 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Zhin 插件发布
引导将 Zhin.js 插件发布到 npm 和 Zhin 插件市场,确保包结构、元数据和质量符合社区标准。
适用场景
- 用户说"发布插件"、"提交到插件市场"、"准备发版"
- 插件开发完成需要分享给社区
- 需要检查插件是否满足发布条件
发布前检查清单
第 1 步:包元数据检查
验证 package.json 必需字段:
{
"name": "zhin.js-{name}", // ✅ 社区前缀
"version": "0.1.0", // ✅ 语义化版本
"type": "module", // ✅ ESM
"description": "插件简介", // ✅ 非空描述
"main": "./lib/index.js", // ✅ 入口指向编译产物
"types": "./lib/index.d.ts", // ✅ 类型声明
"exports": {
".": {
"types": "./lib/index.d.ts",
"development": "./src/index.ts", // ✅ 开发条件导出
"import": "./lib/index.js"
},
"./package.json": "./package.json"
},
"files": [ // ✅ 发布文件白名单
"src", "lib", "client", "dist",
"skills", "tools",
"README.md", "CHANGELOG.md"
],
"keywords": ["zhin.js", "plugin"], // ✅ 包含 zhin.js 关键词
"peerDependencies": {
"zhin.js": ">=x.x.x" // ✅ 声明框架兼容版本
},
"license": "MIT", // ✅ 开源协议
"repository": { "url": "..." }, // 推荐:仓库地址
"homepage": "...", // 推荐:文档地址
"author": "..." // 推荐:作者信息
}
插件市场识别条件:
name以zhin.js-开头(社区)或@zhin.js/开头(官方)keywords包含zhin.jspeerDependencies包含zhin.js
第 2 步:代码质量检查
# 1. 类型检查
pnpm build # 确保 tsc 编译通过,无类型错误
# 2. 运行测试
pnpm test # 确保所有测试通过
# 3. 覆盖率检查
pnpm test:coverage # 确保覆盖率达标
质量底线:
-
tsc编译零错误 - 所有测试通过
- 语句覆盖率 ≥ 60%
- 无
any类型滥用 - 无未处理的 TODO/FIXME 阻塞发布
第 3 步:文档检查
README.md 必须包含:
- 插件功能简介
- 安装步骤(
pnpm add zhin.js-{name}) - 配置说明(配置项及默认值)
- 命令列表(如有)
- AI 工具说明(如有)
- 使用示例
CHANGELOG.md 必须包含:
- 当前版本的变更记录
- 遵循 Keep a Changelog 格式
关键词: 有 skills/ 目录时,确认 SKILL.md 的 description 准确描述插件能力。
第 4 步:构建产物检查
# 确保 lib/ 目录存在且完整
ls lib/
# 检查将要发布的文件
npm pack --dry-run
确认 npm pack 输出的文件列表:
- ✅ 包含
lib/(编译后的 JS + d.ts) - ✅ 包含
src/(源码,供开发模式使用) - ✅ 包含
skills/(AI 技能描述) - ✅ 包含
README.md、CHANGELOG.md - ❌ 不包含
node_modules/、tests/、.env - ❌ 不包含
coverage/、.DS_Store
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 222 lines · 58 tokens per session scan A c04d68558d58
plugin-publish is a skill published in the GitHub repository zhinjs/zhin (135 stars, last pushed 6d ago), licensed MIT. It adds 58 tokens to every session and 2,030 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
Release Notes Generator
Generate professional software release notes from a commit log: classify changes, write user-facing summaries, draft a publishable announcement, and assess release readiness. Use for release, changelog, version, and deploy requests.
Release Readiness Reviewer
Reviews a release candidate and produces a go/no-go readiness decision.
Release Checklist
Check release readiness and record a release note. Use for release and rollback requests.
new
Use when user asks to create a release, cut a release, or publish a version. Auto-detects GitHub vs GitLab vs Gitea, calculates semantic version, generates release notes from PRs/MRs or commits, shows preview for confirmation before publishing.
last-tag
Show commits since the last tag in a formatted table. Use when user asks "what changed since last release", "commits since last tag", "last-tag", "what's new", or wants to see recent unreleased changes.
a0-contribute-plugin
Guide for publishing an Agent Zero plugin to the community Plugin Index (a0-plugins repo). Covers GitHub repo setup, index.yaml creation, CI validation rules, and PR submission. Use when the user wants to share, publish, submit, or contribute a plugin to the Plugin Hub so other Agent Zero users can find and install it.