Borrowing it
Nothing to install: this file belongs to zhinjs/zhin. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zhinjs/zhin/main/.github/skills/zhin-plugin-standard-development/SKILL.mdgit clone --depth 1 https://github.com/zhinjs/zhinWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhinjs/zhin/zhin-plugin-standard-development)<a href="https://agentmods.dev/skills/zhinjs/zhin/zhin-plugin-standard-development"><img src="https://agentmods.dev/badge/skills/zhinjs/zhin/zhin-plugin-standard-development.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.02240 |
| Opus 5 | $0.00032 | $0.01120 |
| Sonnet 5 | $0.00013 | $0.00448 |
| Haiku 4.5 | $0.00006 | $0.00224 |
Grade A, and why
zhin-plugin-standard-development scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 171 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Zhin 插件标准开发姿势（Plugin Runtime）
把需求落成符合仓库约定的可运行插件。唯一创作面是 Plugin Runtime。
zhin runtime start 是唯一启动路径。插件即 package：package.json#zhin 声明 manifest，
plugin.ts 必须 default-export definePlugin()，否则装配抛
does not default-export a Plugin definition。
能力按目录发现（一个文件一个能力，default export），不要命令式注册：
| 目录 | API |
|---|---|
commands/**/*.ts |
defineCommand()（路径即路由；Next.js 风格 [name].ts / [[name]].ts / [...name].ts 传参，类型与默认值在 params 中声明） |
middlewares/*.ts |
defineMiddleware() |
components/*.tsx |
defineComponent() |
tools/*.ts |
defineAgentTool() |
pages/*.tsx |
definePage()（$nav.tsx / $footer.tsx 布局） |
skills/<name>/SKILL.md |
Markdown Skill |
agents/<name>.agent.md |
Markdown Agent |
DI：context.resources（Scope + Token）。清理：context.lifecycle。
禁止新代码使用 usePlugin() / getPlugin() / MessageCommand / addCron(new Cron) /
declareConfig 经典路径——它们只在已弃用的 zhin.js/node（bootstrapNode）下有效，未接 CLI。
迁移旧代码用 migrate-zhin-plugin-runtime。
配套资产：
官方指令摘要：.github/instructions/zhin-plugin.instructions.md。
何时使用
- 新建插件，或给现有 Runtime 插件加命令/中间件/组件/定时/工具/控制台页
- 接入数据库、HTTP、console
- 用户要求「按 Zhin 标准方式实现插件」
完成标准
plugin.tsdefault-exportdefinePlugin；package.json#zhin正确- 能力在约定目录，default export 对应
define*API - 无新增
usePlugin/MessageCommand/ 经典Plugin生命周期 - 相对导入带
.js；Host token 先has再use - 清理走
context.lifecycle（或 setup 返回 disposer） - 出站不绕过统一发送链
- 做过与改动匹配的验证（test / 手测命令）
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- assets/ai-tool-template.ts 1.5 KB runs code
- assets/component-template.tsx 732 B
- assets/cron-template.ts 1.8 KB runs code
- assets/database-service-template.ts 2.4 KB runs code
- assets/event-hooks-template.ts 1.7 KB runs code
- assets/minimal-plugin-template.ts 1.8 KB runs code
- assets/model-definition-template.ts 804 B runs code
- assets/modular-plugin-entry-template.ts 1.9 KB runs code
- assets/plugin-web-entry-template.tsx 578 B
- references/database-modeling.md 2.4 KB
- references/implementation-branches.md 3.0 KB
- references/plugin-capabilities.md 4.4 KB
- references/plugin-directory-layout.md 2.9 KB
- test-prompts.json 354 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 171 lines · 63 tokens per session scan A dce693ddd956
zhin-plugin-standard-development is a skill published in the GitHub repository zhinjs/zhin (135 stars, last pushed today), licensed MIT. It adds 63 tokens to every session and 2,240 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
eliza-cloud
Use when the task involves Eliza Cloud or elizaOS Cloud as a managed backend, app platform, deployment target, billing layer, or monetization surface. The catch-all skill for any user request about THEIR existing apps / containers / earnings / credits / api-keys / analytics / billing / payment requests / payouts …
wegent-knowledge
Knowledge base management and search tools for Wegent. Provides capabilities to list, create, update, and search knowledge bases and documents using RAG retrieval. Use this skill when the user wants to manage knowledge bases, documents, or search for information programmatically.
a0-development
Development guide for extending Agent Zero from current source and DOX. Use for framework architecture, tools, extensions, API/WebUI handlers, agent profiles, prompts, skills, projects, runtime boundaries, and contribution workflow. Load the focused reference files before giving implementation guidance.
webhook-subscriptions
Create and manage webhook subscriptions for event-driven agent activation. Use when the user wants external services to trigger agent runs automatically.
tech-design
A guided process for writing a backend technical design from a product requirements document or feature description. A technical design explains how a feature should work in code and services.
http_request
Make HTTP requests (GET, POST, PUT, DELETE, PATCH) to any API endpoint. Use when: the user asks to call an API, test an endpoint, fetch JSON/data from a URL, or interact with a REST API. NOT for: web scraping (use webscraper), web search (use tavilysearch), or file downloads (use curl/wget).