Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add znlgis/opengis-skills --skill difygit clone --depth 1 https://github.com/znlgis/opengis-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/znlgis/opengis-skills/dify)<a href="https://agentmods.dev/skills/znlgis/opengis-skills/dify"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/dify/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/znlgis/opengis-skills/dify"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/dify.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 42 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Data Exfiltration · line 142 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00066 | $0.02785 |
| Opus 5 | $0.00033 | $0.01392 |
| Sonnet 5 | $0.00013 | $0.00557 |
| Haiku 4.5 | $0.00007 | $0.00279 |
Grade A, and why
dify scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -X POST 'https://your-dify/v1/chat-messages' \ How it starts
The opening of the file, as written. The whole thing — 291 lines — stays where its author put it; the contents beside it link to each section on GitHub.
项目地址： https://github.com/langgenius/dify
官网： https://dify.ai/
官方文档： https://docs.dify.ai/
许可证： Dify Open Source License（基于 Apache-2.0 + 附加条款） 最新版本： 参见 GitHub Releases
概述
Dify 提供：
- 应用类型：Chatbot / Agent / Text Generator / Workflow / Chatflow
- 可视化编排：节点化拖拽（LLM / Knowledge / Tool / IF-Else / 迭代 / 代码）
- RAG 引擎：知识库 + 多种检索（向量 / 全文 / 混合 / 重排）
- 多模型：OpenAI / Anthropic / Gemini / Bedrock / Azure / Ollama / Hugging Face / 通义 / 智谱 GLM / 百川 / Moonshot / DeepSeek / 豆包 / xAI 等
- 工具系统：内置 + 自定义（OpenAPI Schema）
- 多模态：图像理解 / TTS / STT
- API 与 Webhook：每个应用自动生成 RESTful API
- 多租户 / SSO / RBAC / 监控 / 日志
- 私有化部署：Docker Compose / Helm / K8s
部署（Docker Compose）
git clone https://github.com/langgenius/dify
cd dify/docker
cp .env.example .env
# 编辑 .env：SECRET_KEY、INIT_PASSWORD 等
docker compose up -d
# Web UI: http://localhost
数据持久化在 ./volumes/。生产环境建议使用外部 PostgreSQL + Redis + 对象存储 + 向量库（Weaviate/Qdrant/PGVector/Milvus）。
Helm（K8s）
helm repo add dify https://langgenius.github.io/dify-helm
helm install dify dify/dify -n dify --create-namespace
配置模型供应商
进入 「设置 → 模型供应商」：
- 添加 OpenAI / Azure：填 API Key、Base URL
- Ollama 本地：
http://host.docker.internal:11434 - 通义千问：DashScope API Key
- 智谱 GLM：API Key
- 设置「系统模型」（默认推理 / 嵌入 / 重排 / TTS / STT）
创建应用
| 类型 | 用途 |
|---|---|
| Chatbot | 多轮对话，自动会话上下文 |
| Agent | 工具调用 + 推理（ReAct/FunctionCall） |
| Text Generator | 单次生成（写作/翻译/总结） |
| Workflow | 复杂业务流程（节点编排） |
| Chatflow | Chatbot + Workflow（可拖拽对话流程） |
RAG 知识库
- 「知识库」→ 创建 → 上传 PDF/Word/Markdown/网页/Notion
- 选择切分模式：自动 / 自定义（分隔符、最大长度、重叠）
- 选择嵌入模型 + 索引方式（高质量向量 / 经济）
- 启用混合检索（语义 + 关键词）+ Rerank
- 在应用中绑定知识库 → 自动生成上下文
工作流（Workflow）核心节点
| 节点 | 功能 |
|---|---|
| Start | 输入参数 |
| LLM | 模型推理 |
| Knowledge Retrieval | 知识库检索 |
| Question Classifier | 问题分类 |
| HTTP Request | 调用外部 API |
| Code | 运行 Python/JavaScript |
| Tool | 内置/自定义工具 |
| If/Else | 条件分支 |
| Iteration | 迭代列表 |
| Variable Aggregator | 合并变量 |
| Template Transform | Jinja2 字符串模板 |
| Parameter Extractor | 从文本抽参数 |
| End | 输出 |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed b8a97200e929
- 8d ago Changed fc65a8c96991
- 12d ago First seen · 291 lines · 66 tokens per session scan A 97c07aab130b
dify is a skill published in the GitHub repository znlgis/opengis-skills (61 stars, last pushed yesterday), licensed MIT. It adds 66 tokens to every session and 2,785 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
browserwing-admin
Manage and operate BrowserWing — an intelligent browser automation platform. Install dependencies, configure LLM, create/manage/execute automation scripts, use AI-driven exploration to generate scripts, browse the script marketplace, and troubleshoot issues.
local-embedding
Run embedding on-device with ONNX Runtime. Build from source, model selection, offline mode. Use when setting up local embedding without an API key.
langchain-patterns
Use when langChain/LangGraph patterns — chains, agents, tools, memory, retrieval, graph workflows. Use when working with langchain patterns.
dify-workflow
Use when dify AI workflow platform — LLM apps, knowledge bases, agents, workflow orchestration, API deployment. Use when working with dify workflow.
ai-engineer
Build production-ready LLM applications, advanced RAG systems, and intelligent agents. Implements vector search, multimodal AI, agent orchestration, and enterprise AI integrations.
ai-ml
AI and machine learning workflow covering LLM application development, RAG implementation, agent architecture, ML pipelines, and AI-powered features.