Menu

Not in the top 1,000 by GitHub stars

NocodeMrLi/mini-program-engineering-skill-suite

Mini Program Engineering Skill Suite is an Agent Skill suite for evidence‑first mini‑program development. It helps agents bring WeChat or other mini‑program projects from vague intent to reliable engineering work: project intake, product specification, architecture, implementation, UI & device adaptation, debugging, verification, release readiness.

EngineeringDesignTesting

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Network or broad shell

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

foundation/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/mini-program-architecture-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/mini-program-debugging-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/mini-program-implementation-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/mini-program-product-spec-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/mini-program-project-intake-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/mini-program-release-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/mini-program-ui-device-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/mini-program-verification-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

skills/wechat-mini-program-platform-skill/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Not checked yet → After Instructions only

6c98f4f06b28 → 2b7f9cb24f14

Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Not checked yet

First observation → 6c98f4f06b28

No earlier version was observed for comparison.

Compare on GitHub

View on GitHubAdd to my skills

Verified commit 2b7f9cb24f142125189b8757fcea489546d76ba7

95GitHub stars
2stars in 7 days
11skills in this repository
68commits in 30 days

Heat

3.9
  • Star growth, last 7 daysNot available
  • Star growth, last 24 hoursNot available
  • Rank movement, last 7 daysNot available
  • Commits, last 30 daysNot available
  • Accounts asking about it through MCP, last 7 daysNot available
  • Hot votes this weekNot available

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Oct 25, 2026Nov 2, 202695

30-day change not yet available: not enough history.

Individual skills in this repository

How it works

mini-program-engineering-suite

When your agent uses it

Orchestrate evidence-first engineering for WeChat and other mini programs from a vague idea or existing repository through project discovery, product specification, architecture, implementation, debugging, device adaptation, verification, and release readiness. Use when users ask to build a mini program from zero to one, take over an existing mini-program project, deliver a cross-stage feature, diagnose project status, coordinate development and testing, or judge whether a mini program is ready to upload or release. Enforces fact discovery, change boundaries, stage gates, evidence-calibrated status, sensitive-information redaction, and continuity after side questions.

What it loads into context

Frontmatter

233 tokens

Always available to the agent

SKILL.md

3,613 tokens

When the skill is activated

Reference documents

79,175 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

  1. 启动顺序
  2. 判断当前阶段
  3. 编排工程任务
  4. 执行门禁
  5. 中途问题与连续执行
  6. 输出契约
  7. 能力地图
  8. 共享模板与门禁
  9. 维护脚本与公开包
  10. 可靠性方法论资源

Scripts executed separately

  • install.sh
  • scripts/agent_cli.py
  • scripts/apply_drift_proposal.py
  • scripts/artifact_nondegradation_gate.py
  • scripts/attest_release_evidence.py
  • scripts/audit_source_inventory.py
  • scripts/capability_doctor.py
  • scripts/check_foundation_equivalence.py
  • scripts/check_i18n_readme_structure.py
  • scripts/drift_audit.py
  • scripts/drift_watch.py
  • scripts/evaluation_gate.py
  • scripts/evidence_signature.py
  • scripts/export_public_package.py
  • scripts/platform_drift.py
  • scripts/release_gate.sh
  • scripts/release_recommendation.py
  • scripts/review_drift_proposal.py
  • scripts/scan_sensitive_content.py
  • scripts/summarize_evaluations.py
  • scripts/validate_suite.py
  • scripts/verify_public_package.py
  • tests/evals/final_release_signer.py
  • tests/evals/independent_methodology_signer.py
  • tests/evals/independent_signer.py
  • tests/evals/judge_behavior.py
  • tests/evals/judge_final_release.py
  • tests/evals/run_evaluations.py
  • tests/evals/run_upgrade02.py
  • tests/test_audit_remediation.py
  • tests/test_audit_source_inventory.py
  • tests/test_first_batch.py
  • tests/test_fourth_batch.py
  • tests/test_methodology_upgrade.py
  • tests/test_phase5_freshness_tooling.py
  • tests/test_release_gate.py
  • tests/test_release_quality_boundaries.py
  • tests/test_reliability_upgrade.py
  • tests/test_scan_hash_context.py
  • tests/test_second_batch.py
  • tests/test_skill_evaluation.py
  • tests/test_step6_quality_adapters.py
  • tests/test_step7_distribution.py
  • tests/test_step8_release.py
  • tests/test_third_batch.py
  • tests/test_transport_recovery.py
  • tests/test_upgrade02_contracts.py
  • tests/test_validated_skill_upgrade.py
  • tests/test_waiting_transport.py
  • tests/test_workflow_injection_guards.py

Files

  • .github/ISSUE_TEMPLATE/bug_report.ymlasset1,932 bytes
  • .github/ISSUE_TEMPLATE/config.ymlasset27 bytes
  • .github/ISSUE_TEMPLATE/platform_drift.ymlasset1,758 bytes
  • .github/ISSUE_TEMPLATE/skill_proposal.ymlasset1,588 bytes
  • .github/dependabot.ymlasset195 bytes
  • .github/release-evidence/README.mddoc2,068 bytes
  • .github/release-evidence/trusted-signers.pemasset625 bytes
  • .github/release-evidence/v3.1.10.jsonasset5,127 bytes
  • .github/release-evidence/v3.1.11.jsonasset5,185 bytes
  • .github/release-evidence/v3.1.12.jsonasset5,198 bytes
  • .github/release-evidence/v3.1.13.jsonasset5,193 bytes
  • .github/release-evidence/v3.2.0-artifact-nondegradation.jsonasset624 bytes
  • .github/release-evidence/v3.2.0-behavior-development.jsonasset614 bytes
  • .github/release-evidence/v3.2.0-behavior-holdout.jsonasset611 bytes
  • .github/release-evidence/v3.2.0-final-signature.jsonasset614 bytes
  • .github/release-evidence/v3.2.0-independent-judgment.jsonasset614 bytes
  • .github/release-evidence/v3.2.0-methodology-development.jsonasset617 bytes
  • .github/release-evidence/v3.2.0-methodology-held-out.jsonasset614 bytes
  • .github/release-evidence/v3.2.0-routing-dev.jsonasset613 bytes
  • .github/release-evidence/v3.2.0-routing-held-out.jsonasset610 bytes
  • .github/release-evidence/v3.2.0.jsonasset2,795 bytes
  • .github/release-evidence/v3.3.0-artifact-nondegradation.jsonasset749 bytes
  • .github/release-evidence/v3.3.0-behavior-dev.jsonasset745 bytes
  • .github/release-evidence/v3.3.0-behavior-holdout.jsonasset739 bytes
  • .github/release-evidence/v3.3.0-final-signature.jsonasset609 bytes
  • .github/release-evidence/v3.3.0-independent-judgment.jsonasset614 bytes
  • .github/release-evidence/v3.3.0-methodology-dev.jsonasset748 bytes
  • .github/release-evidence/v3.3.0-methodology-holdout.jsonasset742 bytes
  • .github/release-evidence/v3.3.0-routing-dev.jsonasset687 bytes
  • .github/release-evidence/v3.3.0-routing-holdout.jsonasset684 bytes
  • .github/release-evidence/v3.3.0.jsonasset2,747 bytes
  • .github/release-evidence/v3.4.0-artifact-nondegradation.jsonasset749 bytes
  • .github/release-evidence/v3.4.0-behavior-dev.jsonasset742 bytes
  • .github/release-evidence/v3.4.0-behavior-holdout.jsonasset739 bytes
  • .github/release-evidence/v3.4.0-final-signature.jsonasset609 bytes
  • .github/release-evidence/v3.4.0-independent-judgment.jsonasset614 bytes
  • .github/release-evidence/v3.4.0-methodology-dev.jsonasset760 bytes
  • .github/release-evidence/v3.4.0-methodology-holdout.jsonasset742 bytes
  • .github/release-evidence/v3.4.0-routing-dev.jsonasset687 bytes
  • .github/release-evidence/v3.4.0-routing-holdout.jsonasset684 bytes
  • .github/release-evidence/v3.4.0.jsonasset2,747 bytes
  • .github/release-evidence/v3.5.0-artifact-nondegradation.jsonasset779 bytes
  • .github/release-evidence/v3.5.0-behavior-dev.jsonasset742 bytes
  • .github/release-evidence/v3.5.0-behavior-holdout.jsonasset739 bytes
  • .github/release-evidence/v3.5.0-final-signature.jsonasset639 bytes
  • .github/release-evidence/v3.5.0-independent-judgment.jsonasset644 bytes
  • .github/release-evidence/v3.5.0-methodology-dev.jsonasset748 bytes
  • .github/release-evidence/v3.5.0-methodology-holdout.jsonasset742 bytes
  • .github/release-evidence/v3.5.0-routing-dev.jsonasset687 bytes
  • .github/release-evidence/v3.5.0-routing-holdout.jsonasset684 bytes
  • .github/release-evidence/v3.5.0.jsonasset2,843 bytes
  • .github/release-evidence/v3.6.0-artifact-nondegradation.jsonasset977 bytes
  • .github/release-evidence/v3.6.0-behavior-dev.jsonasset840 bytes
  • .github/release-evidence/v3.6.0-behavior-holdout.jsonasset837 bytes
  • .github/release-evidence/v3.6.0-final-signature.jsonasset698 bytes
  • .github/release-evidence/v3.6.0-independent-judgment.jsonasset703 bytes
  • .github/release-evidence/v3.6.0-methodology-dev.jsonasset911 bytes
  • .github/release-evidence/v3.6.0-methodology-holdout.jsonasset914 bytes
  • .github/release-evidence/v3.6.0-routing-dev.jsonasset785 bytes
  • .github/release-evidence/v3.6.0-routing-holdout.jsonasset782 bytes
  • .github/release-evidence/v3.6.0.jsonasset3,287 bytes
  • .github/workflows/ci.ymlasset13,956 bytes
  • .github/workflows/drift-watch.ymlasset9,093 bytes
  • .github/workflows/release.ymlasset8,951 bytes
  • .github/workflows/sign-release-evidence.ymlasset2,998 bytes
  • .gitignoreasset157 bytes
  • CHANGELOG.mddoc61,974 bytes
  • COMPATIBILITY.mddoc1,590 bytes
  • CONTRIBUTING.mddoc1,858 bytes
  • EVALUATIONS.mddoc50,252 bytes
  • LICENSEasset1,067 bytes
  • README.en.mddoc22,501 bytes
  • README.id.mddoc17,429 bytes
  • README.ja.mddoc19,098 bytes
  • README.mddoc21,688 bytes
  • README.th.mddoc29,340 bytes
  • README.zh-Hant.mddoc15,339 bytes
  • SECURITY.mddoc2,156 bytes
  • SKILL.mdcore14,226 bytes
  • VERSIONasset6 bytes
  • agents/openai.yamlasset312 bytes
  • assets/readme-cover-2000x849-v2.webpasset54,936 bytes
  • assets/readme-cover.webpasset70,446 bytes
  • assets/readme-promo.mp4asset4,657,712 bytes
  • assets/wordpet-origin-case.pngasset766,475 bytes
  • install.shruns8,757 bytes
  • platforms/README.mddoc4,917 bytes
  • platforms/alipay/facts.mddoc2,120 bytes
  • platforms/alipay/rule-map.jsonasset1,562 bytes
  • platforms/douyin/facts.mddoc2,162 bytes
  • platforms/douyin/rule-map.jsonasset1,754 bytes
  • platforms/wechat/commerce-and-cloud-contracts.mddoc6,836 bytes
  • platforms/wechat/facts.mddoc4,531 bytes
  • platforms/wechat/platform-evidence-layers.mddoc2,143 bytes
  • platforms/wechat/privacy-permission-matrix.mddoc2,779 bytes
  • platforms/wechat/rule-map.jsonasset2,155 bytes
  • platforms/wechat/wechat-platform-checklist.mddoc1,472 bytes
  • references/routing-and-state-machine.mddoc6,005 bytes
  • scripts/agent_cli.pyruns9,121 bytes
  • scripts/apply_drift_proposal.pyruns7,910 bytes
  • scripts/artifact_nondegradation_gate.pyruns47,446 bytes
  • scripts/attest_release_evidence.pyruns3,756 bytes
  • scripts/audit_source_inventory.pyruns9,284 bytes
  • scripts/capability_doctor.pyruns7,530 bytes
  • scripts/check_foundation_equivalence.pyruns3,441 bytes
  • scripts/check_i18n_readme_structure.pyruns8,004 bytes
  • scripts/drift_audit.pyruns11,228 bytes
  • scripts/drift_watch.pyruns16,487 bytes
  • scripts/evaluation_gate.pyruns26,280 bytes
  • scripts/evidence_signature.pyruns4,333 bytes
  • scripts/export_public_package.pyruns5,560 bytes
  • scripts/platform_drift.pyruns23,341 bytes
  • scripts/release_gate.shruns12,521 bytes
  • scripts/release_recommendation.pyruns30,710 bytes
  • scripts/review_drift_proposal.pyruns21,158 bytes
  • scripts/scan_sensitive_content.pyruns11,258 bytes
  • scripts/summarize_evaluations.pyruns9,957 bytes
  • scripts/validate_suite.pyruns26,367 bytes
  • scripts/verify_public_package.pyruns8,881 bytes
  • shared/architecture-layers.mddoc2,560 bytes
  • shared/decision-and-confirmation-rules.mddoc858 bytes
  • shared/documentation-boundaries.mddoc2,215 bytes
  • shared/engineering-guardrails.mddoc3,006 bytes
  • shared/evidence-status-model.mddoc2,891 bytes
  • shared/redaction-policy.mddoc3,070 bytes
  • shared/templates/implementation-plan.mddoc500 bytes
  • shared/templates/project-intake.mddoc833 bytes
  • shared/templates/release-checklist.mddoc922 bytes
  • shared/templates/verification-report.mddoc535 bytes
  • tests/evals/behavior-development.jsonasset1,604 bytes
  • tests/evals/behavior-held-out.jsonasset1,800 bytes
  • tests/evals/behavior-v2-held-out.jsonasset1,929 bytes
  • tests/evals/behavior-v3-held-out.jsonasset2,173 bytes
  • tests/evals/final_release_signer.pyruns8,745 bytes
  • tests/evals/independent_methodology_signer.pyruns3,331 bytes
  • tests/evals/independent_signer.pyruns3,409 bytes
  • tests/evals/judge_behavior.pyruns5,987 bytes
  • tests/evals/judge_final_release.pyruns3,621 bytes
  • tests/evals/methodology-development.jsonasset2,193 bytes
  • tests/evals/methodology-held-out.jsonasset2,270 bytes
  • tests/evals/methodology-v2-held-out.jsonasset2,358 bytes
  • tests/evals/methodology-v3-held-out.jsonasset2,510 bytes
  • tests/evals/methodology-v4-held-out.jsonasset2,330 bytes
  • tests/evals/routing-development.jsonasset7,504 bytes
  • tests/evals/routing-held-out.jsonasset7,721 bytes
  • tests/evals/run_evaluations.pyruns24,705 bytes
  • tests/evals/run_upgrade02.pyruns9,116 bytes
  • tests/evals/upgrade02-scenarios.jsonasset13,391 bytes
  • tests/test_audit_remediation.pyruns68,196 bytes
  • tests/test_audit_source_inventory.pyruns7,432 bytes
  • tests/test_first_batch.pyruns5,625 bytes
  • tests/test_fourth_batch.pyruns7,574 bytes
  • tests/test_methodology_upgrade.pyruns9,937 bytes
  • tests/test_phase5_freshness_tooling.pyruns53,476 bytes
  • tests/test_release_gate.pyruns18,847 bytes
  • tests/test_release_quality_boundaries.pyruns25,092 bytes
  • tests/test_reliability_upgrade.pyruns36,629 bytes
  • tests/test_scan_hash_context.pyruns1,805 bytes
  • tests/test_second_batch.pyruns7,215 bytes
  • tests/test_skill_evaluation.pyruns6,652 bytes
  • tests/test_step6_quality_adapters.pyruns10,395 bytes
  • tests/test_step7_distribution.pyruns14,011 bytes
  • tests/test_step8_release.pyruns11,629 bytes
  • tests/test_third_batch.pyruns6,135 bytes
  • tests/test_transport_recovery.pyruns18,732 bytes
  • tests/test_upgrade02_contracts.pyruns11,560 bytes
  • tests/test_validated_skill_upgrade.pyruns25,740 bytes
  • tests/test_waiting_transport.pyruns14,257 bytes
  • tests/test_workflow_injection_guards.pyruns3,964 bytes
Read SKILL.md

# /mini-program-engineering-suite — 小程序工程开发套件

把小程序任务视为一条有阶段、有门禁、有证据的工程链路。先确认当前事实，再决定路由和动作；只把已经有证据支持的状态报告给用户。

## 启动顺序

1. 读取当前项目及上级目录中的 `AGENTS.md`、`CLAUDE.md` 或同类规则文件。
2. 读取 [共享工程门禁](shared/engineering-guardrails.md)、[证据状态模型](shared/evidence-status-model.md)、[判断与确认规则](shared/decision-and-confirmation-rules.md) 和 [脱敏规则](shared/redaction-policy.md)，再按当前阶段读取对应分 Skill 及其引用合同。未知技术栈可运行只读 `scripts/capability_doctor.py`；涉及对外输出时读取 [文档边界](shared/documentation-boundaries.md)。
3. 判断这是新项目、已有项目，还是没有项目目录的咨询任务。
4. 已有项目开发若无本轮事实图，先用 [项目接管 Skill](skills/mini-program-project-intake-skill/SKILL.md)；纯只读审计走 [源码审计短路径](skills/mini-program-verification-skill/references/source-audit-workflow.md)。只读发现前不改代码。
5. 建立或恢复任务计划，记录原目标、当前阶段、完成证据和未完成项。

## 判断当前阶段
View the complete source on GitHub

Skills included

  • mini-program-engineering-suite
  • evidence-first-engineering
  • mini-program-architecture-skill
  • mini-program-debugging-skill
  • mini-program-implementation-skill
  • mini-program-product-spec-skill
  • mini-program-project-intake-skill
  • mini-program-release-skill
  • mini-program-ui-device-skill
  • mini-program-verification-skill
  • wechat-mini-program-platform-skill

Repository facts

License
MIT
Created
Aug 13, 2026
Last pushed
Nov 3, 2026
Forks
7
Open issues
1
Project activity
Active

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 4, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 7 notes
  • skills/mini-program-implementation-skill/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/mini-program-implementation-skill/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/mini-program-release-skill/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/mini-program-ui-device-skill/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/mini-program-verification-skill/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/wechat-mini-program-platform-skill/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • skills/wechat-mini-program-platform-skill/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
Show all 419 signals by file

.github/workflows/ci.yml

  • Access to secretsline 30
    [Credential-related source omitted]
  • Dangerous shell operationline 193
    rm -rf "$probe_dir"

.github/workflows/drift-watch.yml

  • Access to secretsline 120
    [Credential-related source omitted]
  • Access to secretsline 127
    [Credential-related source omitted]
  • Access to secretsline 168
    [Credential-related source omitted]

.github/workflows/sign-release-evidence.yml

  • Dangerous shell operationline 65
    trap 'rm -f "$key_file"' EXIT

EVALUATIONS.md

  • Network accessline 5
    3.4.0 的九阶段新评测通过，使用 ZCode 0.16.9 / GLM-5.3。两轮适配审查后完成 10 项技术与协作合同增量；本轮未使用 DeepSeek。可信声明见 `.github/release-evidence/v3.4.0.json`；CI、RSA 签名、tag、不可变 Release 与接收端复验分别验收，正式工件以 [v3.4.0 Release](https://github.com/NocodeMrLi/mini-program-engineering
  • Network accessline 7
    3.3.0 的九阶段新评测已通过，使用 ZCode 0.16.9 / GLM-5.3；以下历史记录只支持对应历史版本。独立模型判定、可信 RSA 证据签名、最终 CI、tag 与不可变 Release 分层验收；可信声明见 `.github/release-evidence/v3.3.0.json`，正式发布及接收端工件以 [v3.3.0 Release](https://github.com/NocodeMrLi/mini-program-engineering-skill
  • Network accessline 31
    这批证据证明Skill合同及匿名模块审查，不代替真实设备、生产数据库事务、云进程中断、自然调度、真实交易或用户验收；未操作来源业务项目。[v3.6.0](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases/tag/v3.6.0)已不可变发布，可信RSA签名、最终签名提交CI9/9、四资产及129文件接收分别验证通过。随后通过[PR #51](https://github.com
  • Network accessline 51
    两轮适配审查后，在既有合同中补强历史归属与恢复前态、持久中间断点、前台尝试退出与业务未知、独立目录生命周期、同轮多入口保存及确认副作用。协作规则同时覆盖可见反馈、最少重复配合、及时交接和保留用户现有流程。v3.5.0 从升级分支发布后，已获负责人授权合并到 main（[PR #49](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/pull/49)）。合并或发布不会自动替换使用者的本机安装，
  • Network accessline 53
    基础六阶段沿用输入哈希相同的 ZCode runtime0.16.9 / GLM-5.3 证据；受影响成品、定向回归、盲评和最终独立判定重新使用 ZCode CLI3.11.2-21/runtime0.16.5 / GLM-5.3-Flash，九阶段全部 PASS；8 个新增技术/协作场景最终 8/8。两个匿名模块、每组各两次独立生成，共 8 份最终成品的平均增益 1.44，按原 rubric 判定升级版关键错误及相对基线的关键维度退化为 0，平均增益门槛仍为 1.0。声明见

README.en.md

  • Network accessline 7
    <p align="center">   <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 8
    <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 9
    <img src="https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/actions/workflows/ci.yml/badge.svg" alt="CI">
  • Network accessline 10
    <img src="https://img.shields.io/badge/platform-WeChat%20%7C%20Alipay%20%7C%20Douyin-07C160.svg" alt="Platform: WeChat | Alipay | Douyin">
  • Network accessline 11
    <img src="https://img.shields.io/badge/type-Agent%20Skill%20Suite-7B61FF.svg" alt="Type: Agent Skill Suite">
  • Network accessline 12
    <img src="https://img.shields.io/badge/category-Evidence--First%20Engineering-FF6B35.svg" alt="Category: Evidence-First Engineering">
  • Network accessline 13
    <img src="https://img.shields.io/badge/stack-Taro%20%7C%20uni--app%20%7C%20native-4CAF50.svg" alt="Stack: Taro / uni-app / native">
  • Network accessline 14
    <img src="https://img.shields.io/badge/runtime-Python%203.9%2B-3776AB.svg" alt="Runtime: Python 3.9+">
  • Network accessline 15
    <img src="https://img.shields.io/badge/lang-English-2563EB.svg" alt="Language: English">
  • Network accessline 16
    <img src="https://img.shields.io/badge/status-Active%20Development-22C55E.svg" alt="Status: Active Development">
  • Network accessline 17
    <img src="https://img.shields.io/badge/version-3.6.0-0EA5E9.svg" alt="Version: 3.6.0">
  • Network accessline 52
    If you want a quick overview of what this Skill solves, where it came from, and how it is meant to be used, start with this [32-second explainer video](https://raw.githubusercontent.com/NocodeMrLi/mini-program-engineering-skill-suite/main/a
  • Network accessline 54
    https://github.com/user-attachments/assets/d382951e-5175-48be-b0c0-44ba210706f1
  • Network accessline 126
    - **Check official evidence before execution.** For uploads, review submissions, releases, privacy declarations and quotas, require the agent to check the date, source and scope of recorded facts, and consult current official documentation
  • Network accessline 128
    - **Want the latest copy?** Download the new package from [Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases) and reinstall with `install.sh --force`. The suite never silently auto-updates a local install
  • Network accessline 152
    Prefer downloading the verified public package from [GitHub Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases). If you want to inspect source, contribute changes, or let an agent handle the setup, clone t
  • Network accessline 157
    https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git Install this skill for me.
  • Network accessline 174
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git
  • Network accessline 195
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 202
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 209
    mkdir -p .github/skills git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 210
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 295
    Prefer versioned packages from [GitHub Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases). Each release includes the public package archive, `package-manifest.json`, `gate-summary.json`, and a `SHA256SUMS
  • Network accessline 331
    Current version: **3.6.0**. [v3.6.0 is published with its public package](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases/tag/v3.6.0). This page describes current capabilities; see [CHANGELOG.md](CHANGELOG.md) fo

README.id.md

  • Network accessline 7
    <p align="center">   <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 8
    <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 9
    <img src="https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/actions/workflows/ci.yml/badge.svg" alt="CI">
  • Network accessline 10
    <img src="https://img.shields.io/badge/platform-WeChat%20%7C%20Alipay%20%7C%20Douyin-07C160.svg" alt="Platform: WeChat | Alipay | Douyin">
  • Network accessline 11
    <img src="https://img.shields.io/badge/type-Agent%20Skill%20Suite-7B61FF.svg" alt="Type: Agent Skill Suite">
  • Network accessline 12
    <img src="https://img.shields.io/badge/category-Evidence--First%20Engineering-FF6B35.svg" alt="Category: Evidence-First Engineering">
  • Network accessline 13
    <img src="https://img.shields.io/badge/stack-Taro%20%7C%20uni--app%20%7C%20native-4CAF50.svg" alt="Stack: Taro / uni-app / native">
  • Network accessline 14
    <img src="https://img.shields.io/badge/runtime-Python%203.9%2B-3776AB.svg" alt="Runtime: Python 3.9+">
  • Network accessline 15
    <img src="https://img.shields.io/badge/lang-Bahasa%20Indonesia-16A34A.svg" alt="Language: Bahasa Indonesia">
  • Network accessline 16
    <img src="https://img.shields.io/badge/status-Active%20Development-22C55E.svg" alt="Status: Active Development">
  • Network accessline 17
    <img src="https://img.shields.io/badge/version-3.6.0-0EA5E9.svg" alt="Version: 3.6.0">
  • Network accessline 54
    Jika Anda ingin melihat gambaran singkat tentang masalah yang diselesaikan, asal-usulnya, dan cara penggunaannya, mulai dari [video penjelasan 32 detik](https://raw.githubusercontent.com/NocodeMrLi/mini-program-engineering-skill-suite/main/
  • Network accessline 56
    https://github.com/user-attachments/assets/d382951e-5175-48be-b0c0-44ba210706f1
  • Network accessline 151
    https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git bantu saya menginstal skill ini
  • Network accessline 157
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 164
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 216
    Utamakan package berversi dari [GitHub Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases). Setiap Release menyertakan archive, `package-manifest.json`, `gate-summary.json`, dan `SHA256SUMS` yang mencakup
  • Network accessline 238
    Versi saat ini: **3.6.0**. [v3.6.0 sudah dirilis dengan paket publik yang dapat diunduh](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases/tag/v3.6.0). Halaman ini menjelaskan kemampuan saat ini; riwayat ada di [CH

README.ja.md

  • Network accessline 7
    <p align="center">   <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 8
    <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 9
    <img src="https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/actions/workflows/ci.yml/badge.svg" alt="CI">
  • Network accessline 10
    <img src="https://img.shields.io/badge/platform-WeChat%20%7C%20Alipay%20%7C%20Douyin-07C160.svg" alt="Platform: WeChat | Alipay | Douyin">
  • Network accessline 11
    <img src="https://img.shields.io/badge/type-Agent%20Skill%20Suite-7B61FF.svg" alt="Type: Agent Skill Suite">
  • Network accessline 12
    <img src="https://img.shields.io/badge/category-Evidence--First%20Engineering-FF6B35.svg" alt="Category: Evidence-First Engineering">
  • Network accessline 13
    <img src="https://img.shields.io/badge/stack-Taro%20%7C%20uni--app%20%7C%20native-4CAF50.svg" alt="Stack: Taro / uni-app / native">
  • Network accessline 14
    <img src="https://img.shields.io/badge/runtime-Python%203.9%2B-3776AB.svg" alt="Runtime: Python 3.9+">
  • Network accessline 15
    <img src="https://img.shields.io/badge/lang-日本語-DC2626.svg" alt="Language: 日本語">
  • Network accessline 16
    <img src="https://img.shields.io/badge/status-Active%20Development-22C55E.svg" alt="Status: Active Development">
  • Network accessline 17
    <img src="https://img.shields.io/badge/version-3.6.0-0EA5E9.svg" alt="Version: 3.6.0">
  • Network accessline 54
    この Skill が何を解決し、どの実プロジェクトから生まれ、どのように使うのかを [32 秒の説明動画](https://raw.githubusercontent.com/NocodeMrLi/mini-program-engineering-skill-suite/main/assets/readme-promo.mp4) で確認できます。
  • Network accessline 56
    https://github.com/user-attachments/assets/d382951e-5175-48be-b0c0-44ba210706f1
  • Network accessline 151
    https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git このスキルをインストールしてください
  • Network accessline 157
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 164
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 216
    [GitHub Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases) のバージョン付き公開パッケージを優先してください。各 Release にはアーカイブ、`package-manifest.json`、`gate-summary.json`、および三つを対象にした `SHA256SUMS` が含まれます。Immutable Releases が有効で、全ア
  • Network accessline 238
    現在のバージョン：**3.6.0**。[v3.6.0 は正式公開済みで、公開パッケージをダウンロードできます](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases/tag/v3.6.0)。本ページは現在の機能を説明します。履歴は [CHANGELOG.md](CHANGELOG.md)、評価範囲と証拠の限界は [EVALUATIONS.md](EVALUATIONS.md) を

README.md

  • Network accessline 7
    <p align="center">   <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 8
    <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 9
    <img src="https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/actions/workflows/ci.yml/badge.svg" alt="CI">
  • Network accessline 10
    <img src="https://img.shields.io/badge/platform-WeChat%20%7C%20Alipay%20%7C%20Douyin-07C160.svg" alt="Platform: WeChat | Alipay | Douyin">
  • Network accessline 11
    <img src="https://img.shields.io/badge/type-Agent%20Skill%20Suite-7B61FF.svg" alt="Type: Agent Skill Suite">
  • Network accessline 12
    <img src="https://img.shields.io/badge/category-Evidence--First%20Engineering-FF6B35.svg" alt="Category: Evidence-First Engineering">
  • Network accessline 13
    <img src="https://img.shields.io/badge/stack-Taro%20%7C%20uni--app%20%7C%20native-4CAF50.svg" alt="Stack: Taro / uni-app / native">
  • Network accessline 14
    <img src="https://img.shields.io/badge/runtime-Python%203.9%2B-3776AB.svg" alt="Runtime: Python 3.9+">
  • Network accessline 15
    <img src="https://img.shields.io/badge/lang-中文-EA580C.svg" alt="Language: 中文">
  • Network accessline 16
    <img src="https://img.shields.io/badge/status-Active%20Development-22C55E.svg" alt="Status: Active Development">
  • Network accessline 17
    <img src="https://img.shields.io/badge/version-3.6.0-0EA5E9.svg" alt="Version: 3.6.0">
  • Network accessline 52
    如果你想先快速了解这套 Skill 解决什么问题、从哪里沉淀出来、适合怎么用，可以先看这个 [32 秒说明视频](https://raw.githubusercontent.com/NocodeMrLi/mini-program-engineering-skill-suite/main/assets/readme-promo.mp4)。
  • Network accessline 54
    https://github.com/user-attachments/assets/d382951e-5175-48be-b0c0-44ba210706f1
  • Network accessline 111
    - **执行前核对官方依据**：上传、提审、发布、隐私申报和配额等步骤，要求 Agent 核对事实的日期、来源与适用范围，过期或高风险事项再查官方现行文档。无法确认时保留 unknown 并停止依赖该事实的操作；这项流程不能保证旧版本始终正确，仍需及时更新本机套件。 - **套件内容受控升级**：维护方通过漂移检测工具（对官方文档做指纹比对）发现规则变化后，经多轮独立审计提交更新；你可以在 [Issues](https://github.com/NocodeMrLi/mini
  • Network accessline 112
    - **套件内容受控升级**：维护方通过漂移检测工具（对官方文档做指纹比对）发现规则变化后，经多轮独立审计提交更新；你可以在 [Issues](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/issues) 用 **Platform rule drift** 模板上报你发现的规则变化（自愿，预填好格式）。
  • Network accessline 113
    - **想用最新版教材**：从 [Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases) 下载新包并 `install.sh --force` 重装即可；套件永远不会静默自动更新你的本地安装。
  • Network accessline 165
    推荐优先从 [GitHub Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases) 下载已经导出的公开包；如果你想查看源码、参与修改或让 Agent 自动处理，也可以克隆本仓库到支持 `SKILL.md` 或项目规则的 Agent 应用目录中。
  • Network accessline 170
    https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git 帮我安装这个技能
  • Network accessline 187
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git
  • Network accessline 208
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 215
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 222
    mkdir -p .github/skills git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 223
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 308
    请优先使用 [GitHub Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases) 这样的 **可信来源** 中的版本化发布包，不要混用不同版本的文件；仓库中的 `VERSION` 是版本号的唯一权威。每个 Release 会附带公开包压缩文件、`package-manifest.json`、`gate-summary.json` 和覆盖三者的 `SHA256
  • Network accessline 344
    当前版本：**3.6.0**；[v3.6.0 已正式发布，可下载公开包](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases/tag/v3.6.0)。本页介绍当前能力；版本历史见 [CHANGELOG.md](CHANGELOG.md)，测评与证据边界见 [EVALUATIONS.md](EVALUATIONS.md)。

README.th.md

  • Network accessline 7
    <p align="center">   <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 8
    <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 9
    <img src="https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/actions/workflows/ci.yml/badge.svg" alt="CI">
  • Network accessline 10
    <img src="https://img.shields.io/badge/platform-WeChat%20%7C%20Alipay%20%7C%20Douyin-07C160.svg" alt="Platform: WeChat | Alipay | Douyin">
  • Network accessline 11
    <img src="https://img.shields.io/badge/type-Agent%20Skill%20Suite-7B61FF.svg" alt="Type: Agent Skill Suite">
  • Network accessline 12
    <img src="https://img.shields.io/badge/category-Evidence--First%20Engineering-FF6B35.svg" alt="Category: Evidence-First Engineering">
  • Network accessline 13
    <img src="https://img.shields.io/badge/stack-Taro%20%7C%20uni--app%20%7C%20native-4CAF50.svg" alt="Stack: Taro / uni-app / native">
  • Network accessline 14
    <img src="https://img.shields.io/badge/runtime-Python%203.9%2B-3776AB.svg" alt="Runtime: Python 3.9+">
  • Network accessline 15
    <img src="https://img.shields.io/badge/lang-ไทย-F97316.svg" alt="Language: ไทย">
  • Network accessline 16
    <img src="https://img.shields.io/badge/status-Active%20Development-22C55E.svg" alt="Status: Active Development">
  • Network accessline 17
    <img src="https://img.shields.io/badge/version-3.6.0-0EA5E9.svg" alt="Version: 3.6.0">
  • Network accessline 54
    ถ้าต้องการดูภาพรวมว่าสิ่งนี้แก้ปัญหาอะไร มาจากโปรเจกต์จริงแบบไหน และควรใช้อย่างไร ให้เริ่มจาก[วิดีโออธิบาย 32 วินาที](https://raw.githubusercontent.com/NocodeMrLi/mini-program-engineering-skill-suite/main/assets/readme-promo.mp4)นี้
  • Network accessline 56
    https://github.com/user-attachments/assets/d382951e-5175-48be-b0c0-44ba210706f1
  • Network accessline 151
    https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git ช่วยติดตั้ง skill นี้ให้ฉัน
  • Network accessline 157
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 164
    git clone https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git \
  • Network accessline 216
    แนะนำให้ใช้ package ตาม version จาก [GitHub Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases) แต่ละ Release จะมี archive, `package-manifest.json`, `gate-summary.json` และ `SHA256SUMS` ที่ครอบคลุมทั้งสามไ
  • Network accessline 238
    เวอร์ชันปัจจุบัน: **3.6.0** [v3.6.0 เผยแพร่แล้วและดาวน์โหลดแพ็กเกจสาธารณะได้](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases/tag/v3.6.0) หน้านี้อธิบายความสามารถปัจจุบัน ดูประวัติรุ่นที่ [CHANGELOG.md](CHANGELOG.

README.zh-Hant.md

  • Network accessline 7
    <p align="center">   <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 8
    <img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT">
  • Network accessline 9
    <img src="https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/actions/workflows/ci.yml/badge.svg" alt="CI">
  • Network accessline 10
    <img src="https://img.shields.io/badge/platform-WeChat%20%7C%20Alipay%20%7C%20Douyin-07C160.svg" alt="Platform: WeChat | Alipay | Douyin">
  • Network accessline 11
    <img src="https://img.shields.io/badge/type-Agent%20Skill%20Suite-7B61FF.svg" alt="Type: Agent Skill Suite">
  • Network accessline 12
    <img src="https://img.shields.io/badge/category-Evidence--First%20Engineering-FF6B35.svg" alt="Category: Evidence-First Engineering">
  • Network accessline 13
    <img src="https://img.shields.io/badge/stack-Taro%20%7C%20uni--app%20%7C%20native-4CAF50.svg" alt="Stack: Taro / uni-app / native">
  • Network accessline 14
    <img src="https://img.shields.io/badge/runtime-Python%203.9%2B-3776AB.svg" alt="Runtime: Python 3.9+">
  • Network accessline 15
    <img src="https://img.shields.io/badge/lang-%E7%B9%81%E9%AB%94%E4%B8%AD%E6%96%87-7C3AED.svg" alt="Language: 繁體中文">
  • Network accessline 16
    <img src="https://img.shields.io/badge/status-Active%20Development-22C55E.svg" alt="Status: Active Development">
  • Network accessline 17
    <img src="https://img.shields.io/badge/version-3.6.0-0EA5E9.svg" alt="Version: 3.6.0">
  • Network accessline 54
    如果你想先快速了解這套 Skill 解決什麼問題、從哪裡沉澱而來、適合怎麼用，可以先看這個 [32 秒說明影片](https://raw.githubusercontent.com/NocodeMrLi/mini-program-engineering-skill-suite/main/assets/readme-promo.mp4)。
  • Network accessline 56
    https://github.com/user-attachments/assets/d382951e-5175-48be-b0c0-44ba210706f1
  • Network accessline 151
    https://github.com/NocodeMrLi/mini-program-engineering-skill-suite.git 幫我安裝這個技能
  • Network accessline 212
    建議優先使用 [GitHub Releases](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases) 中的版本化公開包。每個 Release 會附帶壓縮包、`package-manifest.json`、`gate-summary.json` 與涵蓋三者的 `SHA256SUMS`。倉庫已啟用不可變 Release：所有附件先在草稿階段附齊，發布後 tag 與附件不可替換；`
  • Network accessline 234
    目前版本：**3.6.0**；[v3.6.0 已正式發布，可下載公開包](https://github.com/NocodeMrLi/mini-program-engineering-skill-suite/releases/tag/v3.6.0)。本頁介紹目前能力；版本歷史見 [CHANGELOG.md](CHANGELOG.md)，評測與證據邊界見 [EVALUATIONS.md](EVALUATIONS.md)。

install.sh

  • Executable scriptline 1
    #!/usr/bin/env bash
  • Dangerous shell operationline 192
    rm -f "$TRANSACTION_LOG"
  • Dangerous shell operationline 195
    rm -rf "$WORK_DIR"
  • Dangerous shell operationline 255
    rm -rf "$dest"

platforms/alipay/facts.md

  • Network accessline 16
    - 事实：支付宝小程序版本发布需在开放平台控制台完成上传、提审与发布操作；审核要求与驳回处理以平台当前规则为准。   <!-- fact: release-review-flow verified=2026-10-11 source=https://opendocs.alipay.com/mini/introduce/release digest=unknown -->
  • Network accessline 17
    <!-- fact: release-review-flow verified=2026-10-11 source=https://opendocs.alipay.com/mini/introduce/release digest=unknown -->
  • Network accessline 19
    <!-- fact: privacy-protection verified=2026-10-11 source=https://opendocs.alipay.com/mini/03lwro digest=unknown -->
  • Network accessline 21
    以上事实于 2026-10-11 再次人工核验（浏览器读取官方正文并逐条对照 verify_points）：发布流程页更新时间为 2026-06-02，仍要求开发工具上传后在控制台提审、处理驳回、上架，允许可选体验版、灰度及线上版本回滚；常规审核为 2 个工作日，特殊情形以页面说明为准。隐私政策页更新时间为 2026-08-14，要求提审前完成配置，并覆盖第三方插件/SDK 信息、补充文档和 OpenAPI 配置路径。[my.openSetting](https://open

platforms/alipay/rule-map.json

  • Network accessline 14
    "ttl_days": 0,       "official": {         "url": "https://opendocs.alipay.com/mini/introduce/release",
  • Network accessline 15
    "official": {         "url": "https://opendocs.alipay.com/mini/introduce/release",         "title": "小程序提审、发布与运营 - 支付宝文档中心",
  • Network accessline 16
    "url": "https://opendocs.alipay.com/mini/introduce/release",
  • Network accessline 29
    "ttl_days": 30,       "official": {         "url": "https://opendocs.alipay.com/mini/03lwro",
  • Network accessline 30
    "official": {         "url": "https://opendocs.alipay.com/mini/03lwro",         "title": "小程序隐私政策 - 支付宝文档中心",
  • Network accessline 31
    "url": "https://opendocs.alipay.com/mini/03lwro",

platforms/douyin/facts.md

  • Network accessline 16
    - 事实：抖音小程序版本发布需在开放平台控制台完成上传、提审与发布；审核要求与驳回处理以平台当前规则为准。   <!-- fact: release-review-flow verified=2026-10-11 source=https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/operation/version-review/standard digest=unknown -->
  • Network accessline 17
    <!-- fact: release-review-flow verified=2026-10-11 source=https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/operation/version-review/standard digest=unknown -->
  • Network accessline 19
    <!-- fact: privacy-protection verified=2026-10-11 source=https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/open-capacity/basic-capacities/privacy-agreement digest=unknown -->
  • Network accessline 21
    以上事实于 2026-10-11 再次人工核验：版本审核标准页的隐私保护标准仍列出 28 条要求，涉及用户同意、拒绝授权后的处理和第三方信息处理约束；专门的「配置隐私协议」页仍要求控制台配置、动态生效、使用隐私接口前获得用户授权，并保留官方/自定义/联合三种授权方式，未配置的接口会受限。补充读取[发布上线](https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/introduction/develop-p

platforms/douyin/rule-map.json

  • Network accessline 14
    "ttl_days": 0,       "official": {         "url": "https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/operation/version-review/standard",
  • Network accessline 15
    "official": {         "url": "https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/operation/version-review/standard",         "title": "版本审核标准_小程序_抖音开放平台",
  • Network accessline 16
    "url": "https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/operation/version-review/standard",
  • Network accessline 29
    "ttl_days": 30,       "official": {         "url": "https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/open-capacity/basic-capacities/privacy-agreement",
  • Network accessline 30
    "official": {         "url": "https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/open-capacity/basic-capacities/privacy-agreement",         "title": "配置隐私协议_小程序_抖音开放平台",
  • Network accessline 31
    "url": "https://developer.open-douyin.com/docs/resource/zh-CN/mini-app/open-capacity/basic-capacities/privacy-agreement",

platforms/wechat/facts.md

  • Network accessline 18
    - 事实：小程序、插件涉及处理用户个人信息时，开发者须补充相应用户隐私保护指引。现网指引可在「账号设置—服务内容声明」完善，审核通过后生效；提审版本指引在「版本管理—提交代码审核」填写，审核通过且发布后覆盖现网版本。本页不完整列出隐私接口清单及授权撤回细则，涉及具体接口时仍需查对应官方文档与平台当前状态。   <!-- fact: privacy-guideline-required verified=2026-10-29 source=https://developers.
  • Network accessline 18
    - 事实：小程序、插件涉及处理用户个人信息时，开发者须补充相应用户隐私保护指引。现网指引可在「账号设置—服务内容声明」完善，审核通过后生效；提审版本指引在「版本管理—提交代码审核」填写，审核通过且发布后覆盖现网版本。本页不完整列出隐私接口清单及授权撤回细则，涉及具体接口时仍需查对应官方文档与平台当前状态。   <!-- fact: privacy-guideline-required verified=2026-10-29 source=https://developers.
  • Network accessline 19
    <!-- fact: privacy-guideline-required verified=2026-10-29 source=https://developers.weixin.qq.com/miniprogram/dev/framework/user-privacy/ digest=b5748564b1a0ecbc64183ce437d79cbd3a527e4a75954cf425da515162493c38 -->
  • Network accessline 19
    <!-- fact: privacy-guideline-required verified=2026-10-29 source=https://developers.weixin.qq.com/miniprogram/dev/framework/user-privacy/ digest=b5748564b1a0ecbc64183ce437d79cbd3a527e4a75954cf425da515162493c38 -->
  • Network accessline 20
    - 事实：运营规范主页正文分七大节（原则及相关说明、具体运营规范、小游戏特别规范、投诉与处罚、遵守当地法律监管、免责声明、动态文档）。「二、具体运营规范」的直接分节现编号为 2.1–2.19，包含注册提交、基本信息、功能设置、主体、行为、信息内容、可用性和完整性、技术实现、UI、支付退款、隐私和数据等。注册提交与主体规范要求按平台要求提供材料和修改、保证资质真实合法有效；行为规范要求提审版本与实际上线版本一致，不得绕开、规避或对抗审核监管。页面导航与独立文档入口不计入正文分节
  • Network accessline 20
    - 事实：运营规范主页正文分七大节（原则及相关说明、具体运营规范、小游戏特别规范、投诉与处罚、遵守当地法律监管、免责声明、动态文档）。「二、具体运营规范」的直接分节现编号为 2.1–2.19，包含注册提交、基本信息、功能设置、主体、行为、信息内容、可用性和完整性、技术实现、UI、支付退款、隐私和数据等。注册提交与主体规范要求按平台要求提供材料和修改、保证资质真实合法有效；行为规范要求提审版本与实际上线版本一致，不得绕开、规避或对抗审核监管。页面导航与独立文档入口不计入正文分节
  • Network accessline 21
    <!-- fact: operations-spec-scope verified=2026-10-29 source=https://developers.weixin.qq.com/miniprogram/product/ digest=a19148674c15d3e2c745715fb5d7a540f6d2e800431075f51d3cacdc28789c19 -->
  • Network accessline 21
    <!-- fact: operations-spec-scope verified=2026-10-29 source=https://developers.weixin.qq.com/miniprogram/product/ digest=a19148674c15d3e2c745715fb5d7a540f6d2e800431075f51d3cacdc28789c19 -->
  • Network accessline 22
    - 事实：运营规范主页在「四、投诉与处罚规范」给出高层路径：平台可能提供申诉渠道，开发者整改后可通过该渠道重新提交发布审核；多次整改仍不符合要求等情形下，平台可能暂时或永久关闭申诉渠道。公开正文未说明某次提审驳回原因的账号级查询入口和具体后台操作步骤；具体原因、审核记录和重新提交操作仍应以登录后小程序后台的当前展示为准，属需登录确认的 manual 事实。   <!-- fact: review-rejection-flow verified=2026-10-29 sourc
  • Network accessline 22
    - 事实：运营规范主页在「四、投诉与处罚规范」给出高层路径：平台可能提供申诉渠道，开发者整改后可通过该渠道重新提交发布审核；多次整改仍不符合要求等情形下，平台可能暂时或永久关闭申诉渠道。公开正文未说明某次提审驳回原因的账号级查询入口和具体后台操作步骤；具体原因、审核记录和重新提交操作仍应以登录后小程序后台的当前展示为准，属需登录确认的 manual 事实。   <!-- fact: review-rejection-flow verified=2026-10-29 sourc
  • Network accessline 23
    <!-- fact: review-rejection-flow verified=2026-10-29 source=https://developers.weixin.qq.com/miniprogram/product/ digest=a19148674c15d3e2c745715fb5d7a540f6d2e800431075f51d3cacdc28789c19 -->
  • Network accessline 23
    <!-- fact: review-rejection-flow verified=2026-10-29 source=https://developers.weixin.qq.com/miniprogram/product/ digest=a19148674c15d3e2c745715fb5d7a540f6d2e800431075f51d3cacdc28789c19 -->
  • Network accessline 25
    <!-- fact: toolchain-devtools verified=2026-10-29 source=https://developers.weixin.qq.com/miniprogram/dev/devtools/download_backup.html digest=3b72f9329184158f4d0ad1c24708f1fd3bc4ebaddfea0c245d04af55a099094b -->
  • Network accessline 25
    <!-- fact: toolchain-devtools verified=2026-10-29 source=https://developers.weixin.qq.com/miniprogram/dev/devtools/download_backup.html digest=3b72f9329184158f4d0ad1c24708f1fd3bc4ebaddfea0c245d04af55a099094b -->

platforms/wechat/rule-map.json

  • Network accessline 12
    "ttl_days": 0,       "official": {         "url": "https://developers.weixin.qq.com/miniprogram/product/",
  • Network accessline 12
    "ttl_days": 0,       "official": {         "url": "https://developers.weixin.qq.com/miniprogram/product/",
  • Network accessline 13
    "official": {         "url": "https://developers.weixin.qq.com/miniprogram/product/",         "title": "微信小程序平台运营规范",
  • Network accessline 13
    "official": {         "url": "https://developers.weixin.qq.com/miniprogram/product/",         "title": "微信小程序平台运营规范",
  • Network accessline 14
    "url": "https://developers.weixin.qq.com/miniprogram/product/",
  • Network accessline 14
    "url": "https://developers.weixin.qq.com/miniprogram/product/",
  • Network accessline 26
    "ttl_days": 0,       "official": {         "url": "https://developers.weixin.qq.com/miniprogram/product/",
  • Network accessline 26
    "ttl_days": 0,       "official": {         "url": "https://developers.weixin.qq.com/miniprogram/product/",
  • Network accessline 27
    "official": {         "url": "https://developers.weixin.qq.com/miniprogram/product/",         "title": "微信小程序平台运营规范",
  • Network accessline 27
    "official": {         "url": "https://developers.weixin.qq.com/miniprogram/product/",         "title": "微信小程序平台运营规范",
  • Network accessline 28
    "url": "https://developers.weixin.qq.com/miniprogram/product/",
  • Network accessline 28
    "url": "https://developers.weixin.qq.com/miniprogram/product/",
  • Network accessline 40
    "ttl_days": 30,       "official": {         "url": "https://developers.weixin.qq.com/miniprogram/dev/framework/user-privacy/",
  • Network accessline 40
    "ttl_days": 30,       "official": {         "url": "https://developers.weixin.qq.com/miniprogram/dev/framework/user-privacy/",
  • Network accessline 41
    "official": {         "url": "https://developers.weixin.qq.com/miniprogram/dev/framework/user-privacy/",         "title": "用户隐私保护指引填写说明",
  • Network accessline 41
    "official": {         "url": "https://developers.weixin.qq.com/miniprogram/dev/framework/user-privacy/",         "title": "用户隐私保护指引填写说明",
  • Network accessline 42
    "url": "https://developers.weixin.qq.com/miniprogram/dev/framework/user-privacy/",
  • Network accessline 42
    "url": "https://developers.weixin.qq.com/miniprogram/dev/framework/user-privacy/",
  • Network accessline 55
    "ttl_days": 90,       "official": {         "url": "https://developers.weixin.qq.com/miniprogram/dev/devtools/download_backup.html",
  • Network accessline 55
    "ttl_days": 90,       "official": {         "url": "https://developers.weixin.qq.com/miniprogram/dev/devtools/download_backup.html",
  • Network accessline 56
    "official": {         "url": "https://developers.weixin.qq.com/miniprogram/dev/devtools/download_backup.html",         "title": "微信开发者工具下载地址与更新日志",
  • Network accessline 56
    "official": {         "url": "https://developers.weixin.qq.com/miniprogram/dev/devtools/download_backup.html",         "title": "微信开发者工具下载地址与更新日志",
  • Network accessline 57
    "url": "https://developers.weixin.qq.com/miniprogram/dev/devtools/download_backup.html",
  • Network accessline 57
    "url": "https://developers.weixin.qq.com/miniprogram/dev/devtools/download_backup.html",

scripts/agent_cli.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Access to secretsline 30
    [Credential-related source omitted]
  • Access to secretsline 42
    [Credential-related source omitted]
  • Access to secretsline 44
    [Credential-related source omitted]
  • Access to secretsline 45
    [Credential-related source omitted]
  • Access to secretsline 61
    [Credential-related source omitted]
  • Access to secretsline 62
    [Credential-related source omitted]
  • Access to secretsline 63
    [Credential-related source omitted]
  • Access to secretsline 143
    [Credential-related source omitted]
  • Access to secretsline 146
    [Credential-related source omitted]
  • Access to secretsline 148
    [Credential-related source omitted]
  • Network accessline 156
    }     ).encode("utf-8")     request = urllib.request.Request(
  • Network accessline 157
    ).encode("utf-8")     request = urllib.request.Request(         f"{base_url}/chat/completions",
  • Network accessline 158
    request = urllib.request.Request(
  • Network accessline 162
    )     try:         with urllib.request.urlopen(request, timeout=120) as response:
  • Network accessline 163
    try:         with urllib.request.urlopen(request, timeout=120) as response:             body = json.loads(response.read().decode("utf-8"))
  • Network accessline 164
    with urllib.request.urlopen(request, timeout=120) as response:

scripts/apply_drift_proposal.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/artifact_nondegradation_gate.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/attest_release_evidence.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/audit_source_inventory.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/capability_doctor.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/check_foundation_equivalence.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/check_i18n_readme_structure.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/drift_audit.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/drift_watch.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Access to secretsline 158
    [Credential-related source omitted]

scripts/evaluation_gate.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/evidence_signature.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Possible obfuscationline 72
    signature_bytes = base64.b64decode(value, validate=True)

scripts/export_public_package.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/platform_drift.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 202
    def fetch(url: str, allowed_domains: list[str]) -> tuple[str | None, str | None]:
  • Network accessline 205
    if domain not in allowed_domains:         return None, f"domain-not-allowlisted:{domain}"     request = urllib.request.Request(url, headers={"User-Agent": USER_AGENT})
  • Network accessline 206
    return None, f"domain-not-allowlisted:{domain}"     request = urllib.request.Request(url, headers={"User-Agent": USER_AGENT})     opener = urllib.request.build_opener(AllowlistRedirectHandler(allowed_domains))
  • Network accessline 207
    request = urllib.request.Request(url, headers={"User-Agent": USER_AGENT})
  • Network accessline 350
    html_text, fetch_error = fetch(url, allowed_domains)

scripts/release_gate.sh

  • Executable scriptline 1
    #!/usr/bin/env bash

scripts/release_recommendation.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/review_drift_proposal.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/scan_sensitive_content.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/summarize_evaluations.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/validate_suite.py

  • Executable scriptline 1
    #!/usr/bin/env python3

scripts/verify_public_package.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/evals/final_release_signer.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/evals/independent_methodology_signer.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/evals/independent_signer.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/evals/judge_behavior.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/evals/judge_final_release.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/evals/run_evaluations.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 314
    (root / "assets").mkdir()         (root / "assets" / "hero-original.svg").write_text(             '<svg xmlns="http://www.w3.org/2000/svg" width="320" height="180"><rect width="320" height="180" fill="#88c"/></svg>\n',
  • Network accessline 315
    (root / "assets" / "hero-original.svg").write_text(             '<svg xmlns="http://www.w3.org/2000/svg" width="320" height="180"><rect width="320" height="180" fill="#88c"/></svg>\n',             encoding="utf-8",
  • Network accessline 316
    '<svg xmlns="http://www.w3.org/2000/svg" width="320" height="180"><rect width="320" height="180" fill="#88c"/></svg>\n',
  • Network accessline 318
    )         (root / "assets" / "hero-candidate.svg").write_text(             '<svg xmlns="http://www.w3.org/2000/svg" width="320" height="180"><rect width="320" height="180" fill="#88c" opacity=".99"/></svg>\n',
  • Network accessline 319
    (root / "assets" / "hero-candidate.svg").write_text(             '<svg xmlns="http://www.w3.org/2000/svg" width="320" height="180"><rect width="320" height="180" fill="#88c" opacity=".99"/></svg>\n',             encoding="utf-8",
  • Network accessline 320
    '<svg xmlns="http://www.w3.org/2000/svg" width="320" height="180"><rect width="320" height="180" fill="#88c" opacity=".99"/></svg>\n',

tests/evals/run_upgrade02.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_audit_remediation.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 1046
    target.mkdir(parents=True)                 (target / "facts.md").write_text(                     f"<!-- fact: r1 verified=unknown source=https://{platform}.test/doc digest=unknown -->\n",
  • Network accessline 1047
    (target / "facts.md").write_text(                     f"<!-- fact: r1 verified=unknown source=https://{platform}.test/doc digest=unknown -->\n",                     encoding="utf-8",
  • Network accessline 1048
    f"<!-- fact: r1 verified=unknown source=https://{platform}.test/doc digest=unknown -->\n",
  • Network accessline 1109
    rule_map: dict[str, object] = {                     "format_version": 1, "platform": name, "allowed_domains": ["x.test"],                     "rules": [{"id": "r1", "official": {"url": "https://x.test/a"}, "verify_points": ["p"]}],
  • Network accessline 1110
    "format_version": 1, "platform": name, "allowed_domains": ["x.test"],                     "rules": [{"id": "r1", "official": {"url": "https://x.test/a"}, "verify_points": ["p"]}],                 }
  • Network accessline 1111
    "rules": [{"id": "r1", "official": {"url": "https://x.test/a"}, "verify_points": ["p"]}],
  • Network accessline 1115
    (platform_dir / "rule-map.json").write_text(json.dumps(rule_map), encoding="utf-8")                 (platform_dir / "facts.md").write_text(                     "<!-- fact: r1 verified=2026-08-31 source=https://x.test/a digest=unknown -->\n"
  • Network accessline 1116
    (platform_dir / "facts.md").write_text(                     "<!-- fact: r1 verified=2026-08-31 source=https://x.test/a digest=unknown -->\n", encoding="utf-8"                 )
  • Network accessline 1117
    "<!-- fact: r1 verified=2026-08-31 source=https://x.test/a digest=unknown -->\n", encoding="utf-8"
  • Network accessline 1133
    "format_version": 1, "platform": "alipay", "detection": "manual-only",                     "allowed_domains": ["x.test"],                     "rules": [{"id": "r1", "official": {"url": "https://x.test/doc"}, "verify_points": ["p"]}],
  • Network accessline 1134
    "allowed_domains": ["x.test"],                     "rules": [{"id": "r1", "official": {"url": "https://x.test/doc"}, "verify_points": ["p"]}],                 }),
  • Network accessline 1135
    "rules": [{"id": "r1", "official": {"url": "https://x.test/doc"}, "verify_points": ["p"]}],
  • Network accessline 1138
    )             (platform / "facts.md").write_text(                 "<!-- fact: r1 verified=2026-08-20 source=https://x.test/doc digest=unknown -->\n", encoding="utf-8"
  • Network accessline 1139
    (platform / "facts.md").write_text(                 "<!-- fact: r1 verified=2026-08-20 source=https://x.test/doc digest=unknown -->\n", encoding="utf-8"             )
  • Network accessline 1140
    "<!-- fact: r1 verified=2026-08-20 source=https://x.test/doc digest=unknown -->\n", encoding="utf-8"
  • Network accessline 1142
    entry = self.module.manual_only_entry(platform)         self.assertEqual(entry["last_manual_verification"], "2026-08-20")         self.assertEqual(entry["manual_verification_entry_points"], ["https://x.test/doc"])
  • Network accessline 1143
    self.assertEqual(entry["last_manual_verification"], "2026-08-20")         self.assertEqual(entry["manual_verification_entry_points"], ["https://x.test/doc"])         self.assertTrue(entry["next_step"])
  • Network accessline 1144
    self.assertEqual(entry["manual_verification_entry_points"], ["https://x.test/doc"])
  • Network accessline 1183
    "a ghp_" + "A" * 36 + "\n"             "b AKIA" + "A" * 16 + "\n"             "c npm_" + "a" * 36 + "\n"
  • Network accessline 1184
    "b AKIA" + "A" * 16 + "\n"             "c npm_" + "a" * 36 + "\n"             "d pypi-" + "b" * 24 + "\n"
  • Possible obfuscationline 1250
    blob.write_bytes(b"\xff\xfe\x00\x01jwt eyJabc.def.ghi")

tests/test_audit_source_inventory.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_first_batch.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_fourth_batch.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_methodology_upgrade.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_phase5_freshness_tooling.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 44
    "ttl_days": 0,             "official": {                 "url": "https://example-official.test/product/",
  • Network accessline 45
    "official": {                 "url": "https://example-official.test/product/",                 "title": "Operations Spec",
  • Network accessline 46
    "url": "https://example-official.test/product/",
  • Network accessline 58
    "- 事实：运营规范当前覆盖提审与发布要求，以平台当前版本为准。\n"     "  <!-- fact: operations-spec-scope verified=2026-08-31 "     "source=https://example-official.test/product/ digest=%s -->\n" % ("a" * 64)
  • Network accessline 59
    "  <!-- fact: operations-spec-scope verified=2026-08-31 "     "source=https://example-official.test/product/ digest=%s -->\n" % ("a" * 64) )
  • Network accessline 60
    "source=https://example-official.test/product/ digest=%s -->\n" % ("a" * 64)
  • Network accessline 116
    facts_body = (             "# facts\n\n"             "- 事实A\n  <!-- fact: rule-a verified=unknown source=https://example-official.test/product/ digest=unknown -->\n"
  • Network accessline 117
    "# facts\n\n"             "- 事实A\n  <!-- fact: rule-a verified=unknown source=https://example-official.test/product/ digest=unknown -->\n"             "- 事实B\n  <!-- fact: rule-b verified=2026-08-30T00:00:00Z source=https://example-official
  • Network accessline 118
    "- 事实A\n  <!-- fact: rule-a verified=unknown source=https://example-official.test/product/ digest=unknown -->\n"
  • Network accessline 119
    "- 事实B\n  <!-- fact: rule-b verified=2026-08-30T00:00:00Z source=https://example-official.test/other/ digest=abc12345 -->\n"
  • Network accessline 149
    self.addCleanup(server.shutdown)         host = f"127.0.0.1:{server.server_address[1]}"         return f"http://{host}/rules", [host]
  • Network accessline 151
    return f"http://{host}/rules", [host]
  • Network accessline 168
    with self.subTest(payload=payload):                 url, allowed = self._serve(payload, "gzip")                 self.assertEqual(drift.fetch(url, allowed), (None, "invalid-gzip-response"))
  • Network accessline 170
    self.assertEqual(drift.fetch(url, allowed), (None, "invalid-gzip-response"))
  • Network accessline 177
    self.assertLess(len(payload), 256)         with patch.object(drift, "MAX_PAGE_BYTES", 256):             self.assertEqual(drift.fetch(url, allowed), (None, "page-too-large"))
  • Network accessline 179
    self.assertEqual(drift.fetch(url, allowed), (None, "page-too-large"))
  • Network accessline 181
    def test_unsupported_encoding_fails_closed(self) -> None:         url, allowed = self._serve(b"Expected body", "br")         self.assertEqual(drift.fetch(url, allowed), (None, "unsupported-content-encoding"))
  • Network accessline 183
    self.assertEqual(drift.fetch(url, allowed), (None, "unsupported-content-encoding"))
  • Network accessline 185
    def test_domain_allowlist_enforced_fail_closed(self) -> None:         html_text, error = drift.fetch("https://evil.example/product/", ["example-official.test"])
  • Network accessline 186
    html_text, error = drift.fetch("https://evil.example/product/", ["example-official.test"])
  • Network accessline 217
    "rule_id": "operations-spec-scope",         "state": "updated",         "official_url": "https://example-official.test/product/",
  • Network accessline 218
    "state": "updated",         "official_url": "https://example-official.test/product/",         "fingerprint": "a" * 64,
  • Network accessline 219
    "official_url": "https://example-official.test/product/",
  • Network accessline 274
    def test_scope_and_domain_red_lines_reject_without_llm(self) -> None:         proposal_path, platform_root = self.prepare(self.build_proposal(official_url="https://evil.test/x"))
  • Network accessline 275
    proposal_path, platform_root = self.prepare(self.build_proposal(official_url="https://evil.test/x"))
  • Access to secretsline 370
    [Credential-related source omitted]
  • Access to secretsline 371
    [Credential-related source omitted]
  • Access to secretsline 372
    [Credential-related source omitted]
  • Network accessline 377
    [Credential-related source omitted]
  • Network accessline 378
    [Credential-related source omitted]
  • Access to secretsline 378
    [Credential-related source omitted]
  • Network accessline 379
    [Credential-related source omitted]
  • Access to secretsline 379
    [Credential-related source omitted]
  • Access to secretsline 381
    [Credential-related source omitted]
  • Network accessline 509
    def test_shared_url_facts_with_mixed_digests_fail_closed(self) -> None:         rule = {"id": "r1", "official": {"url": "https://x.test/a", "title": "T"}}
  • Network accessline 510
    rule = {"id": "r1", "official": {"url": "https://x.test/a", "title": "T"}}
  • Network accessline 511
    annotations = {             "f1": {"verified": "2026-01-01", "source": "https://x.test/a", "digest": "a" * 64},             "f2": {"verified": "2026-01-01", "source": "https://x.test/a", "digest": "b" * 64},
  • Network accessline 512
    "f1": {"verified": "2026-01-01", "source": "https://x.test/a", "digest": "a" * 64},
  • Network accessline 513
    "f2": {"verified": "2026-01-01", "source": "https://x.test/a", "digest": "b" * 64},
  • Access to secretsline 535
    [Credential-related source omitted]
  • Network accessline 640
    def do_GET(self) -> None:                 self.send_response(302)                 self.send_header("Location", "https://evil.test/leaked")
  • Network accessline 641
    self.send_response(302)                 self.send_header("Location", "https://evil.test/leaked")                 self.end_headers()
  • Network accessline 642
    self.send_header("Location", "https://evil.test/leaked")
  • Network accessline 652
    self.addCleanup(server.server_close)         self.addCleanup(server.shutdown)         html_text, error = drift.fetch(f"http://{host_port}/x", [host_port])
  • Network accessline 653
    self.addCleanup(server.shutdown)         html_text, error = drift.fetch(f"http://{host_port}/x", [host_port])         self.assertIsNone(html_text)
  • Network accessline 654
    html_text, error = drift.fetch(f"http://{host_port}/x", [host_port])
  • Access to secretsline 659
    [Credential-related source omitted]
  • Network accessline 687
    p = build_default_proposal()         p["changes"][0]["official_url"] = "https://example-official.test/other/"
  • Network accessline 688
    p["changes"][0]["official_url"] = "https://example-official.test/other/"
  • Network accessline 730
    "operations-spec-scope": {                 "verified": "2026-08-30",                 "source": "https://example-official.test/product/",
  • Network accessline 731
    "verified": "2026-08-30",                 "source": "https://example-official.test/product/",                 "digest": "0" * 64,
  • Network accessline 732
    "source": "https://example-official.test/product/",
  • Network accessline 736
    "review-rejection-flow": {                 "verified": "2026-08-30",                 "source": "https://example-official.test/product/",
  • Network accessline 737
    "verified": "2026-08-30",                 "source": "https://example-official.test/product/",                 "digest": "0" * 64,
  • Network accessline 738
    "source": "https://example-official.test/product/",
  • Network accessline 745
    "rule_id": "operations-spec-scope",                 "state": "updated",                 "url": "https://example-official.test/product/",
  • Network accessline 746
    "state": "updated",                 "url": "https://example-official.test/product/",                 "fingerprint": "a" * 64,
  • Network accessline 747
    "url": "https://example-official.test/product/",
  • Network accessline 752
    "rule_id": "review-rejection-flow",                 "state": "updated",                 "url": "https://example-official.test/product/",
  • Network accessline 753
    "state": "updated",                 "url": "https://example-official.test/product/",                 "fingerprint": "a" * 64,
  • Network accessline 754
    "url": "https://example-official.test/product/",
  • Network accessline 773
    "# facts\n\n"                 "- 事实：old operations\n"                 "  <!-- fact: operations-spec-scope verified=2026-08-30 source=https://example-official.test/product/ digest=0 -->\n"
  • Network accessline 774
    "- 事实：old operations\n"                 "  <!-- fact: operations-spec-scope verified=2026-08-30 source=https://example-official.test/product/ digest=0 -->\n"                 "- 事实：old rejection\n"
  • Network accessline 775
    "  <!-- fact: operations-spec-scope verified=2026-08-30 source=https://example-official.test/product/ digest=0 -->\n"
  • Network accessline 776
    "- 事实：old rejection\n"                 "  <!-- fact: review-rejection-flow verified=2026-08-30 source=https://example-official.test/product/ digest=0 -->\n",                 encoding="utf-8",
  • Network accessline 777
    "  <!-- fact: review-rejection-flow verified=2026-08-30 source=https://example-official.test/product/ digest=0 -->\n",
  • Network accessline 789
    "rule_id": "operations-spec-scope",                                 "state": "updated",                                 "official_url": "https://example-official.test/product/",
  • Network accessline 790
    "state": "updated",                                 "official_url": "https://example-official.test/product/",                                 "fingerprint": "a" * 64,
  • Network accessline 791
    "official_url": "https://example-official.test/product/",
  • Network accessline 924
    facts = root / "platforms" / plat / "facts.md"                 facts.parent.mkdir(parents=True)                 facts.write_text("- 事实A\n  <!-- fact: a verified=2026-08-31 source=https://x/ digest=unknown -->\n")
  • Network accessline 925
    facts.parent.mkdir(parents=True)                 facts.write_text("- 事实A\n  <!-- fact: a verified=2026-08-31 source=https://x/ digest=unknown -->\n")             (root / "CHANGELOG.md").write_text(
  • Network accessline 926
    facts.write_text("- 事实A\n  <!-- fact: a verified=2026-08-31 source=https://x/ digest=unknown -->\n")
  • Network accessline 993
    bad = {"changes": [{             "rule_id": "r", "state": "updated",             "official_url": "https://example-official.test/product/",
  • Network accessline 994
    "rule_id": "r", "state": "updated",             "official_url": "https://example-official.test/product/",             "fingerprint": "a" * 64,
  • Network accessline 995
    "official_url": "https://example-official.test/product/",
  • Network accessline 1008
    facts.parent.mkdir(parents=True)                 facts.write_text(                     "- 事实A\n  <!-- fact: a verified=unknown source=https://x/ digest=unknown -->\n"
  • Network accessline 1009
    facts.write_text(                     "- 事实A\n  <!-- fact: a verified=unknown source=https://x/ digest=unknown -->\n"                 )
  • Network accessline 1010
    "- 事实A\n  <!-- fact: a verified=unknown source=https://x/ digest=unknown -->\n"

tests/test_release_gate.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_release_quality_boundaries.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 116
    self.rule = {             "id": "r1",             "official": {"url": "https://docs.test/rule", "title": "Expected"},
  • Network accessline 117
    "id": "r1",             "official": {"url": "https://docs.test/rule", "title": "Expected"},             "verify_points": ["point-a"],
  • Network accessline 118
    "official": {"url": "https://docs.test/rule", "title": "Expected"},
  • Network accessline 122
    def test_fetch_failures_and_size_limit_are_fail_closed(self) -> None:         self.assertIn("domain-not-allowlisted", self.module.fetch("https://evil.test/x", ["docs.test"])[1])
  • Network accessline 123
    self.assertIn("domain-not-allowlisted", self.module.fetch("https://evil.test/x", ["docs.test"])[1])
  • Network accessline 125
    opener.open.side_effect = self.module.RedirectBlocked("redirect-off-allowlist:evil.test")         with patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("https://do
  • Network accessline 126
    with patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "redirect-off-allowlist:evil.test")         opener.open.side_effect
  • Network accessline 127
    self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "redirect-off-allowlist:evil.test")
  • Network accessline 128
    opener.open.side_effect = urllib.error.URLError("redirect-off-allowlist:evil.test")         with patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("https://docs.tes
  • Network accessline 129
    with patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "redirect-off-allowlist:evil.test")         opener.open.side_effect
  • Network accessline 130
    self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "redirect-off-allowlist:evil.test")
  • Network accessline 131
    opener.open.side_effect = TimeoutError()         with patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "fetch-failed:Time
  • Network accessline 132
    with patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "fetch-failed:TimeoutError")         opener.open.side_effect = None
  • Network accessline 133
    self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "fetch-failed:TimeoutError")
  • Network accessline 135
    opener.open.return_value = _Response(b"x" * 11)         with patch.object(self.module, "MAX_PAGE_BYTES", 10), patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("htt
  • Network accessline 136
    with patch.object(self.module, "MAX_PAGE_BYTES", 10), patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "page-too-large")
  • Network accessline 137
    self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"])[1], "page-too-large")
  • Network accessline 138
    opener.open.return_value = _Response(b"Expected body")         with patch.object(self.module.urllib.request, "build_opener", return_value=opener):             self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"]), ("Expec
  • Network accessline 140
    self.assertEqual(self.module.fetch("https://docs.test/x", ["docs.test"]), ("Expected body", None))
  • Network accessline 166
    def test_rule_state_machine_covers_all_verdicts(self) -> None:         annotations = {"f1": {"source": "https://docs.test/rule", "digest": "unknown", "verified": "unknown", "text": "old"}}         with patch.object(self.module, "fetch", ret
  • Network accessline 167
    annotations = {"f1": {"source": "https://docs.test/rule", "digest": "unknown", "verified": "unknown", "text": "old"}}         with patch.object(self.module, "fetch", return_value=(None, "fetch-failed")):             self.assertEqual(self.mo
  • Network accessline 171
    self.assertEqual(self.module.check_rule(self.rule, annotations, ["docs.test"], False)["error"], "expected-title-missing")         empty_title = dict(self.rule)         empty_title["official"] = {"url": "https://docs.test/rule", "title": ""}
  • Network accessline 172
    empty_title = dict(self.rule)         empty_title["official"] = {"url": "https://docs.test/rule", "title": ""}         with patch.object(self.module, "fetch", return_value=("<script>x</script>", None)):
  • Network accessline 173
    empty_title["official"] = {"url": "https://docs.test/rule", "title": ""}         with patch.object(self.module, "fetch", return_value=("<script>x</script>", None)):             self.assertEqual(self.module.check_rule(empty_title, annotation
  • Network accessline 192
    root = Path(td)             (root / "rule-map.json").write_text(json.dumps({"platform": "demo", "allowed_domains": ["docs.test"], "rules": [self.rule]}))             (root / "facts.md").write_text("- 事实：old\n<!-- fact: r1 verified=unknown s
  • Network accessline 193
    (root / "rule-map.json").write_text(json.dumps({"platform": "demo", "allowed_domains": ["docs.test"], "rules": [self.rule]}))             (root / "facts.md").write_text("- 事实：old\n<!-- fact: r1 verified=unknown source=https://docs.test/rule
  • Network accessline 194
    (root / "facts.md").write_text("- 事实：old\n<!-- fact: r1 verified=unknown source=https://docs.test/rule digest=unknown -->\n")
  • Network accessline 195
    outcome = {"rule_id": "r1", "state": "updated", "url": "https://docs.test/rule", "fingerprint": "a" * 64, "reason": "changed", "extracted_statements": {"point-a": "now"}}
  • Network accessline 214
    target = root / "platforms" / name         target.mkdir(parents=True)         data = {"platform": name, "allowed_domains": ["docs.test"], "rules": [{"id": "r1", "official": {"url": "https://docs.test/r"}}]}
  • Network accessline 215
    target.mkdir(parents=True)         data = {"platform": name, "allowed_domains": ["docs.test"], "rules": [{"id": "r1", "official": {"url": "https://docs.test/r"}}]}         if detection:
  • Network accessline 216
    data = {"platform": name, "allowed_domains": ["docs.test"], "rules": [{"id": "r1", "official": {"url": "https://docs.test/r"}}]}
  • Network accessline 218
    data["detection"] = detection         (target / "rule-map.json").write_text(json.dumps(data))         (target / "facts.md").write_text("<!-- fact: r1 verified=unknown source=https://docs.test/r digest=unknown -->\n")
  • Network accessline 219
    (target / "rule-map.json").write_text(json.dumps(data))         (target / "facts.md").write_text("<!-- fact: r1 verified=unknown source=https://docs.test/r digest=unknown -->\n")         return target
  • Network accessline 220
    (target / "facts.md").write_text("<!-- fact: r1 verified=unknown source=https://docs.test/r digest=unknown -->\n")
  • Access to secretsline 255
    [Credential-related source omitted]

tests/test_reliability_upgrade.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 167
    [Credential-related source omitted]
  • Access to secretsline 167
    [Credential-related source omitted]
  • Network accessline 168
    ".env.local": b"MODE=fixture\n",             ".npmrc": b"registry=https://registry.invalid/\n",             "certificate.pem": b"fixture certificate\n",
  • Network accessline 169
    ".npmrc": b"registry=https://registry.invalid/\n",
  • Access to secretsline 259
    [Credential-related source omitted]
  • Access to secretsline 660
    [Credential-related source omitted]
  • Access to secretsline 663
    [Credential-related source omitted]
  • Access to secretsline 666
    [Credential-related source omitted]

tests/test_scan_hash_context.py

  • Executable scriptline 1
    Executable file
  • Access to secretsline 27
    [Credential-related source omitted]

tests/test_second_batch.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_skill_evaluation.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_step6_quality_adapters.py

  • Executable scriptline 1
    Executable file
  • Access to secretsline 58
    [Credential-related source omitted]

tests/test_step7_distribution.py

  • Executable scriptline 1
    Executable file

tests/test_step8_release.py

  • Executable scriptline 1
    Executable file

tests/test_third_batch.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_transport_recovery.py

  • Executable scriptline 1
    Executable file

tests/test_upgrade02_contracts.py

  • Executable scriptline 1
    Executable file

tests/test_validated_skill_upgrade.py

  • Executable scriptline 1
    #!/usr/bin/env python3

tests/test_waiting_transport.py

  • Executable scriptline 1
    Executable file
  • Access to secretsline 7
    [Credential-related source omitted]

tests/test_workflow_injection_guards.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 84
    "v$(echo INJECTED > /tmp/x)",             "v1.2.3; rm -rf /",             "v1.2.3 && curl evil",
  • Dangerous shell operationline 85
    "v1.2.3; rm -rf /",
  • Network accessline 85
    "v1.2.3; rm -rf /",             "v1.2.3 && curl evil",             "  v1.2.3",
  • Network accessline 86
    "v1.2.3 && curl evil",

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

Signal confidence: 377 facts

and 327 more

Works with

Agent compatibility, from the files in this repository
AgentStatusEvidenceInstall to
Claude CodeCompatibleStandard SKILL.md SKILL.md.claude/skills/<skill-name>/
CodexCompatibleStandard SKILL.md SKILL.md.agents/skills/<skill-name>/
CursorCompatibleStandard SKILL.md SKILL.md.cursor/skills/<skill-name>/
Gemini CLICompatibleStandard SKILL.md SKILL.md.gemini/skills/<skill-name>/
GitHub CopilotCompatibleStandard SKILL.md SKILL.md.github/skills/<skill-name>/
OpenCodeCompatibleStandard SKILL.md SKILL.md.opencode/skills/<skill-name>/
  • Native The repository ships a manifest, folder or frontmatter field for this agent.
  • Compatible A standard SKILL.md that this agent can read.
  • Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

You might also use

dzhng/skills

Reusable AI agent skills for software factories: explore ideas, write specs, implement, review, and run autonomous research. Works with Claude Code, Codex, and other skill-compati…

1.4kGitHub stars

SimpleEve/development-skills

Reusable agent skills for end-to-end software delivery, from requirements and implementation to review, testing, and release.

34GitHub stars

FlyFission/nuclear-grade-context-engineering

AI agents now operate with authority. Authority without discipline is how complex systems fail. Nuclear’s control loop, ported to AI-assisted software engineering.

33GitHub stars

dongshuyan/compass-skills

司南：个性化 AI 任务总控 Skills 系统 /COMPASS: Personal Alignment Skills OS for AI Agents

764GitHub stars

mxyhi/ok-skills

Curated AI coding agent skills and AGENTS.md playbooks for Codex, Claude Code, Cursor, OpenClaw, and other SKILL.md-compatible tools.

510GitHub stars

petrkindlmann/qa-skills

50 QA and test-automation skills for Claude Code, Codex, Cursor, and any Agent Skills Standard runtime.

253GitHub stars