SpecFusion — security grade SAFE, quality 65/100

Security audit verdict: SAFE · quality 65/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by wxkingstar · Codex Skill · ★ 66

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is SpecFusion safe to install? View the security audit →

About SpecFusion

SpecFusion 🌐 官网:specfusion.kingstar.xin 在 Claude Code 里直接搜企业微信、飞书、钉钉、淘宝开放平台、小红书、抖音电商开放平台、微信小程序、微信小店、拼多多开放平台、有赞开放平台、微信支付、支付宝开放平台、京东商家开放平台、SHEIN开放平台、得物开放平台、火山引擎、阿里云百炼、泛微 e-teams 开放平台、北森 iTalent 开放平台的 API 文档。 不用切浏览器,不用翻文档站——输入问题,拿到接口参数,继续写代码。 为什么用 SpecFusion 不离开终端 — 写代码时直接问,Claude 帮你查文档、给出接口参数和示例 中文搜索准确 — jieba 分词 + FTS5 全文索引,、、 都能搜到 63,300+ 篇文档 — 企业微信 2,690 篇 + 飞书 4,160 篇 + 钉钉 5,020 篇 + 淘宝 6,770 篇 + 小红书 100 篇 + 抖音电商 1,330 篇 + 微信小程序 470 篇 + 微信小店 550 篇 + 拼多多 280 篇 + 有赞 1,240 篇 + 微信支付 580 篇 + 支付宝 600 篇 + 京东 6,100 篇 + SHEIN 210 篇 + 得物 260 篇 + 火山引擎ECS 137 篇 + 火山引擎 29,930 篇 + 阿里云百炼 1,330 篇 + 泛微 500 篇 + 北森 1,050 篇,接口参数、错误码、事件订阅全覆盖 零配置 — 云端服务已部署好,安装 Skill 后即可使用,无需自建后端 安装 方式一:skills CLI(推荐) 自动检测已安装的 Agent,一键全局安装到 Claude Code、Codex、Gemini CLI 等: ⚠️ 必须加 参数! 不加 会安装到当前目录,只在该目录下生效。加 安装到 ,所有项目都能用。 仅安装到 Claude Code: 也可以按平台名搜索安装: bash npx skills find "feishu" # 搜索飞书相关技能 npx skills find "taobao" # 搜索淘宝相关技能 npx skills find "wecom" # 搜索企业微信相关技能 npx skills find "dingtalk" # 搜索钉钉相关技能 npx skills find "alipay" # 搜索支付宝相关技能 npx ski

ai-agentsalipayapi-documentationchinese-apiclaude-codecursordeepseek-harnessdingtalkdouyindsh-plugin

Quick Facts

Stars66
Forks14
LanguageTypeScript
CategoryCodex Skill
LicenseMIT
Quality Score65.1592780403771/100
Open Issues1
Last Updated2026-09-15
Created2026-02-12
Platformsclaude-code, cli, codex, gemini, node
Est. Tokens~16k

SpecFusion alternative? Top 6 similar tools

Looking for a SpecFusion alternative? If you're comparing SpecFusion with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • golembot by 0xranx · ⭐ 322

    Any Agent × Any Provider × Anywhere. Connect Cursor, Claude Code, OpenCode, or Codex to Slack, Telegram, Disco

  • mini-program-engineering-skill-suite by NocodeMrLi · ⭐ 82

    Mini Program Engineering Skill Suite is an Agent Skill suite for evidence‑first mini‑program development. It h

  • agent-skills by jdrhyne · ⭐ 241

    A collection of AI agent skills for Clawdbot, Claude Code, Codex

  • engramory by tinqiao-oss · ⭐ 191

    A portable memory protocol for AI agents — load it as standing rules; a curation discipline + reference spec +

  • agent-skills by youdotcom-oss · ⭐ 82

    You.com skills and plugins for web search, content extraction, research, finance, and integration discovery, h

  • opendray by Opendray · ⭐ 66

    Self-hosted gateway for Claude Code, Codex, Antigravity, Grok Build, OpenCode. Run AI coding agents on your ow

More Codex Skill Tools

Explore other popular codex skill tools:

View all Codex Skill tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is SpecFusion?

SpecFusion is 在 DeepSeek Harness / Claude Code / Cursor / Codex / Gemini CLI 里直接搜索 20 个中国开放平台的 65,600+ 篇 API 文档;零配置,支持 Skill 与 DSH 原生插件。. It is categorized as a Codex Skill with 66 GitHub stars.

What programming language is SpecFusion written in?

SpecFusion is primarily written in TypeScript. It covers topics such as ai-agents, alipay, api-documentation.

How do I install or use SpecFusion?

You can find installation instructions and usage details in the SpecFusion GitHub repository at github.com/wxkingstar/SpecFusion. The project has 66 stars and 14 forks, indicating an active community.

What license does SpecFusion use?

SpecFusion is released under the MIT license, making it free to use and modify according to the license terms.

What are the best alternatives to SpecFusion?

The top alternatives to SpecFusion on Agent Skills Hub include golembot, mini-program-engineering-skill-suite, agent-skills. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Codex Skill tools