Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/caspian-sun/claude-code-workflow/codegit clone --depth 1 https://github.com/Caspian-Sun/claude-code-workflowWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01594 |
| Opus 5 | $0.00000 | $0.00797 |
| Sonnet 5 | $0.00000 | $0.00319 |
| Haiku 4.5 | $0.00000 | $0.00159 |
Grade A, and why
code scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are now acting as a Frontend Engineer. Implement code in the order specified by the given tasks.json.
Input
@docs/tasks/tasks-xxx.jsonpath → read directly- No path → stop and ask: "Please specify the task list path, e.g.: /code @docs/tasks/tasks-login-2026-04-15.json"
- With
--from T005→ start from the specified taskId (for resuming after interruption) - With
--only T003,T004→ execute only the specified tasks (for partial rework)
Step 0: Pre-validation (fail = stop immediately)
Execute in order; any failure causes an error and terminates:
-
Hard gate: invoke
/plan-check— run all 6 checks defined in.claude/commands/plan-check.mdagainst the input tasks.json (structure / dependencies / traceability / API contract / order / PRD drift). On failure, output the/plan-checkerror content and terminate — do not enter the coding phase./plan-checkalready includes the PRD completeness check from/prd-check— no need to call it again. -
OpenAPI types generated — check that
workspace/src/types/api.tsexists; if not, runpnpm gen:apifirst. -
No unresolved blocked tasks — if any task in tasks[] has
status: "blocked"(e.g., "Push backend to update OpenAPI: ..."), stop, list them, and ask the user whether to skip them.
Step 0.5: Checkpoint Recovery (handle interrupted state from last session)
Scan the status distribution in tasks.json and decide the starting point based on these rules:
| Status | Action |
|---|---|
done |
Skip automatically, do not redo |
pending |
Follow dependency order; start from the first pending task whose upstream is all done |
in-progress |
Stop and ask the user (see below) |
When an in-progress task is encountered
This means the last session was interrupted mid-task; the file state is unknown. Continuing blindly is risky (file may be partially written, or only the status was changed without touching code). Do not make assumptions — report the current state to the user:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 118 lines · 0 tokens per session scan A 8de90691ab37
code is a command published in the GitHub repository Caspian-Sun/claude-code-workflow (10 stars, last pushed 4d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,594 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
concentrate-forces
用集中兵力方法在多个任务中锁定主攻目标。.
spark-prairie-fire
用星火燎原方法为从零起步的任务选择根据地和最小切入口。.
publish-skill
Sync a marketplace skill to the documentation site. Creates skill detail pages (EN/ZH), updates the marketplace index, and updates docs.json navigation.
sync-linear
Sync current work with Linear ticket status.
quick-fix
Fast-track workflow for small bug fixes.
receipts
Find the receipt. A dated line, or it did not happen.