boss:dev

boss:dev is a command for Claude Code from echoVic/boss-skill. It costs 31 tokens per session (710 once invoked), scanned A, original, MIT.

A development workflow that assigns frontend and backend coding work from an existing task or architecture plan. It follows TDD, or test-driven development: write a failing test, implement the smallest fix, then refactor.

In plain words
What is it for?
Use it to add features to an existing project, implement frontend or backend tasks, run work in safe parallel groups, and produce unit and end-to-end tests.
Why use it?
It gives implementation a defined sequence and checks types, lint rules, and tests as work progresses, helping catch problems before the later quality and deployment steps.

Command for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the boss plugin — 39 skills, 10 commands, 9 agents, 8 hooks shipped together

Good fit Use it to add features to an existing project, implement frontend or backend tasks, run work in safe parallel groups, and produce unit and end-to-end tests.

Compare 6 commands from other repositories ↓
Install with agentmods
npx agentmods add commands/echovic/boss-skill/boss-dev
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/echoVic/boss-skill

Made for: Claude Code.

Or install boss, the plugin that ships this one along with the rest of its 39 skills, 10 commands, 9 agents, 8 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for boss:dev

README.md
[![agentmods](https://agentmods.dev/badge/commands/echovic/boss-skill/boss-dev/github.svg)](https://agentmods.dev/commands/echovic/boss-skill/boss-dev)
Your own site
<a href="https://agentmods.dev/commands/echovic/boss-skill/boss-dev"><img src="https://agentmods.dev/badge/commands/echovic/boss-skill/boss-dev/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for boss:dev

Your own site · 80×15
<a href="https://agentmods.dev/commands/echovic/boss-skill/boss-dev"><img src="https://agentmods.dev/badge/commands/echovic/boss-skill/boss-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 31 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 710 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00031 $0.00710
Opus 5.5 $0.00012 $0.00284
Sonnet 5.5 $0.00006 $0.00142
Haiku 4.5 $0.00003 $0.00071

Measured today against content hash 1c45972c7a69, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

boss:dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skill/commands/boss-dev.md · 58 lines

What it actually says

/boss:dev — 开发(Frontend + Backend)

/boss:dev 是专家小队的开发入口。派发 Frontend 和/或 Backend Agent 实现代码。

默认行为:开发完成后自动续跑 QA → Ship,除非用户主动叫停。

适合 / 不适合

适合 /boss:dev 不适合
已有任务/架构,直接开始写代码 需求还不清晰(用 /boss:pm)
给已有项目加新功能 只想做测试(用 /boss:qa)

前置输入

  • 优先读取 .boss/<slug>/tasks.md + .boss/<slug>/architecture.md
  • 若不存在,可用 prd.md 或用户直接描述的需求替代

执行步骤

  1. Feature slug 归一化:确定 feature slug。
  2. 读取输入:优先读 tasks.md + architecture.md,其次 prd.md,最后用户需求。
  3. 写集冲突检测:若有 tasks.md,检查任务间写集冲突,确定并行安全组。
  4. 风险确认:若 Blast Radius 命中强制确认 trigger,向用户确认后再派发。
  5. 派发开发 Agent:
    • 有前端任务 → 读取 agents/boss-frontend.md,派发 Frontend Agent
    • 有后端任务 → 读取 agents/boss-backend.md,派发 Backend Agent
    • 前后端无写集冲突 → 可并行派发
    • 开发 Agent 必须遵循 TDD:先写失败测试(RED)→ 最小实现(GREEN)→ 重构(REFACTOR)
  6. Wave 边界校验:每个 Wave 完成后运行类型检查、lint、测试,不通过则修复。
  7. 自检:对照 Frontend/Backend 的硬性要求检查:
    • TDD 验证清单全部勾选(RED 已验证、最小实现、全绿)
    • 测试必须编写、覆盖率达标
    • E2E 测试已编写
  8. 续跑:读取 references/continuation-chain.md,按链执行下一步(qa),除非用户叫停。

用法

/boss:dev user-auth
/boss:dev 给现有项目加支付功能
/boss:dev --stop-after dev

选项

参数 说明
--stop-after <环节> 跑到指定环节后停(如 --stop-after dev 只开发不测试)
--lang <zh|en> 产物语言(默认 zh)
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 58 lines · 31 tokens per session scan A 1c45972c7a69

Subscribe to this mod's changes

boss:dev is a command published in the GitHub repository echoVic/boss-skill (544 stars, last pushed yesterday), licensed MIT. It adds 31 tokens to every session and 710 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-28.