Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/alibaba/skill-up/agents-mdgit clone --depth 1 https://github.com/alibaba/skill-upWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.02379 | $0.02379 |
| Opus 5 | $0.01189 | $0.01189 |
| Sonnet 5 | $0.00476 | $0.00476 |
| Haiku 4.5 | $0.00238 | $0.00238 |
Grade A, and why
skill-up AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 225 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
This file follows the agents.md convention and provides machine-readable guidance for AI coding agents (Qoder, Claude Code, Codex, Cursor, etc.) working in this repository. For a human-oriented overview, see
README.mdandCONTRIBUTING.md.
Project overview
skill-up is a CLI evaluation framework for Agent Skill developers, written
in Go. It loads declarative eval configs (evals/eval.yaml + cases/*.yaml),
provisions an isolated workspace, invokes an Agent Engine (Qoder CLI / Claude
Code / Codex), runs Judges (rule_based / script / agent_judge), and emits
structured reports (JSON / JUnit / HTML / Anthropic grading.json).
- Module path:
github.com/alibaba/skill-up - Entry point:
cmd/skill-up/main.go - Go version: 1.25+ (see
go.mod) - License: Apache-2.0
Setup commands
# Fetch dependencies (only needed after cloning or go.mod changes)
go mod download
# Install git hooks (pre-commit + commit-msg). Idempotent; auto-runs on first build.
make hooks
# Install pinned lint tools into .tools/bin/ (golangci-lint v2.11.4, revive v1.10.0)
make lint-tools
If you are in mainland China and go install is slow, set
GOPROXY=https://goproxy.cn,direct before running the commands above.
On Windows, make is unavailable by default; use the PowerShell equivalents
in scripts/windows/ (hooks.ps1, lint-tools.ps1, verify.ps1). See the
Windows support guide for supported features and
known limitations.
Build & run
# Standard build with version injection via ldflags -> bin/skill-up
make build
# Fast iteration build (no version injection)
go build -o bin/skill-up ./cmd/skill-up
# Run the CLI
./bin/skill-up --help
./bin/skill-up run ./evals/eval.yaml
./bin/skill-up validate ./evals/eval.yaml
Testing
# Unit tests (race detector enabled — always use this)
make test
# equivalent: go test -race ./...
go test -race ./...
# GitHub Action adapter tests (requires Python 3)
make test-action
# Run a single test
go test -race -run TestFoo ./internal/config/
# End-to-end tests (build-tag gated, slower)
make e2e
# equivalent: go test -tags e2e -v ./e2e
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 225 lines · 2,379 tokens per session scan A eae4818d1f86
skill-up AGENTS.md is an instructions file published in the GitHub repository alibaba/skill-up (757 stars, last pushed 6d ago), licensed Apache-2.0. It adds 2,379 tokens to every session, about $0.0119 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
ai-toolkit AGENTS.md
Instructions for pipefy/ai-toolkit, covering repository guidelines, documentation map, project structure, import namespace migration: pipefysdk → pipefy and src/pipefysdk/init.py (transitional shim).
superpowers-reasonix AGENTS.md
Instructions for christopherarter/superpowers-reasonix, covering project guidance, skills — stop. load a skill before you act, red flags — these thoughts mean stop. you are rationalizing and priority.
ai-mind AGENTS.md
Instructions for HWYD/ai-mind, covering agents, version spec workspace continuity (mandatory), 项目定位, 事实来源优先级 and 开始大改前先读什么.
finding-unknowns-skills CLAUDE.md
Claude Code instructions for Neeeophytee/finding-unknowns-skills, covering repo notes, what ships, and the gate that decides, version lives in three manifests — move them together, files that must be edited together and shipped guidance is not this file.
vvvv-skills CLAUDE.md
Claude Code instructions for tebjan/vvvv-skills, covering vvvv gamma, when to patch vs code, core concepts, live environment and important conventions.
pi AGENTS.md
AGENTS.md instructions for counterposition/pi, covering agents.md, commands, pattern: pnpm --filter @counterposition/pi-web-search run, single test file and single test by name.