skill2 AGENTS.md

skill2 AGENTS.md is an instructions file for Codex, OpenCode from blackblue-labs/skill2. It costs 348 tokens per session, scanned A, original, MIT.

Repository instructions for Skill2, a library and command-line tool for creating, checking, testing, packaging, and reporting on coding-agent skills.

In plain words
What is it for?
Use them when developing or testing skills, running checks, creating packages, using test fixtures, and preparing a release.
Why use it?
They define which files are authoritative and how to verify changes without exposing prompts, transcripts, or local paths.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/blackblue-labs/skill2/agents-md
Clone the repo
git clone --depth 1 https://github.com/blackblue-labs/skill2

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skill2 AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/blackblue-labs/skill2/agents-md.svg)](https://agentmods.dev/instructions/blackblue-labs/skill2/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/blackblue-labs/skill2/agents-md"><img src="https://agentmods.dev/badge/instructions/blackblue-labs/skill2/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 348 This file is loaded in full into every session.
When invoked 348 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00348 $0.00348
Opus 5 $0.00174 $0.00174
Sonnet 5 $0.00070 $0.00070
Haiku 4.5 $0.00035 $0.00035

Measured 3d ago against content hash a12dca6c32d9, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

skill2 AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 45 lines

What it actually says

AGENTS.md

Product

Skill2 = Superpowers-style Skill Library。五个 Skills 管理其他 Skill Library。Skills 是产品;Python CLI 是确定性脚手架。

Invariants

  • skills/<name>/SKILL.md 单一行为来源。
  • description 写触发,不写流程摘要。
  • Agent 判断;CLI 做 scan/test/package/usage/report。
  • Usage 本地;不输出 prompt、transcript、绝对路径。
  • Suggest/Visualize 只读。
  • Package 默认 native;artifact/release 按需。
  • Package 执行远端动作前列出目标与写入;用户明确要求该动作即授权。
  • Skill2 必须符合自己教的规则。

Verify

PYTHONPATH=src uv run python -m unittest discover -s tests
uv run ruff check .
uv run skill2 lint skills
uv run skill2 package-check .

真实测试:

skill2 test skills/<name> --cases cases/<name>.yaml --trials 1 --baseline
skill2 test skills/skill2-create --cases cases/skill2-routing.yaml --pack --trials 1

长跑必须用 checkpoint/resume/early-stop。不要重跑已完成 trial。

Fixtures

  • 真实 dogfood:~/workspace/my-agent-config/skills
  • Test fixtures:tests/fixtures/
  • 运行证据:.skill2/;不提交。

Release

package-checkpublish-check、clean install。tag、push、GitHub Release、PyPI upload 前再次获取用户确认。

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 45 lines · 348 tokens per session scan A a12dca6c32d9

Subscribe to this mod's changes

skill2 AGENTS.md is an instructions file published in the GitHub repository blackblue-labs/skill2 (33 stars, last pushed 20d ago), licensed MIT. It adds 348 tokens to every session, about $0.0017 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.