agent-skills AGENTS.md

A repository guide for developing and installing agent skills. It explains the folder layout, required files, install commands, and symlink-based local development.

In plain words
What is it for?
It helps maintain skills, install all or one skill, and make local edits take effect immediately through a symbolic link.
Why use it?
It gives contributors one place to learn how skills are structured, installed, and tested during development.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/mblode/agent-skills/agents-md
Clone the repo
git clone --depth 1 https://github.com/mblode/agent-skills

Made for: Codex, OpenCode.

Per session 1,016 This file is loaded in full into every session.
When invoked 1,016 The same file — it is already loaded in full.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01016 $0.01016
Opus 5 $0.00508 $0.00508
Sonnet 5 $0.00203 $0.00203
Haiku 4.5 $0.00102 $0.00102

Measured 3d ago against content hash 7f2a0a300e72, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

agent-skills AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Enumerates other installed skillsmediumAgent snooping

Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.

ls ~/.claude/skills/pr-reviewer/
AGENTS.md · 93 lines

How it starts

The opening of the file, as written. The whole thing — 93 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository Guidelines

Project Structure & Module Organization

  • skills/ holds each skill in its own folder (kebab-case). Each skill has a SKILL.md file with YAML frontmatter (name, description) and Markdown guidance.
  • Some skills include reference files alongside the SKILL.md (e.g. skills/agents-md/references/).
  • Top-level files: README.md (overview and install docs).

Install / Development Commands

Primary install (recommended)

npx skills add mblode/agent-skills

Installs all skills into ~/.claude/skills/ via the skills CLI. Works with Claude Code, Codex, Cursor, and OpenCode.

Install a single skill:

npx skills add mblode/agent-skills -g --skill pr-reviewer -y

Local dev: symlink hot-swap

For editing skills in place without reinstalling:

# One-time: symlink the repo's skills folder into the deploy target
ln -s /path/to/agent-skills/skills/<name> ~/.claude/skills/<name>

Changes to the repo files take effect immediately, with no re-install needed. Unlink with unlink ~/.claude/skills/<name> when done.

The deploy chain: skills add writes the content once to ~/.agents/skills/<name>/. Agents that read that canonical path directly, which is every agent whose skillsDir is .agents/skills (Codex, Cursor, and most others), need nothing further; the CLI calls them universal and installs there rather than into ~/.codex/skills or ~/.cursor/skills. Claude Code reads .claude/skills, so it alone gets a relative symlink, ~/.claude/skills/<name> -> ../../.agents/skills/<name>. Editing this repo changes none of them until you reinstall or symlink the folder directly.

Smoke-test

Confirm files landed correctly after install:

ls ~/.claude/skills/pr-reviewer/
# Expected: SKILL.md (plus any references/ folder)

For a full install smoke-check:

ls ~/.claude/skills/ | sort

The list should match the folders in skills/ here.

Coding Style & Naming Conventions

Read the full file on GitHub · 93 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 93 lines · 1,016 tokens per session scan B 7f2a0a300e72

Subscribe to this mod's changes

agent-skills AGENTS.md is an instructions file published in the GitHub repository mblode/agent-skills (95 stars, last pushed 3d ago), licensed MIT. It adds 1,016 tokens to every session, about $0.0051 per session on Opus 5. A static security scan graded it B with 1 finding (enumerates other installed skills). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

spec-kit AGENTS.md

AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.

github/spec-kit · 7,104 tokens

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,182 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,345 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).

microsoft/vscode · 5,001 tokens

next.js AGENTS.md

Instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens