web-dev-skills: Instructions file for Claude Code

AGENTS.md

web-dev-skills AGENTS.md is an instructions file for Claude Code, Codex, OpenCode from timzaak/web-dev-skills. It costs 1,195 tokens per session, scanned A, original, Apache-2.0.

Repository instructions for developing and maintaining AI engineering workflows in the timzaak/web-dev-skills project.

In plain words
What is it for?
Use them when creating or changing skills, agents, protocols, guides, scripts, task outputs, or recovery and acceptance checks in that project.
Why use it?
They clarify which folders own orchestration, agents, shared rules, guides, scripts, state, outputs, and review responsibilities.

Instructions file for Claude CodeCodexOpenCode

Written for Claude Code and Codex and OpenCode: ${CLAUDE_PLUGIN_ROOT} variable, but also the file is AGENTS.md. Also seen: mentions .claude-plugin; mentions Claude Code.

This is timzaak/web-dev-skills's own configuration. It tells Claude Code, Codex and OpenCode how to work on web-dev-skills itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything web-dev-skills configures →

Runs only inside a plugin — its command needs a path that Claude Code sets for a plugin’s own hooks and for nothing else, and the catalogue could not identify which plugin ships it.

Reuse

Borrowing it

Nothing to install: this file belongs to timzaak/web-dev-skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/timzaak/web-dev-skills/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/timzaak/web-dev-skills

Made for: Claude Code, Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for web-dev-skills AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/timzaak/web-dev-skills/agents-md/github.svg)](https://agentmods.dev/instructions/timzaak/web-dev-skills/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/timzaak/web-dev-skills/agents-md"><img src="https://agentmods.dev/badge/instructions/timzaak/web-dev-skills/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for web-dev-skills AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/timzaak/web-dev-skills/agents-md"><img src="https://agentmods.dev/badge/instructions/timzaak/web-dev-skills/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,195 This file is loaded in full into every session.
When invoked 1,195 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01195 $0.01195
Opus 5.5 $0.00478 $0.00478
Sonnet 5.5 $0.00239 $0.00239
Haiku 4.5 $0.00120 $0.00120

Measured 6d ago against content hash baaa2490a109, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

web-dev-skills AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 54 lines

How it starts

The opening of the file, as written. The whole thing — 54 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skill 编写规范

本仓库用于开发 Claude Code plugin t-tools。在这里修改的是可触发、可执行、可恢复、可验收的 AI 工程工作流,不是目标项目的业务代码。

规则归属

  • skills/ 负责阶段编排、前置校验、状态推进、产物写入和失败恢复。
  • agents/ 负责单一角色的具体执行或只读验收,不承担跨阶段编排。
  • protocols/ 是跨 skill 和 agent 的共享契约源;状态结构、输出结构、评分规则和调度规则只在这里定义。
  • guides/ 承载工程规范和领域实践;skill 只说明何时读取,不复制大段内容。
  • scripts/ 承载需要重复执行或必须保持确定性的操作。
  • 同一规则只维护一份。先确定规则归属,再通过语义路径引用它。

编写 Skill

  • 一个 skill 只负责一个边界清晰的阶段或能力。不要把相邻阶段的实现、测试和验收揉进同一个入口。
  • name 使用稳定的 kebab-case;description 同时说明“做什么”和“何时使用”,并与容易混淆的相邻 skill 明确消歧。
  • 只写会改变 AI 决策或执行结果的内容。删除通用知识、仓库文件系统已经显而易见的信息和没有实际约束力的说明。
  • 根据风险控制自由度:开放性工作给出目标和判断标准;脆弱、可破坏或必须一致的操作才规定固定顺序、命令或脚本。
  • SKILL.md 保留入口所需的目标、适用范围、核心流程、门禁、失败处理和资源路由。详细契约放入 protocols/,工程知识放入 guides/,可执行逻辑放入 scripts/。
  • 引用必须说明何时读取或执行。避免深层引用链,也不要默认加载当前任务不需要的所有参考文件。
  • 涉及阶段产物时,明确输入来源、输出位置、成功条件和下游消费条件。
  • 涉及持久化状态时,明确状态转换、可恢复点、重复执行行为以及失败后由谁继续。
  • 需要用户裁决的缺口必须暴露给用户;不要把未确认假设写入产物后继续推进。
  • 面向目标项目引用插件内部文件时使用 ${CLAUDE_PLUGIN_ROOT},不要依赖插件安装位置或当前工作目录。

编排与角色边界

  • Skill 负责决定下一步、选择 agent、传递必要上下文并汇总结果;不要在 skill 和 agent 中重复实现同一判断逻辑。
  • Dev agent 可以实现;test agent 专注测试;accept agent 默认只读验收并输出可复核证据。
  • Agent 输入、输出或评分被多个入口使用时,抽取为 protocols/ 契约,不在各调用方分别描述。
  • t-prd-check、t-design-check、t-task-check 是可选质量检查。可以在高风险或 AI 输出不稳定时推荐,但不得悄悄变成主链路的强制前置条件。
  • Accept 是实现后的验收收口。增加前置检查不能替代或弱化 accept 的职责。
  • 纯技术且不改变业务逻辑、产品规则、用户流程或验收目标的方案,才可以绕过 PRD 直接从技术预研进入设计。

修改前后检查

  • 修改 skill 前先搜索它引用的 protocol、guide、agent、script,以及引用该 skill 或其产物的下游入口。
  • 修改共享状态、输出、评分或调度规则时,更新对应 protocols/,并检查所有消费者;不要只修当前调用方。
  • 修改目标项目运行时文件结构时,先检查 ${CLAUDE_PLUGIN_ROOT}/protocols/runtime-boundaries.md 和 ${CLAUDE_PLUGIN_ROOT}/skills/t-init/ 的相关模板。
  • 修改命令调用、skill 名称、公开工作流或安装方式时,同步更新 README.md 和 README.en.md。
  • 修改插件暴露能力或依赖时,同步检查 .claude-plugin/plugin.json。
  • 中文文档是主说明;存在对应英文文档时保持语义一致。

验证

  • 把 skill 文本视为行为代码验证,不以 Markdown 可读性代替行为正确性。
  • 按变更风险验证正常路径、前置条件缺失、下游门禁、失败恢复和重复执行;只验证受影响的场景,不编造无关测试。
  • 新增或修改脚本时直接运行脚本,并覆盖本次变更涉及的错误路径。
  • Markdown 链接使用 ${CLAUDE_PLUGIN_ROOT}/scripts/check-markdown-links.py 检查。
  • playwright-unified-logger 已迁移为独立仓库,本仓库只按 npm 包名引用它,不维护其源码。
  • 发布仍由 ${CLAUDE_PLUGIN_ROOT}/scripts/release.py 和 /t-tools:t-release 约束:语义版本不带 v,git tag 使用 v 前缀。
  • 仓库可能有用户未提交改动;不要回滚或覆盖与当前任务无关的内容。

Read the full file on GitHub · 54 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago Changed · +4 tokens per session baaa2490a109
  2. 1mo ago First seen · 54 lines · 1,191 tokens per session scan A 208c096e2b80

Subscribe to this mod's changes

web-dev-skills AGENTS.md is an instructions file published in the GitHub repository timzaak/web-dev-skills (97 stars, last pushed 2d ago), licensed Apache-2.0. It adds 1,195 tokens to every session, about $0.0048 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,581 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,731 tokens

deepseek-harness AGENTS.md

AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.

deepseek-ai/deepseek-harness · 4,261 tokens