skills-manager AGENTS.md

skills-manager AGENTS.md is an instructions file for Codex, OpenCode from Xaviw/skills-manager. It costs 1,171 tokens per session, scanned A, original, MIT.

Project instructions for skills-manager, a Node.js command-line tool that installs and maintains agent skills across projects.

In plain words
What is it for?
Adding, installing, listing, updating, and removing skills, then running its checks, tests, formatting, linting, type checks, and build.
Why use it?
They explain the repository's language, package manager, commands, structure, and coding conventions so changes fit the project.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/xaviw/skills-manager/agents-md
Clone the repo
git clone --depth 1 https://github.com/Xaviw/skills-manager

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skills-manager AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/xaviw/skills-manager/agents-md.svg)](https://agentmods.dev/instructions/xaviw/skills-manager/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/xaviw/skills-manager/agents-md"><img src="https://agentmods.dev/badge/instructions/xaviw/skills-manager/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 1,171 This file is loaded in full into every session.
When invoked 1,171 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01171 $0.01171
Opus 5 $0.00585 $0.00585
Sonnet 5 $0.00234 $0.00234
Haiku 4.5 $0.00117 $0.00117

Measured 5d ago against content hash f63e207dcaa8, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

skills-manager AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 120 lines

How it starts

The opening of the file, as written. The whole thing — 120 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

本文件用于为进入本仓库协作的 Agent 提供项目级约束。除非用户明确要求,否则默认使用中文交流与说明。

项目定位

skls-mgr 是一个 Node.js CLI,用于在本地统一维护 Agent Skills,并按需安装到不同项目中。

  • 运行时:Node.js >=22
  • 语言:TypeScript
  • 模块系统:ESM("type": "module"
  • 包管理器:pnpm

常用命令

pnpm dev -- list
pnpm dev -- add <source>
pnpm dev -- install
pnpm lint
pnpm format:check
pnpm check
pnpm check:all
pnpm test
pnpm build
pnpm prepublishOnly

补充说明:

  • 本地开发入口:node --import tsx src/cli.ts <command> [args]
  • pnpm check:基于 lint-staged 仅检查已暂存文件,供 pre-commit hook 使用
  • pnpm check:all:执行整仓库 lint + format:check + type-check
  • 发布前校验基线:pnpm prepublishOnly,等价于 pnpm check:all && pnpm test

目录结构

bin/              CLI 启动脚本
src/              核心源码
tests/            Vitest 测试
dist/             构建输出
eslint.config.mjs ESLint v9 flat config
.prettierrc.json  Prettier 配置
README.md         英文说明
README-CN.md      中文说明

src/ 中的主要文件:

  • cli.ts:CLI 入口与命令分发
  • add.ts / install.ts / list.ts / update.ts / remove.ts:命令实现
  • skills.ts / skill-lock.ts / source-parser.ts / git.ts:核心业务逻辑
  • filesystem.ts / paths.ts / base-dir.ts:文件系统与路径处理
  • i18n.ts / prompt-format.ts / constants.ts / types.ts:共享基础设施

编码约定

  • 保持 TypeScript 严格模式兼容,不要引入会破坏 pnpm type-check 的修改。
  • 源码采用 ESM 导入,仓库内源码导入路径保持 .js 后缀风格。
  • 延续现有风格:
    • 2 空格缩进
    • 单引号
    • 语句末尾分号
    • 多行对象、数组、参数列表保留尾随逗号
  • 代码风格由 ESLint v9 flat config + neostandard + Prettier 共同约束:
    • ESLint 负责代码质量与基础规范
    • Prettier 负责格式统一
    • ignore 规则默认与 .gitignore 对齐
  • 注释保持克制,仅在逻辑不直观时补充简短说明。
  • 除非用户明确要求,不要把 dist/ 作为主要修改目标;源码以 src/ 为准。

测试与验证

  • 涉及逻辑变更时,至少运行相关测试。
  • 若改动影响命令行为、类型或公共流程,优先运行:
pnpm check:all
pnpm test
  • 若只修改提交中的局部文件并需要验证 hook 行为,可运行:
pnpm check
  • 如果因为环境限制、依赖缺失或用户要求而未执行验证,需要在最终说明中明确指出。

提交与 Hook

  • 仓库已接入 simple-git-hooks
  • 当前 pre-commit hook 执行 pnpm check
  • pnpm check 使用 lint-staged 仅校验已暂存文件,不应把整仓库检查误写进提交钩子。

协作约束

  • 先阅读局部上下文,再修改代码,避免基于猜测重构。
  • 不要回退或覆盖用户已有的未授权变更。
  • 优先做最小必要修改,避免无关重排。
  • 发现工作区脏状态时,默认与现有修改共存,除非用户明确要求清理。
  • 新增文档或命令示例时,优先与 README.mdREADME-CN.md 保持一致;若用户明确要求不修改 README,则遵循用户要求。

Read the full file on GitHub · 120 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 120 lines · 1,171 tokens per session scan A f63e207dcaa8

Subscribe to this mod's changes

skills-manager AGENTS.md is an instructions file published in the GitHub repository Xaviw/skills-manager (5 stars, last pushed 14d ago), licensed MIT. It adds 1,171 tokens to every session, about $0.0059 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,182 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

spec-kit AGENTS.md

AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.

github/spec-kit · 7,104 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,469 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).

microsoft/vscode · 5,001 tokens