everything-claude-code-zh AGENTS.md

everything-claude-code-zh AGENTS.md is an instructions file for Codex, OpenCode from xu-xiang/everything-claude-code-zh. It costs 1,836 tokens per session, scanned A, original, MIT.

Project instructions for Everything Claude Code, a coding-agent package with specialized agents, skills, commands, and automated workflows. It describes practices such as test-driven development, which means writing tests before implementation.

In plain words
What is it for?
Use it when working in that package to choose the right specialist, follow its development workflow, run verification checks, or maintain its documentation and code maps.
Why use it?
It gives agents consistent rules for planning, testing, security reviews, code reviews, builds, and documentation across the project.

Instructions file for CodexOpenCode

About the project

everything-claude-code-zh is a Chinese translation of a collection of configurations for Claude Code and other AI coding agents. It provides agents, skills, hooks, commands, rules, and MCP configurations intended to support development workflows such as memory persistence, security scanning, evaluation, and research-first work. The catalogue includes commands, skills, agents, instructions, and a plugin from this configuration set.

xu-xiang/everything-claude-code-zh · 1,929 stars · on GitHub · oneskill.one

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/xu-xiang/everything-claude-code-zh/agents-md
Clone the repo
git clone --depth 1 https://github.com/xu-xiang/everything-claude-code-zh

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for everything-claude-code-zh AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/xu-xiang/everything-claude-code-zh/agents-md.svg)](https://agentmods.dev/instructions/xu-xiang/everything-claude-code-zh/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/xu-xiang/everything-claude-code-zh/agents-md"><img src="https://agentmods.dev/badge/instructions/xu-xiang/everything-claude-code-zh/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 1,836 This file is loaded in full into every session.
When invoked 1,836 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01836 $0.01836
Opus 5 $0.00918 $0.00918
Sonnet 5 $0.00367 $0.00367
Haiku 4.5 $0.00184 $0.00184

Measured 6d ago against content hash 776f6a7a2ec8, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

everything-claude-code-zh AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 137 lines

How it starts

The opening of the file, as written. The whole thing — 137 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Everything Claude Code (ECC) — 智能体(Agent)指令

这是一个生产级 AI 编码插件,为软件开发提供 13 个专业智能体(Agent)、50+ 个技能(Skill)、33 个命令(Command)以及自动化的钩子(Hook)工作流(Workflow)。

核心原则

  1. 智能体优先(Agent-First) — 将领域任务委托给专业智能体处理
  2. 测试驱动(Test-Driven) — 先写测试后实现,要求 80% 以上的覆盖率
  3. 安全第一(Security-First) — 绝不在安全性上妥协;验证所有输入
  4. 不可变性(Immutability) — 始终创建新对象,绝不修改现有对象
  5. 先规划后执行(Plan Before Execute) — 在编写代码前先规划复杂功能的实现

可用智能体(Available Agents)

智能体(Agent) 用途 何时使用
planner 实现规划 复杂功能、重构
architect 系统设计与可扩展性 架构决策
tdd-guide 测试驱动开发 新功能、错误修复
code-reviewer 代码质量与可维护性 编写/修改代码后
security-reviewer 漏洞检测 提交前、敏感代码
build-error-resolver 修复构建/类型错误 构建失败时
e2e-runner 端到端 Playwright 测试 关键用户流程
refactor-cleaner 死代码清理 代码维护
doc-updater 文档与代码映射(codemaps) 更新文档
go-reviewer Go 代码审查 Go 项目
go-build-resolver Go 构建错误 Go 构建失败
database-reviewer PostgreSQL/Supabase 专家 模式设计、查询优化
python-reviewer Python 代码审查 Python 项目

智能体编排(Agent Orchestration)

无需用户提示,主动使用智能体:

  • 复杂功能请求 → planner
  • 刚刚编写/修改的代码 → code-reviewer
  • 错误修复或新功能 → tdd-guide
  • 架构决策 → architect
  • 安全敏感代码 → security-reviewer

对于独立操作使用并行执行 — 同时启动多个智能体。

安全指南(Security Guidelines)

在进行任何提交前:

  • 无硬编码密钥(API 密钥、密码、令牌)
  • 所有用户输入均已验证
  • 防止 SQL 注入(参数化查询)
  • 防止 XSS(清理 HTML)
  • 已启用 CSRF 保护
  • 身份验证/授权已验证
  • 所有端点均设有频率限制(Rate limiting)
  • 错误消息不会泄露敏感数据

密钥管理(Secret management): 绝不硬编码密钥。使用环境变量或密钥管理器。在启动时验证所需密钥。立即轮换任何暴露的密钥。

如果发现安全问题: 停止(STOP) → 使用 security-reviewer 智能体 → 修复关键(CRITICAL)问题 → 轮换暴露的密钥 → 检查代码库是否存在类似问题。

编码风格(Coding Style)

不可变性 (关键): 始终创建新对象,绝不直接修改。返回应用更改后的新副本。

文件组织: 倾向于多个小文件而非少数大文件。通常为 200-400 行,最多 800 行。按功能/领域组织,而非按类型。高内聚,低耦合。

错误处理: 在每个层级处理错误。在 UI 代码中提供用户友好的消息。在服务端记录详细的上下文(Context)。绝不默默吞掉错误。

输入验证: 在系统边界验证所有用户输入。使用基于模式(schema-based)的验证。出现错误时快速失败并提供清晰的消息。绝不信任外部数据。

代码质量自检清单:

  • 函数简短(<50 行),文件集中(<800 行)
  • 无深度嵌套(>4 层)
  • 正确的错误处理,无硬编码值
  • 易读、命名规范的标识符

测试要求(Testing Requirements)

最低覆盖率:80%

Read the full file on GitHub · 137 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 137 lines · 1,836 tokens per session scan A 776f6a7a2ec8

Subscribe to this mod's changes

everything-claude-code-zh AGENTS.md is an instructions file published in the GitHub repository xu-xiang/everything-claude-code-zh (1,929 stars, last pushed 6mo ago), licensed MIT. It adds 1,836 tokens to every session, about $0.0092 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.