What is angular-theming?

A set of development rules for adding multiple themes to Angular applications, such as light, dark, branded, or customer-specific appearances. Angular is a framework for building web applications.

Use it when implementing or reviewing CSS design tokens, runtime theme switching, Angular Material version 17 or later themes, saved preferences, and WCAG contrast checks.

It helps keep colors centralized, switch themes without reloading the page, preserve user preferences, prevent incorrect colors during startup, and check text contrast for accessibility.

angular-theming — Skill by AgenticPawan

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/agenticpawan/fullstack-pilot/angular-theming

Any agent

npx skills add AgenticPawan/FullStack-Pilot --skill angular-theming

Clone the repo

git clone --depth 1 https://github.com/AgenticPawan/FullStack-Pilot

Made for: Claude Code, Codex.

Per session 67 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,921 The whole file, excluding the scripts and references it only reads on demand.

Security scan C 1 finding. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00067	$0.02921
Opus 5	$0.00034	$0.01460
Sonnet 5	$0.00013	$0.00584
Haiku 4.5	$0.00007	$0.00292

Measured yesterday against content hash 6bc89a42c916, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

angular-theming scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Hidden instructionshighPrompt injection

Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.

<!-- Version index: CSS custom properties (design tokens) all Angular versions (platform CSS feature) mat-core / mat.core-theme legacy mixins Angular Material <17 (pre-M3) mat.theme() / system-level tokens Angular Materi

plugins/pilot-angular/skills/angular-theming/SKILL.md · 346 lines

How it starts

The opening of the file, as written. The whole thing — 346 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Standard IDs

ID	Severity	What it checks
ATH-001	P1	Hardcoded hex/rgb colors in component SCSS instead of theme tokens
ATH-002	P1	No centralized theme-token partial — colors/mixins duplicated per component
ATH-003	P0	Theme switch reloads/re-bootstraps the app instead of toggling a class/attribute
ATH-004	P2	Legacy pre-M3 `mat-core`/`mat-theme` mixins used on a Material 17+ project
ATH-005	P1	Theme preference not persisted, or no flash-of-wrong-theme prevention
ATH-006	P0	Theme token change not validated against WCAG contrast ratios

Check A — Hardcoded colors vs. design tokens (ATH-001)

Detection

Grep component .scss files for raw hex (#[0-9a-fA-F]{3,8}) or rgb(/rgba( literals outside a single _tokens.scss/_theme.scss partial.
Flag any color literal that is not a reference to a CSS custom property (var(--...)) or an SCSS variable imported from the shared token file.
Confirm a :root or theme-class block defines the token set once; components should only consume tokens.

BAD — hardcoded hex scattered in component styles

// feature-card.component.scss
.feature-card {
  background: #ffffff;
  border: 1px solid #e0e0e0;
  color: #1a1a1a;

  &.is-active {
    background: #eef4ff;
    border-color: #3366ff;
  }
}

GOOD — component consumes centralized design tokens

// _tokens.scss (imported once into styles.scss)
:root {
  --color-surface: #ffffff;
  --color-border: #e0e0e0;
  --color-text: #1a1a1a;
  --color-surface-active: #eef4ff;
  --color-border-active: #3366ff;
}

:root[data-theme='dark'] {
  --color-surface: #1e1e1e;
  --color-border: #3a3a3a;
  --color-text: #f0f0f0;
  --color-surface-active: #1a2a4a;
  --color-border-active: #6699ff;
}

Read the full file on GitHub · 346 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 346 lines · 67 tokens per session scan C 6bc89a42c916

Subscribe to this mod's changes

angular-theming is a skill published in the GitHub repository AgenticPawan/FullStack-Pilot (2 stars, last pushed 1mo ago), licensed MIT. It adds 67 tokens to every session and 2,921 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

DevOps and cloud Frontend ai-coding-agent ai-coding-agents angular azure claude-code claude-code-marketplace

azure-mgmt-apicenter-dotnet

Azure API Center SDK for .NET. Centralized API inventory management with governance, versioning, and discovery. Use for creating API services, workspaces, APIs, versions, definitions, environments, deployments, and metadata schemas. Triggers: "API Center", "ApiCenterService", "ApiCenterWorkspace", "ApiCenterApi", "API…

microsoft/skills · 97 tokens

azure-mgmt-botservice-dotnet

Azure Resource Manager SDK for Bot Service in .NET. Management plane operations for creating and managing Azure Bot resources, channels (Teams, DirectLine, Slack), and connection settings. Triggers: "Bot Service", "BotResource", "Azure Bot", "DirectLine channel", "Teams channel", "bot management .NET", "create bot".

microsoft/skills · 78 tokens

azure-communication-chat-java

Build real-time chat applications with Azure Communication Services Chat Java SDK. Use when implementing chat threads, messaging, participants, read receipts, typing notifications, or real-time chat features.

microsoft/skills · 41 tokens

union-type-wrappers

Add typed getters and setters over BinaryData properties that represent TypeSpec union types in generated Java models. Use when generated classes expose BinaryData for union-typed fields and you need ergonomic, type-safe accessors instead.

Azure/azure-sdk-for-java · 49 tokens

refresh-arm-sdk-release

WORKFLOW SKILL — Prepares Azure.ResourceManager SDK refresh pull requests in azure-sdk-for-net. WHEN: "prepare sdk refresh", "refresh Azure.ResourceManager package", "update ARM SDK from autorest tag", "refresh changelog dependencies". INVOKES: git and GitHub pull request tools for branch, commit, push, and PR…

Azure/azure-sdk-for-net · 91 tokens

azsdk-common-pipeline-analysis

Analyze Azure SDK CI/CD pipeline failures into a structured diagnosis, and define the required output format. Load this skill before calling azsdkanalyzepipeline, which returns raw failure data that this skill interprets and formats. USE FOR: "pipeline failed", "build failure", "CI check failing", "tests failing in…

Azure/azure-sdk-for-net · 192 tokens

angular-theming