ai-blueprint: Skill for Claude Code

.agents/skills/doctor/SKILL.md

doctor is a skill for Claude Code, Codex from aiblueprinthq/ai-blueprint. It costs 63 tokens per session (3,584 once invoked), scanned A, original, MIT.

A read-only health check for a Blueprint project, a workflow that organizes setup, project context, planning, and development tasks.

In plain words
What is it for?
Use it to check whether Blueprint is installed and ready, inspect planning and onboarding health, and get a repair order.
Why use it?
It finds missing files, outdated context, setup drift, and workflow problems without changing the project.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions Claude Code.

This is aiblueprinthq/ai-blueprint's own configuration. It tells Claude Code and Codex how to work on ai-blueprint itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything ai-blueprint configures →

Reuse

Borrowing it

Nothing to install: this file belongs to aiblueprinthq/ai-blueprint. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/aiblueprinthq/ai-blueprint/main/.agents/skills/doctor/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/aiblueprinthq/ai-blueprint

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for doctor

README.md
[![agentmods](https://agentmods.dev/badge/skills/aiblueprinthq/ai-blueprint/doctor/github.svg)](https://agentmods.dev/skills/aiblueprinthq/ai-blueprint/doctor)
Your own site
<a href="https://agentmods.dev/skills/aiblueprinthq/ai-blueprint/doctor"><img src="https://agentmods.dev/badge/skills/aiblueprinthq/ai-blueprint/doctor/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for doctor

Your own site · 80×15
<a href="https://agentmods.dev/skills/aiblueprinthq/ai-blueprint/doctor"><img src="https://agentmods.dev/badge/skills/aiblueprinthq/ai-blueprint/doctor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 63 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,584 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Agent Snooping · line 81
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
  • medium Excessive Agency · line 174
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00063 $0.03584
Opus 5 $0.00032 $0.01792
Sonnet 5 $0.00013 $0.00717
Haiku 4.5 $0.00006 $0.00358

Measured 5d ago against content hash 68130de1b28f, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

doctor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/run-state.mjs), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/doctor/SKILL.md · 274 lines

How it starts

The opening of the file, as written. The whole thing — 274 lines — stays where its author put it; the contents beside it link to each section on GitHub.

doctor - Blueprint health check

Context reuse: Reuse any required file already loaded in project instructions or the current session. Read it again only if absent, changed, or exact current bytes or line references are needed.

Where this sits in the workflow:

any time  ->  [doctor]  ->  reads setup + plans + workflow state + git
              (diagnostic)  prints health, warnings, and repair order

This skill answers one question: is this Blueprint project ready to use? It is the diagnostic pass for setup drift, incomplete onboarding, missing files, placeholder plans, stale generated context, Blueprint visibility, and confusing workflow state. It never changes anything: no edits, no commits, no installs, no builds, no branch changes. Its only repair is an approved reset of a malformed generated blueprint/.state/run.json file.

Use /status when the user mainly wants progress and the next build action. Use /doctor when the user wants to know whether the workflow itself is healthy.

Input

None. /doctor takes no argument.

What it checks

Gather these, then summarize. Do not dump file contents.

  1. Required Blueprint files
    • Confirm AGENTS.md, blueprint/, blueprint/project-plan.md, blueprint/build-plan.md, and blueprint/context/ exist.
    • Confirm blueprint/context/coding-standards.md, blueprint/context/ai-interaction.md, blueprint/context/current-feature.md, and blueprint/context/project-overview.md exist.
    • Confirm blueprint/history/features/ and blueprint/history/fixes/ exist. When the rollback skill is installed, also check blueprint/history/rollbacks/. A missing rollback folder on a legacy installation is a warning, not a blocker; /complete creates it on the first rollback.
    • Check blueprint/context/findings.md. Missing on a legacy installation is a warning, not a blocker; /audit and /complete create it on first use. When present, confirm its entry headers still match ### <id> [<severity>] <status> - <title> and warn on a malformed ledger. Report any P0 or P1 finding still open or fixed by ID, since it will block /complete. Never block on the ledger yourself.
    • Check blueprint/context/review.md. Missing on a legacy installation is a warning, not a blocker; /audit independent current and /complete create it on first use. When present, validate the required request or receipt fields and report pending, changes-requested, malformed, or stale state.
    • If .gitignore marks Blueprint workflow files as local-only, still require the files to exist on disk. Ignored but present is healthy; ignored and missing means the local workflow needs to be restored.
    • Read blueprint/config.json when present. Missing is healthy and means built-in defaults. When present, require a regular non-symbolic-link JSON file with schemaVersion: 1. Reject unknown keys and unsupported values. Report the effective workflow, git, verification, review execution, regular quality-gate, Continuous quality-gate, and Continuous Mode settings. Confirm each audit, independent-review, check, and try-guide gate uses its supported values. Independent review defaults to when-sensitive for both workflows; audit, check, and try guide default to manual. Confirm review.independentExecution is manual or automatic and defaults to automatic. Do not claim automatic capability is available from installed project files alone. An invalid config is a setup blocker for mutating workflow skills because they must not guess which policy to follow.
  2. Tool adapters
    • Read blueprint/.state/manifest.json when present and report its exact logical adapters: Codex, Claude Code, GitHub Copilot, and OpenCode.
    • Confirm at least one compatible skill tree exists. Codex and GitHub Copilot use .agents/skills/. Claude Code uses .claude/skills/. OpenCode can use either tree.
    • If both skill trees are present, say that is healthy when the selected tools require both. Compare their skill folder names and warn about missing skills on either side.
    • If OpenCode is selected, do not require .opencode/skills/. If it contains duplicate Blueprint skills alongside .agents/skills/ or .claude/skills/, warn that OpenCode discovers all of those locations and the duplicate tree should be reviewed.
    • If git shows changes under .agents/skills/ or .claude/skills/, check the matching adapter file too. Warn when workflow behavior was updated in one adapter but not the other.
    • Confirm each installed adapter tree contains doctor/scripts/run-state.mjs. This managed helper validates and atomically writes dashboard activity. A missing helper needs a Blueprint update before tracked commands can record activity safely.
    • If only one tool is used, mention the unused adapter can be deleted. Do not treat extra adapters as an error.
    • If CLAUDE.md exists and still starts with # Project Name, flag that /onboard probably has not finished.
    • When Claude Code is installed, report its startup-context shape. Confirm CLAUDE.md imports AGENTS.md and lets skills load the overview, active spec, coding standards, and interaction guide on demand. If it directly imports any of those four context files, warn that this is the legacy always-loaded layout and give the exact direct import lines to remove. Count the imported files and their total byte size, plus the total byte size of project skill descriptions. Label these as file-size diagnostics, not token counts. Recommend Claude Code's /context all for the live token breakdown.
  3. Commands and project setup
    • Check whether root README.md is still the copied Blueprint workflow doc by looking for # AI Coding Blueprint or opening text that describes the Blueprint workflow instead of the app. If so, warn that /onboard should replace it with a project README before publishing.
    • If blueprint/README.md clearly contains copied Blueprint workflow docs, report it as an obsolete installer artifact. Its absence is healthy. An unchanged managed copy can be removed by the updater; a modified copy needs user review.
    • Check whether AGENTS.md has a ## Commands section with dev and build commands.
    • Report missing lint or test commands as informational unless the project has real lint or test scripts elsewhere that are not reflected in AGENTS.md.
    • If package.json exists, compare its scripts against AGENTS.md at a high level. Do not require every script to be documented.
    • If AGENTS.md declares a Verify command, confirm it resolves to real project commands in the expected order: typecheck, tests when configured, then build. Do not require checks the project does not have.
    • If .github/workflows/verify.yml exists, confirm it runs the exact documented Verify command for pull requests and pushes to the default branch, uses the detected runtime and package manager, and starts with read-only contents permission. Preserve other workflows and report overlap for review.
    • A missing Verify command or GitHub workflow is informational. It means the optional automatic-check setup was not selected, not that the Blueprint is unhealthy.
  4. Ignore rules
    • Check obvious ignore patterns for the detected stack. For Node or Astro, look for node_modules, .env, dist, and framework cache folders such as .astro or .next when relevant.
    • Detect local-only Blueprint mode if .gitignore ignores .agents/, .claude/, blueprint/, or CLAUDE.md. Report it as a visibility choice, not a failure, when the local files exist.
    • In local-only mode, check whether tracked AGENTS.md still describes the Blueprint workflow, lists hidden adapter paths, or exposes the core skill list. If so, warn that /onboard should make AGENTS.md public-safe.
    • If local-only mode is active but those paths are already tracked by git, warn that .gitignore does not hide tracked files and the user must approve any git rm --cached cleanup separately.
    • Keep this conservative. If uncertain, report "review" instead of failure.
  5. Planning readiness
    • Check whether blueprint/project-plan.md and blueprint/build-plan.md look filled in or still template-like. Treat obvious TODO, TBD, example-only text, or empty required sections as not ready.
    • Check whether blueprint/build-plan.md is a numbered checkbox list. Raw bullets are allowed as a first draft, but they should be normalized by /overview before the build loop starts.
    • Count checked and unchecked leaf items in blueprint/build-plan.md.
  6. Overview freshness
    • Check whether blueprint/context/project-overview.md exists and looks generated from the current plans.
    • Report its byte size. At or above 20,000 bytes, call it oversized and say /feature should stop until /overview regenerates a compact consolidation.
    • If either planning file appears newer than the overview by filesystem time, call the overview possibly stale and suggest /overview before feature work.
  7. Current workflow state
    • Inspect blueprint/.state/run.json when it exists. Missing means no recorded activity and is healthy. Require a regular non-symbolic-link JSON file that matches dashboard schema version 1 from AGENTS.md.
    • If the path is a symbolic link or not a regular file, do not read, replace, or remove it. Report the exact path for manual review.
    • If the regular file is invalid JSON or does not match the schema, report it as malformed generated state. Explain that resetting it removes only the dashboard's last-command record, not project work, and that the next tracked Blueprint command recreates it.
    • Offer this exact repair question: Reset the malformed dashboard state now? On approval, use the installed dashboard activity helper's reset action. It confirms the exact path is a regular non-symbolic-link file and removes only blueprint/.state/run.json. Verify the file is absent and report the dashboard state as reset. Never remove blueprint/.state/, its manifest, backups, or any project file. Without approval, leave it unchanged and include the reset in Repair order:.
    • Check whether blueprint/context/current-feature.md is the reset stub or an active feature, fix, or rollback spec.
    • If a spec is active, report checked and unchecked implementation steps.
    • If current-feature.md is the reset stub but git has source or workflow changes, warn that work is happening without an active spec.
    • Flag active spec on main, all spec steps checked but no completion, or a branch that does not match the configured feature, fix, or rollback prefix for the spec type. For a feature, also flag a mismatch with the next unchecked build-plan item. For a rollback, confirm its target is a checked item and do not compare it to the next unchecked item.
  8. Git
    • Report current branch, clean vs dirty working tree, rough changed-file count, last commit subject, and whether the branch is ahead of upstream.
    • If the directory is not a git repo, report that as a setup issue and keep going.

Read the full file on GitHub · 274 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago Changed · +4 lines 68130de1b28f
  2. 8d ago Changed · +51 lines · -19 tokens per session 642c97068ca8
  3. 13d ago First seen · 219 lines · 82 tokens per session scan A 64e7203cccba

Subscribe to this mod's changes

doctor is a skill published in the GitHub repository aiblueprinthq/ai-blueprint (399 stars, last pushed today), licensed MIT. It adds 63 tokens to every session and 3,584 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

systemic-issue-triage

Trigger: new issue, bug report, triage, backlog, issue flood, community report, root cause, dead-end, blocked user. Attack issues by root class, never one-by-one; fixes must shrink the system, not grow it.

Gentleman-Programming/gentle-ai · 57 tokens

triage-issue

Intelligently triage bug reports and error messages by searching for duplicates in Jira and offering to create new issues or add comments to existing ones. When an agent needs to: (1) Triage a bug report or error message, (2) Check if an issue is a duplicate, (3) Find similar past issues, (4) Create a new bug ticket…

atlassian/atlassian-mcp-server · 116 tokens

bug-triage

Read all open bugs in production/qa/bugs/, re-evaluate priority vs. severity, assign to sprints, surface systemic trends, and produce a triage report. Run at sprint start or when the bug count grows enough to need re-prioritization.

Donchitos/Claude-Code-Game-Studios · 59 tokens

investigation

Create an investigation ticket + live-doc for sustained root-cause work (retros, bug archaeology, regression hunts).

me2resh/apexyard · 26 tokens

browse-flows

Browse Power Automate environments and flows interactively. Use when the user wants to browse, list, or explore their flows and environments.

microsoft/power-platform-skills · 31 tokens

operating-cadence

Designs the rhythm an organization runs on — which reviews happen weekly, monthly and quarterly, what each one decides, who owns the numbers presented, and how a signal at the front line reaches the people who can act on it. Use this to set up a management operating system, fix a meeting calendar that produces no…

cbrock84/headcount · 95 tokens