shardingsphere: Skill for Codex

.codex/skills/coding-standards/SKILL.md

coding-standards is a skill for Codex from apache/shardingsphere. It costs 125 tokens per session (1,840 once invoked), scanned A, original, Apache-2.0.

A repository-specific guide for following Apache ShardingSphere's written coding rules while changing or reviewing code.

In plain words
What is it for?
Use it during implementation, bug fixes, refactoring, code review, or a read-only standards audit.
Why use it?
It reduces inconsistent style and missed project requirements by collecting applicable instructions and checks before work begins.

Skill for Codex ✓ vendor

Written for Codex: agents/openai.yaml present. Also seen: mentions AGENTS.md.

This is apache/shardingsphere's own configuration. It tells Codex how to work on shardingsphere itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything shardingsphere configures →

About the project

Apache ShardingSphere is a database enhancement layer that makes heterogeneous databases easier to access and govern as a unified system, without replacing the underlying databases. It supports distributed database capabilities such as sharding, read-write splitting, SQL federation, encryption, masking, auditing, and traffic control for enterprise data architectures.

apache/shardingsphere · 20,817 stars · on GitHub

Reuse

Borrowing it

Nothing to install: this file belongs to apache/shardingsphere. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/apache/shardingsphere/master/.codex/skills/coding-standards/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/apache/shardingsphere

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for coding-standards

README.md
[![agentmods](https://agentmods.dev/badge/skills/apache/shardingsphere/coding-standards/github.svg)](https://agentmods.dev/skills/apache/shardingsphere/coding-standards)
Your own site
<a href="https://agentmods.dev/skills/apache/shardingsphere/coding-standards"><img src="https://agentmods.dev/badge/skills/apache/shardingsphere/coding-standards/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for coding-standards

Your own site · 80×15
<a href="https://agentmods.dev/skills/apache/shardingsphere/coding-standards"><img src="https://agentmods.dev/badge/skills/apache/shardingsphere/coding-standards.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 125 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,840 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Snyk pass 7 Sept 2026
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00125 $0.01840
Opus 5.5 $0.00050 $0.00736
Sonnet 5.5 $0.00025 $0.00368
Haiku 4.5 $0.00013 $0.00184

Measured 10d ago against content hash f6da1b8de5d3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

coding-standards scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

The scan reads SKILL.md. This mod also ships 3 executable files (scripts/build_audit_inventory.py, scripts/tests/test_build_audit_inventory.py, scripts/tests/test_checkstyle_rules.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.codex/skills/coding-standards/SKILL.md · 79 lines

How it starts

The opening of the file, as written. The whole thing — 79 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Coding Standards

Use this Skill in exactly one of the following modes. Both modes derive compliance only from written standards that actually apply to the target files. For routing purposes, covered declaration annotations are HighFrequencyInvocation, AllArgsConstructor, RequiredArgsConstructor, NoArgsConstructor, Builder, Getter, Setter, EqualsAndHashCode, ToString, and Slf4j.

Implementation Guidance Mode

Use this mode when implementing, fixing, refactoring, or reviewing code, or when modifying or reviewing a Maven POM, unless the user explicitly requests a standalone coding-standards compliance audit. Read only the references whose conditions below match the affected files and task delta, and add each selected reference's applicable rules to one checklist grouped by governing file set.

  • Before starting a read-only code review or making the first write in an implementation task, read the portions of CODE_OF_CONDUCT.md, repository-level and path-level AGENTS.md, Checkstyle, Spotless, and other written repository standards that actually apply to every affected file.
  • For a changed or reviewed pom.xml, read Maven dependency version rules and apply them only to dependency declarations changed by the task.
  • Read Java naming rules when the task adds or changes a field, local variable, parameter, lambda, returned-value temporary or direct return, or enhanced loop. When a type declaration or its type annotations change, read Java type rules.
  • Before adding or validating HighFrequencyInvocation, apply the CODE_OF_CONDUCT.md definition by identifying the supported normal workload and verifying that the target's work repeats as that workload's throughput grows. Invocation after each DDL or explicit metadata refresh request proves reachability, not high frequency by itself. Leave applicability uncertain when normal-workload evidence is insufficient; do not add the annotation or rewrite Streams solely from reachability or theoretical repeatability. Do not require a TPS benchmark solely to classify these paths.
  • Before adding, changing, or reordering a covered declaration annotation, or when a Java declaration added or modified by the task contains at least two covered annotations, read the Java declaration annotation order rules through EOF and add each applicable rule to the checklist.
  • Read Java constructor rules before changing an explicit or generated constructor or a field that may alter its signature or behavior.
  • Before adding or changing a Java throw statement, a conditional branch that throws, a validation or precondition call, or a call to ShardingSpherePreconditions, read the Java precondition rules through EOF and add each applicable rule to the checklist.
  • Before adding or changing a Java method annotated with lombok.SneakyThrows or changing the checked-exception behavior of such a method, read the Java exception handling rules through EOF and add each applicable rule to the checklist.
  • Before adding or changing a Java declaration whose type is a java.util.Collection interface or implementation, read the Java collection declaration rules through EOF and add each applicable rule to the checklist.
  • Before adding or changing a Java expression that copies Collections.singleton, Collections.singletonMap, or Arrays.asList into ArrayList, LinkedList, HashMap, or LinkedHashMap, read the Java collection rules through EOF and add each applicable rule to the checklist.
  • Read Java expression rules before changing == or != when an operand may resolve to a named constant.
  • Before adding or changing a multi-line Java declaration header, statement, or expression, or a Java physical line that may exceed 200 characters, read the Java line-wrapping rules through EOF and add each applicable rule to the checklist.
  • For every affected Java test file, read the Java test code rules through EOF and add each applicable rule to the checklist.
  • Read defensive-code rules before adding, changing, removing, or reviewing a defensive construct.
  • Apply each rule according to whether its text governs existing code or only the current task delta, and never beyond authorized scope.
  • After the last write, manually recheck the effective task delta and only the surrounding declarations needed to evaluate every applicable checklist rule.
  • For Java, explicitly verify every applicable CODE_OF_CONDUCT.md coding rule, including declaration order; when a method uses private helpers, verify that those helpers immediately follow the caller and appear in the caller's call order, regardless of the caller's visibility.
  • For Java, explicitly verify every applicable Java declaration annotation order rule against each declaration added or modified by the task.
  • For Java, explicitly verify every applicable Java exception handling rule against each added or modified lombok.SneakyThrows annotation and the method bodies, invoked signatures, rethrown values, and contracts needed to resolve its exception types.
  • For Java, explicitly verify every applicable Java collection declaration rule against the effective task delta and the operations, callers, callees, overrides, and contracts needed to determine the least-specific required declaration type.
  • For Java, explicitly verify every applicable mutable-collection construction rule against the effective task delta and the operations, aliases, callers, callees, and contracts needed to determine whether mutability is required.
  • For Java, when line-wrapping rules were selected, explicitly verify them against each applicable declaration header, statement, and expression added or modified by the task.
  • For Java tests, explicitly verify every applicable Java test code rule against the effective task delta and the declarations and member types needed to resolve semantic applicability.
  • Recheck every other selected rule only against the task delta and the context needed to decide applicability.
  • Treat passing Checkstyle and Spotless as evidence only for the rules those tools enforce; neither result replaces the manual recheck.
  • A later write invalidates final-check evidence only for affected files and rules; recheck those portions before verification or handoff.
  • Do not invent rules from preference or nearby code, and do not report pre-existing violations outside task scope.
  • Run the applicable formatting and standards checks required by the repository workflow.
  • Do not run apply, format, or another file-modifying command unless the current task authority and repository rules authorize every possible write.
  • Do not build a complete file inventory or count physical lines to report audit coverage in this mode. Measure the length of applicable Java constructs as required by the line-wrapping rules.

Read the full file on GitHub · 79 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago Changed · +1 lines f6da1b8de5d3
  2. 17d ago Changed · +4 lines 0e6a3aa96574
  3. 1mo ago Changed · -30 lines · +29 tokens per session 7657b130de1d
  4. 1mo ago Changed · -2 lines · +7 tokens per session a9b0e45e7585
  5. 1mo ago Changed · +4 lines 81daa94da796
  6. 1mo ago Changed · +3 lines 346bfeb043ce
  7. 1mo ago Changed · +3 lines 43acd6057f78
  8. 1mo ago Changed · +18 lines 7fd233f0243b
  9. 1mo ago Changed · +9 lines · +5 tokens per session 4782e1bd0f54
  10. 1mo ago First seen · 69 lines · 84 tokens per session scan A 190b4a7af6c7

Subscribe to this mod's changes

coding-standards is a skill published in the GitHub repository apache/shardingsphere (20,817 stars, last pushed today), licensed Apache-2.0. It adds 125 tokens to every session and 1,840 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories