Borrowing it
Nothing to install: this file belongs to arcasilesgroup/ai-engineering. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/arcasilesgroup/ai-engineering/main/.agents/skills/ai-build/SKILL.mdgit clone --depth 1 https://github.com/arcasilesgroup/ai-engineeringWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/arcasilesgroup/ai-engineering/ai-build)<a href="https://agentmods.dev/skills/arcasilesgroup/ai-engineering/ai-build"><img src="https://agentmods.dev/badge/skills/arcasilesgroup/ai-engineering/ai-build.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00141 | $0.00998 |
| Opus 5 | $0.00071 | $0.00499 |
| Sonnet 5 | $0.00028 | $0.00200 |
| Haiku 4.5 | $0.00014 | $0.00100 |
Grade A, and why
ai-build scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Build the task the plan already approved, and stop where the plan stops
What it produces
Code and tests for one task, and one commit nobody has reviewed yet — HEAD.
Steps
- Take the task, not the plan:
ai-eng spec show <id> --task <n>prints it with the file, the check, the rollback and the digest of the plan it came from. It refuses when that digest no longer matches the file on disk, which is the approval saying so. If the task is not in a plan, or the plan is not approved, stop here: nothing to execute. - Write the failing test first, and run it. A test that has never been red is a test that has never been shown to test anything, and the exact focal point matters — assert on the thing that would break, not on the shape around it.
- Make it green with the smallest change that works. Then refactor with the test still green, or leave it.
- One logical change per commit. A change that has outgrown the task it belongs to is two changes; split it and say so, rather than widening the commit around it.
- Run the task's own check and the test files the task names, by path. Not the whole gate:
that runs once at block close, over every commit in the block at once, and at close it
runs as
just check-all— one red never relaunches a full pass; a new failure joins the others, the batch is repaired together, and the one pass lists every red step.--no-verifyis denied byhooks/no_verify_guard.pyon the way past — if that hook file is missing, stop: a repository whose hooks are not installed cannot attest what this step claims. - Label the hand-off
UNREVIEWEDand say what happened — the parts that did not, too. Say it in the commit message and in the hand-off, and never by editing the plan. The approved bytes are what the approval was given for, so a task that rewrites them to record itself has withdrawn the permission it is running under. That is not a formatting preference; it is the loop this step exists to break. - When the plan stops being true — the task is bigger than written, the design does not
survive contact, a decision is missing — record the stop before you stop:
ai-eng report blocked --what "<the gate>" --why "<what is missing>" --action "<the literal that clears it>", then regenerate the page withai-eng report intent --html. A halt nobody can see is a halt nobody acts on, and the person is not at the keyboard. Say what is missing; never that it arrived. Then escalate to/ai-spec. Continuing on a plan you have privately rewritten is the failure this skill exists to prevent.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 67 lines · 141 tokens per session scan A 9d83df386954
ai-build is a skill published in the GitHub repository arcasilesgroup/ai-engineering (54 stars, last pushed 6d ago), licensed Apache-2.0. It adds 141 tokens to every session and 998 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
commit
A workflow for turning current code changes into small, logically grouped Git commits. A commit is a saved set of changes in Git that can be reviewed or reverted together.
pr-comment
A tool for drafting a GitHub pull request’s description from the current branch’s changes and the repository’s own template. It returns the result as raw Markdown that can be pasted into GitHub.
atomic-commit
Create honest atomic Git commits by choosing one coherent work batch before editing, keeping the whole repository green, resolving every untracked file, staging the entire root with git add ., and pausing for human review before committing. Use when starting commit-sized work, completing a demonstrable implementation…
govkit-pr-author
Author and open a governed pull request that carries its governance evidence. Use when the user asks to open a PR, create a pull request, or invokes /govkit-pr-author.
git-workflow
Use this skill for anything related to Git and version control workflows. Trigger when the developer asks for help with commit messages, PR descriptions, pull request reviews, branching strategies, changelog generation, release notes, code review etiquette, or Git conventions. Keywords: commit, PR, pull request…
git-commit
Generate conventional commit messages for Java projects. Use when user says "commit", "create commit", "commit changes", or after completing code changes that need to be committed.