biome: Skill for Claude Code

.claude/skills/lint-rule-development/SKILL.md

lint-rule-development is a skill for Claude Code from biomejs/biome. It costs 65 tokens per session (1,388 once invoked), scanned A, original, Apache-2.0.

A development guide for creating and changing Biome lint rules and code assists. A lint rule checks code for a problem, while an assist can suggest or apply a code change.

In plain words
What is it for?
Scaffolding JavaScript, CSS, JSON, or GraphQL lint rules and assists, adding checks and fixes, and running their focused tests.
Why use it?
It provides the repository workflow for queries, diagnostics, safe fixes, registration, fixtures, snapshots, and generated code, so new rules are tested consistently.

Skill for Claude Code

Written for Claude Code: installed under .claude/. Also seen: mentions AGENTS.md.

This is biomejs/biome's own configuration. It tells Claude Code how to work on biome itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything biome configures →

About the project

Biome is a web-development toolchain that formats and checks source code for languages such as JavaScript, TypeScript, JSX, and CSS. Developers use its command-line and language-server interfaces to maintain code quality in web projects. Catalogue add-ons extend workflows around the toolchain.

biomejs/biome · 25,730 stars · on GitHub · biomejs.dev

Reuse

Borrowing it

Nothing to install: this file belongs to biomejs/biome. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/biomejs/biome/main/.claude/skills/lint-rule-development/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/biomejs/biome

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for lint-rule-development

README.md
[![agentmods](https://agentmods.dev/badge/skills/biomejs/biome/lint-rule-development.svg)](https://agentmods.dev/skills/biomejs/biome/lint-rule-development)
Your own site
<a href="https://agentmods.dev/skills/biomejs/biome/lint-rule-development"><img src="https://agentmods.dev/badge/skills/biomejs/biome/lint-rule-development.svg" alt="Measured on agentmods" height="20"></a>
Per session 65 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,388 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Snyk pass 7 Sept 2026
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00065 $0.01388
Opus 5 $0.00032 $0.00694
Sonnet 5 $0.00013 $0.00278
Haiku 4.5 $0.00006 $0.00139

Measured 8d ago against content hash 4c48d63bc860, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

lint-rule-development scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/lint-rule-development/SKILL.md · 145 lines

How it starts

The opening of the file, as written. The whole thing — 145 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Lint Rule Development

Follow the current analyzer architecture in crates/biome_analyze/CONTRIBUTING.md. Read only the sections relevant to the rule rather than loading the entire guide by default.

Workflow

  1. Find two or three current rules in the same language and group with a similar query or action.
  2. Generate the matching lint-rule or assist scaffolding when adding analyzer behavior.
  3. Implement the narrowest query and state needed to decide whether to signal.
  4. Add a diagnostic and, when safe, an action.
  5. Add focused valid and invalid fixtures, then inspect snapshots.
  6. Run required analyzer codegen and the narrowest tests.

Scaffolding commands:

just new-js-lintrule useMyRule
just new-css-lintrule useMyRule
just new-json-lintrule useMyRule
just new-graphql-lintrule useMyRule

New lint rules start in nursery. They are patch changes targeting main, because nursery rules do not follow normal feature versioning. Load changeset for the release entry.

For a new assist, use the language's new-*-assistrule recipe, for example:

just new-js-assistrule useMyAction
just new-json-assistrule useMyAction

The generator places assists under src/assist/source/; they do not use lint groups or the nursery policy. A new assist is a user-facing feature and normally requires a minor changeset targeting next. A bug fix to an existing assist follows normal bug-fix policy. Check justfile for the languages with assist scaffolding.

Query and State

Choose the least expensive query that answers the rule:

  • Ast<Node> for syntax-local checks;
  • Semantic<Node> when bindings, references, scopes, or globals are required;
  • a service query only when the fact is owned by that service;
  • type inference only when syntax and the semantic model cannot answer the question.

The analyzer guide's query and service sections are canonical for available APIs.

run() should decide whether to emit a signal. Keep action-only work in action() so it is not performed for every candidate node.

Read the full file on GitHub · 145 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 145 lines · 65 tokens per session scan A 4c48d63bc860

Subscribe to this mod's changes

lint-rule-development is a skill published in the GitHub repository biomejs/biome (25,730 stars, last pushed today), licensed Apache-2.0. It adds 65 tokens to every session and 1,388 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.