Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bosens-China/tc39-atlas --skill apply-yliu-frontend-practicesgit clone --depth 1 https://github.com/bosens-China/tc39-atlasWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bosens-china/tc39-atlas/apply-yliu-frontend-practices)<a href="https://agentmods.dev/skills/bosens-china/tc39-atlas/apply-yliu-frontend-practices"><img src="https://agentmods.dev/badge/skills/bosens-china/tc39-atlas/apply-yliu-frontend-practices/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bosens-china/tc39-atlas/apply-yliu-frontend-practices"><img src="https://agentmods.dev/badge/skills/bosens-china/tc39-atlas/apply-yliu-frontend-practices.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00084 | $0.00704 |
| Opus 5 | $0.00042 | $0.00352 |
| Sonnet 5 | $0.00017 | $0.00141 |
| Haiku 4.5 | $0.00008 | $0.00070 |
Grade A, and why
apply-yliu-frontend-practices scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Apply Yliu Frontend Practices
对浏览器端 React、Vue 前端代码应用 Yliu 的个人工程实践。覆盖编写、重构和代码审查，不处理服务端模块。
确定优先级
按以下优先级决策：
- 用户本次明确要求。
- 项目已经稳定使用的规范、封装和依赖。
- 本技能的默认实践。
先检查依赖清单和任务涉及的现有实现。复用项目已有的成熟方案，不并行引入功能重复的库，也不为应用本技能而迁移无关代码。
按需读取规范
只完整读取当前任务涉及的引用文件；任务跨多个类别时读取所有相关文件：
- 涉及 Axios、API 模块、请求 Hook、业务错误或操作反馈时，读取 requests-and-feedback.md。
- 涉及 Hook/Composable 抽取、请求执行时机、路由性能、详情页面或 Pinia 数据来源时，读取 hooks-and-routing.md。网络 Hook 同时读取请求规范。
- 涉及 Loading、Error、Empty、布局稳定、危险操作、组件库、UnoCSS 或样式时，读取 ui-states-and-styling.md。
- 涉及新增、调整或审查测试时，读取 testing.md。
不要为了“了解全貌”默认加载全部引用；根据任务实际范围选择。
执行工作
编写或重构
- 读取相关引用文件。
- 查看项目中同类代码和依赖，确认已有约定。
- 只实现任务所需的最小改动。
- 让新增代码与项目风格一致，并应用引用文件中的默认实践。
- 运行与改动风险相称的检查。
代码审查
- 读取审查范围涉及的引用文件。
- 只报告真实、可定位的问题，说明影响和最小修复方向。
- 按严重程度排序，避免把个人偏好包装成缺陷。
- 用户没有要求修复时不要直接修改代码。
核心约束
- 不猜测业务成功状态；优先从项目中查找，仍不清晰时询问用户。
- 不让公共抽象隐式启动当前页面不需要的请求。
- 不让详情页依赖上一页内存状态，使用 URL 核心参数请求当前详情。
- 不重复展示请求反馈，也不把失败伪装成成功返回值。
- 不为了复用制造万能组件、薄包装 Hook 或新的重复依赖。
- 不测试普通文案和易变展示细节，除非用户明确要求。
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 56 lines · 84 tokens per session scan A 27abd9add341
apply-yliu-frontend-practices is a skill published in the GitHub repository bosens-China/tc39-atlas (0 stars, last pushed today), licensed MIT. It adds 84 tokens to every session and 704 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
consuming-endpoints-from-client-code
Wire a PostHog endpoint into a client app or SDK. Covers fetching the OpenAPI spec, generating a typed client with openapi-generator or @hey-api/openapi-ts, sending the right auth header, shaping the variables payload (HogQL codename vs insight breakdown property), handling rate-limit and materialised-endpoint error…
posthog-desktop
Scopes work to the desktop app at products/desktop — a nested standalone pnpm/turbo/Biome workspace imported from the now-archived PostHog/code repo, with posthog/posthog the only source of truth for PRs, CI and publishing, and not part of the root frontend or Django build. Use when the user says /posthog-desktop, or…
javascript-expert
Expert-level JavaScript development with modern ES2024+ features, Node.js, npm ecosystem, and best practices. Use when the user mentions ECMAScript, ES2024, Node.js, npm, or web, or when the task involves Modern JavaScript, Node.js Development, Modern Tooling, or Functional Programming.
typescript-expert
Expert-level TypeScript development with modern tooling, advanced types, and best practices. Use this skill for TypeScript projects requiring type-safe code, modern bundling, and comprehensive testing.
angular-developer
Generates Angular code and provides architectural guidance. Trigger when creating projects, components, services, or HTTP communication, or for best practices on reactivity (signals, linkedSignal, resource, httpResource), forms, dependency injection, routing, SSR, accessibility (ARIA), animations, styling (component…
angular-new-app
Creates a new Angular app using the Angular CLI. This skill should be used whenever a user wants to create a new Angular application and contains important guidelines for how to effectively create a modern Angular application.