Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BuildrAI/Buildr --skill buildr-dev-previewgit clone --depth 1 https://github.com/BuildrAI/BuildrWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/buildrai/buildr/buildr-dev-preview)<a href="https://agentmods.dev/skills/buildrai/buildr/buildr-dev-preview"><img src="https://agentmods.dev/badge/skills/buildrai/buildr/buildr-dev-preview/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/buildrai/buildr/buildr-dev-preview"><img src="https://agentmods.dev/badge/skills/buildrai/buildr/buildr-dev-preview.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00058 | $0.01993 |
| Opus 5.5 | $0.00023 | $0.00797 |
| Sonnet 5.5 | $0.00012 | $0.00399 |
| Haiku 4.5 | $0.00006 | $0.00199 |
Grade A, and why
buildr-dev-preview scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Buildr 开发预览
本技能(Skill)只属于 Buildr 自举工作空间,用于在 Buildr 自身开发或验收需要启动服务验证时,运行对应工作树(Worktree)中的 Buildr Web 产品代码,叠加指定的任务数据源。它不是随包内置能力,不进入 projects/product/services/buildr/resources/,也不写用户级安装说明;用户 workspace 不需要、也不应获得本技能。
使用时机
智能体(Agent)根据本次改动和待验证行为判断是否需要启动服务:查看真实页面、检查交互或验证本机 HTTP 行为时,使用本技能(Skill)启动对应任务工作树(Worktree)的预览,并将同一预览链接提供给用户查看。只需静态检查或无需启动服务的测试时,不必启动预览。
适用边界
- 仅在本自举 workspace(
projects/product/存在产品 checkout)内使用;其他 workspace 没有开发入口与 canonical 任务库语义。 - 用真实页面验收工作树中的前端、任务详情、预览身份等改动;不是日常浏览入口,验收完成后停止实例并清理隔离现场。
- 不替代
buildr web默认实例、Buildr Web Dev.app或正式发布物验证;不修改 canonical workspace 的任务库内容。 - 任务材料坚持工作树证据来源:
task-worktree-candidateprovenance 缺失或漂移时如实呈现诊断,不拿主目录同名旧文件冒充。
前置事实核对
- 确认被验收的工作树根:
git worktree list或任务 worktree evidence 给出的 checkout,不从目录名猜测任务归属。 - 确认产品代码自洽:预览进程必须来自该工作树的
projects/product/buildr开发入口;本机 PATH 上的buildr是 npm installation,身份不同,禁止用它启动预览。 - 预览前端默认需要构建产物:在工作树(Worktree)的
projects/product/services/buildr-web运行../buildr/tools/development/run-development-npm run build,输出到services/buildr/web-dist(该目录被 Git 忽略,属于可重建产物)。首次启动时,未改动前端且已有产物与当前源码一致可复用。
数据源模式
| 模式 | 服务目标(--target) |
任务数据 | 适用 |
|---|---|---|---|
| canonical 实时库 | canonical workspace 根 | canonical .buildr/local/workspace.sqlite 实时读取 |
需要真实任务记录、工作树材料经受管证据(task-worktree-candidate)解析的验收 |
| 隔离快照 | 任务工作树根 | 启动前以一致副本为工作树 .buildr/local/workspace.sqlite 播种 |
--task 预览形态、需要冻结数据时点或隔离页面内写入 |
| 空现场 | 隔离新建目录 | 不复制任务库 | 只验证页面壳层、不依赖任务材料 |
快照播种只允许写工作树自身 .buildr/local/;canonical 库始终只读。已存在的工作树本地副本复用,不覆盖。
托管路径(首选)
<worktree>/projects/product/buildr web preview start <instance> [--task <task-id> --target <canonical-root>] [--port 0] [--no-open] [--json]
<worktree>/projects/product/buildr web preview list --json
<worktree>/projects/product/buildr web preview stop <instance> [--task <task-id> --target <canonical-root>]
--task形态:自动解析任务受管工作树、服务目标指向工作树、为目标缺失的本地任务库从 canonical 播种一致副本(结果taskStore如实标注canonical播种或existing复用)。这是隔离快照模式的托管实现,优先使用。- canonical 实时库模式:
web preview start <instance> --target <canonical-root>不提供--task,服务目标为 canonical,任务材料按 worktree evidence 读工作树候选副本。 - 连接页面和查询优先在隔离工作空间验证;真实系统验收另行核对目标及授权。预览通过当前团队实例读取团队认证,本机个人认证属于预览自己的数据目录,不复用日常个人账号;不得把开发工作空间当成业务连接来源。目标或数据源模式改变时使用新实例名,不覆盖已有登记。
- 托管实例持有 owner、secret 与启动锁,
preview stop需匹配 owner 身份;不要直接kill进程绕过 owner 检查。 - 启动输出即为验收链接:loopback URL + 实例名 + worktree/branch/HEAD + dirty 状态 + 任务库来源;向维护者交接时原样给出。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 86 lines · 58 tokens per session scan A a22e8c7a9c76
buildr-dev-preview is a skill published in the GitHub repository BuildrAI/Buildr (28 stars, last pushed yesterday), licensed MIT. It adds 58 tokens to every session and 1,993 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-16.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
component-fixtures
Use when creating or updating component fixtures for screenshot testing or their shared infrastructure, or when designing UI components to be fixture-friendly. Covers fixture file structure, theming, service setup, CSS scoping, async rendering, validation, and common pitfalls.