Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Crearize/ai-dev-helm --skill lint-scaffoldinggit clone --depth 1 https://github.com/Crearize/ai-dev-helmWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/crearize/ai-dev-helm/lint-scaffolding)<a href="https://agentmods.dev/skills/crearize/ai-dev-helm/lint-scaffolding"><img src="https://agentmods.dev/badge/skills/crearize/ai-dev-helm/lint-scaffolding.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00094 | $0.08050 |
| Opus 5 | $0.00047 | $0.04025 |
| Sonnet 5 | $0.00019 | $0.01610 |
| Haiku 4.5 | $0.00009 | $0.00805 |
Grade A, and why
lint-scaffolding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 225 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Lint Scaffolding Skill - 決定的チェック層の配線
最重要ルール
機械判定できるものは AI レビューに委ねず、決定的チェック(Lint / 静的解析)にする。 何を担保すべきかの基準はカタログ documents/development/static-check-standard.md(A1〜F2 の25カテゴリ)が定義する。カタログは基準であり実行機構ではない — 本スキルがその実行機構(プロダクトへの配線)である。
- 成果物は3つ: カバレッジマップ(採否台帳)・
lint:allコマンド・レビューガイドへの反映 - カテゴリを採用しない場合も「AI レビュー担保」に割り当てて理由を記録する。チェック自体が黙って消えることは許さない(カタログ §3)
- 配線した Lint 資産は実際に実行して動くことを確認するまで配線完了としない
quality-checkスキルの Step 2 は、lint:allが定義されていればそれを静的チェックコマンドとして使う(quality-checkSKILL.md 側に規定済み)。本スキルはそのlint:allを整備する側である
数値(修正サイクル上限・ミューテーションの実行時間バジェット等)は本スキルに置かない。documents/development/quality-policy.md §2 / §5 を正とする。
前提: 事前ビルド Lint 資産
ai-dev-helm init がプロダクトの lint/ 配下に事前ビルド資産を配置している(配置のみで未配線 — コピーされただけではビルドに影響しない)。
lint/
README.md # 資産全体の説明
README-<stack>.md # スタック別の配線ガイド(選択したスタック分のみ)
ast-grep/
<category>/ # 汎用ルールグループ(async / error-handling / hardcode / security / test-quality)
<stack>/ # スタック固有ルール(例: nextjs-react/)
eslint/ # ESLint flat-config プリセット + カスタムルール(nextjs-react)
checkstyle/ # Checkstyle プリセット(java-springboot)
archunit/ # ArchUnit テストクラステンプレート(java-springboot)
どのディレクトリが存在するかは init 時のスタック選択に依存する。Step 2 では README の記述ではなく lint/ 配下の実在を確認すること。
実行フロー
Step 1: スタック検出(package.json / ビルド設定から技術要素を特定)
↓
Step 2: カバレッジマップ作成と採否確認(カタログ25カテゴリ全行、ユーザーと採否を決定)
↓
Step 3: 配線と補完(事前ビルド資産の配線 / 未カバー分の生成 / lint:all 作成 → 実行確認)
↓
Step 4: 登録と除外(CLAUDE.md 登録 / レビューガイド反映 / カバレッジマップ保存)
Step 1: スタック検出
プロダクトの構成ファイルから技術要素を特定する。この結果が Step 2 の採用基準判定(「推奨(該当技術があるプロダクト)」の該当有無)の根拠になる。
| 確認対象 | 特定できる技術要素 |
|---|---|
package.json(dependencies / devDependencies / scripts) |
言語(TS/JS)、FW(Next.js / React / Hono / Express 等)、DB アクセス層(Prisma / Drizzle 等)、テストランナー(Vitest / Jest 等) |
tsconfig.json |
TypeScript の有無・strict 設定(型安全カテゴリの実現手段に影響) |
build.gradle / pom.xml |
Java / Kotlin、Spring Boot、JPA/jOOQ、テスト構成 |
pyproject.toml / requirements.txt |
Python 系スタック |
next.config.* / vite.config.* 等 |
フロントエンド(UI)の有無(F1 の格上げ判定に使う) |
docker-compose.yml / マイグレーションディレクトリ |
DB の有無(D1 クエリ品質の該当判定に使う) |
| リポジトリ構成(モジュール分割・レイヤーディレクトリ) | C1 / C2(レイヤー境界・循環依存)の該当判定 |
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed c44cfffb8fb6
- 4d ago Changed · +22 lines e0a359cbee99
- 8d ago First seen · 203 lines · 94 tokens per session scan A a20c879f348a
lint-scaffolding is a skill published in the GitHub repository Crearize/ai-dev-helm (4 stars, last pushed yesterday), licensed MIT. It adds 94 tokens to every session and 8,050 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
debug-optimize-lcp
Guides debugging and optimizing Largest Contentful Paint (LCP) using Chrome DevTools MCP tools. Use this skill whenever the user asks about LCP performance, slow page loads, Core Web Vitals optimization, or wants to understand why their page's main content takes too long to appear. Also use when the user mentions…
systematic-debugging
Use when debugging a failing test, build error, or runtime issue that isn't immediately obvious. Guides a 4-phase root cause analysis instead of random fix attempts.
diagnose
Trace from a reproduced symptom to the source code that causes it. Pin the specific file and approximate line, rate confidence in the cause and clarity of the fix independently, and always propose a concrete fix.
repro-admin
Reproduce an EmDash admin UI bug. Attach a container, start the demo dev server, drive the admin with agent-browser using the dev-bypass session, and capture the reproduction as screenshots plus a replayable transcript.
log-error-digest
Analyze log files to troubleshoot errors, identify peak error periods, and produce error clustering, frequency statistics, and time distribution reports. Supports JSON, syslog, and Nginx formats with automatic detection. Use when a user uploads a .log file and asks to analyze errors, find patterns, debug issues, or…
byted-util-volcengine-detect-retry
An orchestration workflow for Volcengine Cloud Detect, a service that checks websites or network endpoints from test locations.