Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add cz1993/vibe-coding-repository-standard --skill repository-bootstrapgit clone --depth 1 https://github.com/cz1993/vibe-coding-repository-standardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cz1993/vibe-coding-repository-standard/repository-bootstrap)<a href="https://agentmods.dev/skills/cz1993/vibe-coding-repository-standard/repository-bootstrap"><img src="https://agentmods.dev/badge/skills/cz1993/vibe-coding-repository-standard/repository-bootstrap/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cz1993/vibe-coding-repository-standard/repository-bootstrap"><img src="https://agentmods.dev/badge/skills/cz1993/vibe-coding-repository-standard/repository-bootstrap.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.00408 |
| Opus 5 | $0.00020 | $0.00204 |
| Sonnet 5 | $0.00008 | $0.00082 |
| Haiku 4.5 | $0.00004 | $0.00041 |
Grade A, and why
repository-bootstrap scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Repository Bootstrap
Inputs
- target repository root;
- approved standard/kit path and version;
- mode: audit-only or audit-and-apply;
- Git action: none, commit, or explicitly authorized push/PR;
- optional project context.
Constraints
- Audit before editing.
- Protect uncommitted work.
- Do not access production, client data, live databases, deployments, schedules, or paid external services.
- Do not move/rename application code, change dependencies, implement features, or perform broad cleanup.
- Do not enable memories, hooks, network access, MCP servers, or optional indexing tools.
- Preserve framework-native conventions and merge existing governance files carefully.
Procedure
- Read the approved canonical standard and bootstrap plan.
- Inspect Git state and create a dedicated branch/worktree before writes.
- Inventory the stack, layout, commands, entry points, tests, CI, documentation, scripts, and agent/tool configuration.
- Select a project profile and risk class.
- Verify candidate commands safely; never publish unrun commands as verified.
- Produce a proposal listing facts, unknowns, files, exceptions, non-goals, and validation.
- In apply mode, add the smallest compatible governance surface.
- Run validator tests, the standard validator, and safe project checks.
- Use the independent read-only reviewer.
- Commit locally only when gates pass and report exact outcomes.
Outputs
- selected profile and risk;
- governance diff;
- verified command register;
- standard manifest and exceptions;
- validator/test evidence;
- unresolved risks and placeholders;
- branch/commit/PR identifiers when applicable.
Completion
Completion means baseline governance is safe and validated. It does not mean the application architecture or documentation is fully recovered.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 51 lines · 41 tokens per session scan A 72b5e57ffb34
repository-bootstrap is a skill published in the GitHub repository cz1993/vibe-coding-repository-standard (21 stars, last pushed 25d ago), licensed Apache-2.0. It adds 41 tokens to every session and 408 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
jira-issue-deliver
Autonomously deliver one Jira issue from intake to a ready GitHub pull request. Use only when the user authorizes implementation, commits, pushes, PR state changes, CI remediation, and resolution of requested automated review feedback.
roadmap-task-deliver
Deliver the first eligible unfinished roadmap task through implementation, review, green CI, PR merge, and a task-status update. Use for autonomous delivery from local roadmap and task files. Files can be outside the code repository or outside Git.
create-project
Scaffold a new project with git, .gitignore, CLAUDE.md, AGENTS.md, GitHub repo, and memory directory. Use when user says "start a new project", "create a repo", or "scaffold an app". Creates the project as a sibling to the .claude/ config directory.
create-issue
Draft and submit a GitHub issue from a user idea or bug description, with bilingual body and correct labels.
mcore-split-pr
Split a PR into multiple PRs to reduce the number of required CODEOWNERS reviewer groups.
goal-issues-and-release
Clear the open issue backlog and then cut a release, in one autonomous run: use the batch-all-issues skill to resolve every open issue, then the goal-release skill to draft, merge, and see the release through publication. Never asks the user anything — every decision is made autonomously, and blockers are reported at…