Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/dqz00116/skill-lib/devflownpx skills add Dqz00116/skill-lib --skill devflowgit clone --depth 1 https://github.com/Dqz00116/skill-libWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00024 | $0.01260 |
| Opus 5 | $0.00012 | $0.00630 |
| Sonnet 5 | $0.00005 | $0.00252 |
| Haiku 4.5 | $0.00002 | $0.00126 |
Grade A, and why
devflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 167 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DevFlow
CLI-driven progressive disclosure workflow. Advance one verified step at a time.
Overview
DevFlow enforces a disciplined development process where each step must be completed and verified before advancing. It uses TOML workflow definitions, gate-based verification, and a devflow done checkpoint system.
When to Use
- Project has
.devflow/workflows/*.tomlfiles - You see
devflowcommands in project docs - Task requires writing requirements, design docs, or code in stages
- You need gate-based verification (tests must pass before advancing)
When NOT to use: Project has no .devflow/ directory — this is a standard project, use normal development.
Quick Start
devflow --help # Verify CLI is installed
If devflow is not found, install first:
pip install agent-devflow # From PyPI
Then start the workflow:
devflow list-workflows # See available workflows
devflow select-workflow MODE-A # Pick one
devflow current # Read current step
Core Loop (ALWAYS follow this)
1. devflow current -> Read what to do
2. Execute the step -> Write code, create docs, run tests
3. devflow done -> Check gates -> advance or retry
4. Repeat until "Workflow complete!"
Core rule: Only advance through devflow done. Never skip steps. Never create files for future steps.
Commands
| Command | Purpose |
|---|---|
devflow current |
Show current step instruction |
devflow done |
Check gates and advance |
devflow back |
Go back one step |
devflow approve ITEM |
Mark item as user-approved |
devflow set KEY VALUE |
Set state variable |
devflow list-workflows |
List available workflows |
devflow select-workflow ID |
Select and start a workflow |
devflow run |
Start autonomous Ralph Loop |
Gate Types
Gates block advancement until satisfied:
file_exists:path— File must existfile_contains:path:content— File must contain textcommand_success:{test_command}— Command exits 0user_approved:ITEM— Requiresdevflow approve ITEMstate_set:var— State variable must be set
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 167 lines · 24 tokens per session scan A 495c40e985fe
devflow is a skill published in the GitHub repository Dqz00116/skill-lib (22 stars, last pushed 3mo ago), licensed MIT. It adds 24 tokens to every session and 1,260 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
academic-paper-drafting
End-to-end academic paper drafting for CHI, HBR, journals, and conferences with venue-specific templates, drafting workflows, and revision strategies.
research-first-development
Build knowledge bases that build software — research before code, teach before execute.
agent-governance
Patterns for adding safety, trust, and policy enforcement to AI agent systems -- control which tools agents can call, what content they process, and maintain accountability through audit trails.
mall-self-curation
Operate the Plugin Mall's canonical vendor, contribution, scan, score, render, and validation workflows. Use when importing or refreshing curated plugins, reviewing contributor PRs, running first-party maintenance, debugging the weekly catalog refresh, or onboarding to Mall internals.
threejs-animation
Three.js animation - keyframe animation, skeletal animation, morph targets, animation mixing. Use when animating objects, playing GLTF animations, creating procedural motion, or blending animations.
loop-implement
The single implementation loop. It plans via wiki-plan (step 2, required) into an ordered, wiki-navigated task list, then executes those tasks in order, each loading only its named wiki pages, writing tests first, getting an independent test-quality audit, and judging against done; on failure it reflects and retries…