context-align

A checker for project guidance files such as AGENTS.md and SKILL.md. It compares their instructions with the actual files, dependencies, versions, and build commands in the codebase.

In plain words
What is it for?
Use it to verify technology and version claims, file paths, test or build commands, and whether documented skills still match the project.
Why use it?
Project instructions can become outdated after dependencies, folders, or scripts change. Finding these mismatches prevents an AI coding session from following incorrect guidance.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/fending/context-engineering/context-align
Any agent
npx skills add fending/context-engineering --skill context-align
Clone the repo
git clone --depth 1 https://github.com/fending/context-engineering

Made for: Claude Code, Codex.

Per session 38 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 941 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00038 $0.00941
Opus 5 $0.00019 $0.00470
Sonnet 5 $0.00008 $0.00188
Haiku 4.5 $0.00004 $0.00094

Measured yesterday against content hash c0904f874615, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

context-align scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

examples/claude-config/skills/context-align/SKILL.md · 74 lines

How it starts

The opening of the file, as written. The whole thing — 74 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Context Align

Cross-reference your context files against the actual codebase to find drift before it misleads an AI session.

What This Skill Does

Reads all context sources and checks them against the filesystem and project configuration. Checks are ordered by impact:

  1. Tech stack references vs dependencies:

    • Package names in AGENTS.md vs package.json / requirements.txt / go.mod / Cargo.toml
    • Version claims vs actual installed versions
    • Framework references (e.g., "React 18" when package.json shows React 19)
  2. Directory and file references vs filesystem:

    • Paths mentioned in context files that don't exist
    • Directory structures described that don't match reality
    • References to files that have been moved or renamed
  3. Build/test commands vs actual scripts:

    • Commands in context files vs package.json scripts / Makefile targets / CI configs
    • "Run npm run test" when the actual script is npm test or pnpm test
  4. Skill relevance:

    • Skill descriptions referencing technologies not in this project's stack
    • Skills that reference tools or workflows that no longer exist
  5. Cascading contradictions:

    Find every AGENTS.md in the project tree (root, subdirectories, global if present). Compare what each level says about the same concern:

    • Test runner (Vitest vs Jest vs Mocha, pytest vs unittest)
    • Linter and formatter (ESLint vs Biome, Prettier vs project formatter)
    • Package manager (npm vs pnpm vs yarn vs bun)
    • Framework version (React 18 vs 19, Next.js 14 vs 15)
    • Import style (ESM vs CommonJS, aliases vs relative paths)
    • Overlapping "Do NOT" rules that widen or narrow the same boundary

    When two levels disagree, report both files and what each says. Standard cascading precedence: most specific level wins. If the disagreement looks intentional (legacy module keeping its own test runner), flag it as undocumented -- it should have a comment explaining the exception.

Read the full file on GitHub · 74 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 74 lines · 38 tokens per session scan A c0904f874615

Subscribe to this mod's changes

context-align is a skill published in the GitHub repository fending/context-engineering (11 stars, last pushed 5mo ago), licensed MIT. It adds 38 tokens to every session and 941 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

ccc

This skill should be used when code search is needed (whether explicitly requested or as part of completing a task), when indexing the codebase after changes, or when the user asks about ccc, cocoindex-code, or the codebase index. Trigger phrases include 'search the codebase', 'find code related to', 'update the…

cocoindex-io/cocoindex-code · 80 tokens

feature-flags-audit

Audit and inventory all feature flags declared in the Packmind codebase. Use when the user asks to list, audit, review, or inventory feature flags, asks which flags are active, wants to know what a flag gates, or asks which flags are opened to a given domain/user. Produces a synthetic markdown table with each flag…

PackmindHub/packmind · 93 tokens

packmind-create-standard

Guide for creating coding standards via the Packmind CLI. This skill should be used when users want to create a new coding standard (or add rules to an existing standard) that captures team conventions, best practices, or coding guidelines for distribution to GitLab Duo.

PackmindHub/packmind · 57 tokens

create-run-e2e-tests

Guide for writing and running new Playwright end-to-end tests in the apps/e2e-tests/ directory of the Packmind monorepo. Use this skill whenever you add or modify a spec that drives the real frontend and API — for example testing a user flow, a new page/route, a feature behind a flag, or a UI behavior end-to-end.…

PackmindHub/packmind · 175 tokens

working-with-pm-design-kit

This skill provides guidance for using the Packmind UI component library (@packmind/ui). It should be used when building or modifying frontend UI with PM-prefixed components, working with Chakra UI in the Packmind codebase, or when questions arise about available components, theming, or layout patterns. Triggers on…

PackmindHub/packmind · 91 tokens

packmind-onboard

Complete automated onboarding: analyzes codebase, creates package, and generates standards & commands via CLI. Automatic package creation when none exist, user selection when packages are available.

PackmindHub/packmind · 38 tokens