verify-module

verify-module is a skill for Claude Code from fengshao1227/ccg-workflow. It costs 61 tokens per session (944 once invoked), scanned A, original, MIT.

A module-checking skill that scans a project’s folders, code, and documentation. It expects each module to include a README.md and DESIGN.md, which explain how the module is used and why it was designed that way.

In plain words
What is it for?
Use it to check new or refactored modules, review README and design documents, and run a pre-commit completeness check.
Why use it?
It catches missing files and mismatches between what the code does and what the documentation says before delivery or submission.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the ccg plugin — 58 skills, 12 commands, 7 agents shipped together

About the project

CCG is a command-line workflow engine that coordinates Claude, Codex, Gemini, and other models as specialized collaborators on coding tasks. It is used to analyze requests, choose a strategy, delegate work to model-specific roles, and combine their results. The catalogue entries provide the skills, commands, agents, and plugin that implement this workflow.

fengshao1227/ccg-workflow · 5,874 stars · on GitHub · ccg.fengshao1227.com

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/fengshao1227/ccg-workflow/verify-module
Any agent
npx skills add fengshao1227/ccg-workflow --skill verify-module
Clone the repo
git clone --depth 1 https://github.com/fengshao1227/ccg-workflow

Made for: Claude Code.

Or install ccg, the plugin that ships this one along with the rest of its 58 skills, 12 commands, 7 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for verify-module

README.md
[![agentmods](https://agentmods.dev/badge/skills/fengshao1227/ccg-workflow/verify-module.svg)](https://agentmods.dev/skills/fengshao1227/ccg-workflow/verify-module)
Your own site
<a href="https://agentmods.dev/skills/fengshao1227/ccg-workflow/verify-module"><img src="https://agentmods.dev/badge/skills/fengshao1227/ccg-workflow/verify-module.svg" alt="Measured on agentmods" height="20"></a>
Per session 61 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 944 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00061 $0.00944
Opus 5 $0.00030 $0.00472
Sonnet 5 $0.00012 $0.00189
Haiku 4.5 $0.00006 $0.00094

Measured 6d ago against content hash e400cb5581f1, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

verify-module scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/module_scanner.js), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

2 near-identical copies found in the catalogue:

dsh-ccg/skills/verify-module/SKILL.md · 128 lines

What it actually says

⚖ 校验关卡 · 模块完整性

核心原则

模块 = 代码 + README.md + DESIGN.md
缺一不可,残缺即异端

自动扫描

运行扫描脚本(跨平台):

# 在 verify-module 目录下运行(推荐)
node scripts/module_scanner.js <模块路径>
node scripts/module_scanner.js <模块路径> -v      # 详细模式
node scripts/module_scanner.js <模块路径> --json  # JSON 输出

校验标准

一个完整的模块必须包含:

module/
├── README.md      # 必须 - 模块是什么、为什么存在
├── DESIGN.md      # 必须 - 设计决策、权衡取舍
├── src/           # 代码实现
└── tests/         # 测试用例(如适用)

检测项

必须存在

文件 说明 缺失后果
README.md 模块说明文档 🔴 阻断交付
DESIGN.md 设计决策文档 🔴 阻断交付

推荐存在

文件/目录 说明 缺失后果
tests/ 测试目录 🟠 警告
__init__.py Python 包标识 🟡 提示
.gitignore Git 忽略配置 🔵 信息

README.md 必须包含

  • 模块名称与定位 — 一句话说明是什么
  • 存在理由 — 为什么需要这个模块
  • 核心职责 — 做什么、不做什么
  • 依赖关系 — 依赖谁、被谁依赖
  • 快速使用 — 最简示例

DESIGN.md 必须包含

  • 设计目标 — 要解决什么问题
  • 方案选择 — 考虑过哪些方案、为何选当前方案
  • 关键决策 — 重要的技术决策及理由
  • 已知限制 — 当前方案的局限性
  • 变更历史 — 重大变更记录

自动触发时机

场景 触发条件
新建模块 模块创建完成时
模块重构 重构完成时
提交前 代码提交前检查

校验流程

1. 运行 module_scanner.js 自动扫描
2. 检查文件结构是否完整
3. 检查 README.md 各项是否齐全
4. 检查 DESIGN.md 各项是否齐全
5. 检查代码与文档描述是否一致
6. 输出校验报告

校验报告格式

## 模块校验报告

### 模块: <模块名>

✓ 通过 | ✗ 未通过

### 文件检查
- README.md: ✓ 存在 / ✗ 缺失
- DESIGN.md: ✓ 存在 / ✗ 缺失
- tests/: ✓ 存在 / ⚠️ 缺失

### 内容检查
- README 完整性: ✓ 完整 / ⚠️ 缺少 [X, Y, Z]
- DESIGN 完整性: ✓ 完整 / ⚠️ 缺少 [X, Y, Z]

### 结论
可交付 / 需补充后交付

快速修复

如果缺少文档,可使用文档生成器:

/gen-docs <模块路径>

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 128 lines · 61 tokens per session scan A e400cb5581f1

Subscribe to this mod's changes

verify-module is a skill published in the GitHub repository fengshao1227/ccg-workflow (5,874 stars, last pushed 2d ago), licensed MIT. It adds 61 tokens to every session and 944 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

refactoring-workflow

Improve the structure of existing code without changing its behaviour, in small verified steps under a green test suite. Use when the user asks to refactor, clean up, restructure or simplify code, wants to reduce duplication or coupling, is preparing a codebase for a feature it cannot currently accommodate, or when…

personamanagmentlayer/pcl · 83 tokens

code-review-workflow

Review a change in a fixed order — context, correctness, security, then style — and write feedback that is actionable and ranked by severity. Use when the user asks for a code review, wants a pull request or diff reviewed before merge, asks whether a change is safe to ship, or when the task involves reviewing a patch…

personamanagmentlayer/pcl · 88 tokens

airflow-expert

Expert-level Apache Airflow orchestration, DAGs, operators, sensors, XComs, task dependencies, and scheduling. Use when the user mentions orchestration, DAGs, workflow, scheduling, or data pipeline, or when the task involves DAG Fundamentals, Task Dependencies and Branching, Dynamic Task Generation, or Operators and…

personamanagmentlayer/pcl · 72 tokens

git-expert

Expert-level Git version control with advanced workflows, branching strategies, and best practices for team collaboration. Use when the user mentions version control, collaboration, or workflow, or when the task involves Essential Git Commands, Advanced Git Techniques, Branching Strategies, or Conflict Resolution.

personamanagmentlayer/pcl · 57 tokens

absolute-simplify

Use when the user wants to simplify, clean up, refactor, tidy, or refine code — their staged/unstaged git changes or a target file/path. Reduces complexity, flattens nesting, removes redundancy and dead code, scores each change by value (holding low-value churn), then runs tests to prove nothing broke. Invoke on…

maddhruv/absolute · 178 tokens

absolute-ui

Build polished, intentional UIs with concrete CSS/Tailwind values — typography, color, layout, spacing, dark mode, accessibility, animations, components. Encodes specific, opinionated rules with exact values, not vague advice. Covers buttons, cards, forms, tables, navigation, dashboards, landing pages, onboarding, and…

maddhruv/absolute · 121 tokens