Aegis is a method pack that guides coding agents to inspect a project's baseline, make bounded changes, and verify their work with fresh evidence. It is for people using coding-agent hosts who want fewer unverified changes and less unnecessary process. The catalogue add-ons implement this method through skills, instructions, commands, a hook, and a plugin.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add GanyuanRan/Aegis --skill ui-ux-governancegit clone --depth 1 https://github.com/GanyuanRan/AegisWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ganyuanran/aegis/ui-ux-governance)<a href="https://agentmods.dev/skills/ganyuanran/aegis/ui-ux-governance"><img src="https://agentmods.dev/badge/skills/ganyuanran/aegis/ui-ux-governance/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ganyuanran/aegis/ui-ux-governance"><img src="https://agentmods.dev/badge/skills/ganyuanran/aegis/ui-ux-governance.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00045 | $0.00920 |
| Opus 5.5 | $0.00018 | $0.00368 |
| Sonnet 5.5 | $0.00009 | $0.00184 |
| Haiku 4.5 | $0.00005 | $0.00092 |
Grade A, and why
ui-ux-governance scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.
UI/UX Governance
Purpose and ownership
Apply experience rules as a compositional skill. Keep design approval, implementation, review dispatch, and completion with the existing task owner. For direct requests, deliver the requested scoped design/review; authorized implementation continues through its appropriate workflow.
Core principle: Under an equivalent user goal and accepted requirements, prefer lower total user effort while preserving accessibility, informed control, and necessary safeguards. Consider understanding, decisions, operations, waiting, and recovery; click count alone is insufficient.
Project requirements, design systems, and accepted references define the product. This skill supplies portable decision and evidence discipline, not fixed styles, a framework, a universal visual grade, or runtime authority.
Default path
- Identify the affected user task, current phase, and actual user-facing delta. Preserve the primary workflow. Internal backend changes without an effect on interface behavior, displayed information, or recovery do not apply.
- Read the smallest existing requirement/design/component evidence. Reuse accepted patterns. Surface missing decision-changing requirements; resolve ordinary reversible details using project context rather than adding gates.
- Select only rules affected by this task. A button-label correction needs meaning, accessible-name, and fit checks, not a full redesign or all references.
- Express observable acceptance and verification in the existing design, plan, implementation task, or review findings. Compare alternatives by total effort for the target users; preserve controls and error recovery.
- At review/delivery, connect claims to fresh evidence and state uncovered scope. Fold results into the current findings/verification report. A build, screenshot, or automated scan alone cannot establish the whole experience.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 17d ago First seen · 88 lines · 45 tokens per session scan A 7d7e73fca9d0
ui-ux-governance is a skill published in the GitHub repository GanyuanRan/Aegis (1,358 stars, last pushed today), licensed MIT. It adds 45 tokens to every session and 920 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-02.
Other skills, from other repositories
desktop-brand-builder
Generate a branded Qwen Code desktop package from the Tauri desktop shell using a minimal brandId and logo. Use when the user wants a custom, white-label, or rebranded desktop client, installer, DMG/EXE/AppImage/deb, or one-click brand build on top of packages/desktop.
jetbrains-session
Use when working on the JetBrains chat session UI or SessionModel/SessionController — transcript cards, retained Swing lifecycle, session background surfaces, editor-derived styling, adding session events, and session/controller testing with FakeSessionRpcApi.
codex-skin-pack-installer
Install Codex themes and Codex skin packs with npx skills. Use this skill when a user wants Codex to find, download, validate, apply, switch, remix, or restore Codex desktop themes such as caishen-readable, caishen-lite, mythic-guardian-noir, global-founder-bright, export-night, or caishen-max. It stages verified…
ui-mobile
Mobile UI patterns - React Native, iOS/Android, touch targets.
ui-web
Web UI - glassmorphism, Tailwind, dark mode, accessibility.
design-review
Designer's eye QA: finds visual inconsistency, spacing issues, hierarchy problems, AI slop patterns, and slow interactions — then fixes them. Iteratively fixes issues in source code, committing each fix atomically and re-verifying with before/after screenshots. For plan-mode design review (before implementation), use…