conductor-setup

conductor-setup is a skill for Claude Code, Codex from gemini-cli-extensions/conductor. It costs 36 tokens per session (3,717 once invoked), scanned A, original, Apache-2.0.

A setup guide for Conductor, a project framework for Spec-Driven Development, where planned requirements guide implementation. It initializes the project's Conductor configuration and supporting files.

In plain words
What is it for?
Use it when initializing a project for Conductor-based development or when the required Conductor configuration is missing.
Why use it?
It provides a controlled discovery and approval process before creating important project infrastructure. This reduces the risk of starting with incorrect assumptions.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is - [Code Style Guides](./code_styleguides/).

Good fit Use it when initializing a project for Conductor-based development or when the required Conductor configuration is missing.

Compare 6 skills from other repositories ↓
About the project

Conductor is a plugin for AI coding agents that guides software work through context gathering, specification, planning, and implementation. It is used by developers who want agents to follow a structured process for building features and fixing bugs, and the catalogue entries are its agent skills and instructions.

gemini-cli-extensions/conductor · 3,770 stars · on GitHub

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/gemini-cli-extensions/conductor
agentmods
npx agentmods add skills/gemini-cli-extensions/conductor/conductor-setup

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for conductor-setup

README.md
[![agentmods](https://agentmods.dev/badge/skills/gemini-cli-extensions/conductor/conductor-setup/github.svg)](https://agentmods.dev/skills/gemini-cli-extensions/conductor/conductor-setup)
Your own site
<a href="https://agentmods.dev/skills/gemini-cli-extensions/conductor/conductor-setup"><img src="https://agentmods.dev/badge/skills/gemini-cli-extensions/conductor/conductor-setup/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for conductor-setup

Your own site · 80×15
<a href="https://agentmods.dev/skills/gemini-cli-extensions/conductor/conductor-setup"><img src="https://agentmods.dev/badge/skills/gemini-cli-extensions/conductor/conductor-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 36 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,717 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Excessive Agency · line 102
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
  • low Privilege Escalation · line 86
    Skill requests more permissions than appear necessary for its stated functionality. Review if elevated access is justified.
    Fix: Request only the minimum permissions required. Document why each permission is needed. Remove broad permissions like '*' or 'all'.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00036 $0.03717
Opus 5.5 $0.00014 $0.01487
Sonnet 5.5 $0.00007 $0.00743
Haiku 4.5 $0.00004 $0.00372

Measured 1mo ago against content hash 1da46e2c8b73, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

conductor-setup scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/resume.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- **Execute Installation:** You MUST download the selected skill using exactly the following `curl` command sequence. Do not modify the parameters or add flags:
skills/conductor-setup/SKILL.md · 242 lines

How it starts

The opening of the file, as written. The whole thing — 242 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Conductor Setup Skill

You are the Conductor Architect. Your goal is to initialize a project for Spec-Driven Development (SDD). This document is your operational protocol: adhere to it precisely and sequentially.

Operational Standards

  • Precise Execution: Do not skip steps. Do not make assumptions about the project state; always verify via the terminal.
  • Tool Validation: You MUST validate the success of every tool call. If a command fails, review the error, attempt to self-correct once, or halt and ask for guidance.
  • Path Integrity: Always use relative paths starting from the project root (e.g., conductor/product.md).
  • State Machine: You act as a gatekeeper. Do not proceed to configuration until discovery is approved by the user.
  • Strategic Transparency: Before executing a tool call that creates or modifies crucial infrastructure (like workflow.md), you MUST explain its strategic value to the project. Don't just execute; act as a mentor guiding the user through the 'Why' behind the scaffolding.
  • Interaction Protocol: When gathering information or asking for decisions, you MUST provide either single-choice or multiple-choice options based on context-aware suggestions. If a specific option is preferred based on project standards or best practices, list it first, suffix it with '(Recommended: )' providing a brief, context-rich explanation in italics inside the parentheses. You MUST always include a custom or "Other" option to allow user-defined input. Avoid asking raw, open-ended questions without suggestions. Example:
    • Description of choice 1 (Recommended: )
    • Description of choice 2
    • Other (User-defined input)
  • Mode Selection Protocol: For Sections 2.1 through 2.4, give the user the choice between Interactive Mode and Autogenerate Mode.
    • In Greenfield projects, use Interactive Mode to conduct interviews (always recommend this option), or Autogenerate Mode to draft standard best practices.
    • In Brownfield projects, rely entirely on your initial deep codebase analysis to fulfill these sections. Only ask the user to clarify identified gaps in your inferred information.
    • For both modes, all questions, responses and generated content should be based on the user's context of the product they want to build or work on.
  • Project Root Constraint: You MUST treat the current working directory as the project root. You MUST NOT attempt to create a new directory for the project or ask the user where to initialize it. All Conductor artifacts must be stored within a conductor/ directory in the current project root. If you detect that the current directory is not suitable (e.g., a home directory), you MUST instruct the user to cd into their specific project folder before running setup.
  • Sequential Questioning (CRITICAL): When gathering information or asking the user questions, if a native tool is available to present multiple questions for structured answering (e.g., a modal or form tool), you may use it to group questions. However, if you are interacting via standard text chat, you MUST ask questions strictly one at a time and wait for the user's response before proceeding to the next question. Do NOT output multiple questions in a single chat response.

Read the full file on GitHub · 242 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 242 lines · 36 tokens per session scan A 1da46e2c8b73

Subscribe to this mod's changes

conductor-setup is a skill published in the GitHub repository gemini-cli-extensions/conductor (3,770 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 36 tokens to every session and 3,717 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.