moonbit-agent-skills-maintainer

moonbit-agent-skills-maintainer is a skill for Claude Code, Codex from hyfdev/moonbit-agent-skills. It costs 126 tokens per session (1,509 once invoked), scanned A, original, MIT.

A maintenance skill for MoonBit agent skills, covering changes in MoonBit releases and the official language and toolchain documentation. MoonBit is a programming language and toolchain.

In plain words
What is it for?
Use it to audit documentation coverage, update skills for a new MoonBit release, check the full language reference, and run the related tests and evaluations.
Why use it?
It helps identify outdated or missing guidance when the language, compiler, or documentation changes.

Skill for Claude CodeCodex

Written for Claude Code and Codex: user-invocable in frontmatter, but also agents/openai.yaml present. Also seen: mentions AGENTS.md.

Good fit Use it to audit documentation coverage, update skills for a new MoonBit release, check the full language reference, and run the related tests and evaluations.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/hyfdev/moonbit-agent-skills/moonbit-agent-skills-maintainer
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add hyfdev/moonbit-agent-skills --skill moonbit-agent-skills-maintainer
Clone the repo
git clone --depth 1 https://github.com/hyfdev/moonbit-agent-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for moonbit-agent-skills-maintainer

README.md
[![agentmods](https://agentmods.dev/badge/skills/hyfdev/moonbit-agent-skills/moonbit-agent-skills-maintainer/github.svg)](https://agentmods.dev/skills/hyfdev/moonbit-agent-skills/moonbit-agent-skills-maintainer)
Your own site
<a href="https://agentmods.dev/skills/hyfdev/moonbit-agent-skills/moonbit-agent-skills-maintainer"><img src="https://agentmods.dev/badge/skills/hyfdev/moonbit-agent-skills/moonbit-agent-skills-maintainer/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for moonbit-agent-skills-maintainer

Your own site · 80×15
<a href="https://agentmods.dev/skills/hyfdev/moonbit-agent-skills/moonbit-agent-skills-maintainer"><img src="https://agentmods.dev/badge/skills/hyfdev/moonbit-agent-skills/moonbit-agent-skills-maintainer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 126 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,509 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00126 $0.01509
Opus 5 $0.00063 $0.00754
Sonnet 5 $0.00025 $0.00302
Haiku 4.5 $0.00013 $0.00151

Measured 10d ago against content hash 12562b61c67c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

moonbit-agent-skills-maintainer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/moonbit-agent-skills-maintainer/SKILL.md · 51 lines

How it starts

The opening of the file, as written. The whole thing — 51 lines — stays where its author put it; the contents beside it link to each section on GitHub.

MoonBit Agent Skills maintainer

Use this skill in three modes:

  • Audit: compare a MoonBit release with the repository and report gaps without changing version pins.
  • Update: close every release item with evidence, update the product skills, run tests and evals, then re-pin and prepare PR data.
  • Surface audit: compare the complete official language and toolchain documentation surfaces with the two product skills, close missing routes, and test high-value gaps without changing a release pin unless the compiler changed.

This workflow exists because testing only written claims cannot detect omitted knowledge, and a reference file can contain correct knowledge that agents cannot find from the main skill. Source completeness, semantic verification, and discoverability are separate checks.

Required workflow

  1. Read the repository's AGENTS.md, references/release-maintenance.md, references/language-surface-maintenance.md, and references/toolchain-surface-maintenance.md completely. When a change is expected to alter activation, retrieval, or task outcomes, also read references/evaluation.md and evals/CLIENTS.md before selecting tasks or a client.
  2. Start from the single official latest state: read https://cli.moonbitlang.com/version.json, re-pin the exact installed latest toolchain, resolve the current moonbitlang/moonbit-docs main commit, and run both vp run snapshot-language-surface and vp run snapshot-toolchain-surface. If a matching moonbitlang/website release article exists, also run vp run snapshot-release; an absent article never delays the product update. Never hand-author or filter a source inventory.
  3. Read every generated source item. Close each exactly once in the matching coverage.json. Release decisions use verified/documented/out-of-scope/not-actionable claims and evidence; language- and toolchain-surface items use routed/out-of-scope because those inventories prove topic handling, not semantic truth.
  4. For every user-visible item, search both product skills and existing evidence before classifying it. Assign one product owner and make the route explicit in that skill's Feature index, with the reference path and exact feature/diagnostic terms on one physical line.
  5. Treat official documentation as a discovery source, not a compiler oracle. Inspect upstream warning configuration and run an isolated minimal POC with warnings enabled; the official local-type example is a known case that passes only because its package suppresses deprecated_syntax.
  6. Add checked documentation or fixtures for language behavior, command-manifest entries or fixtures for project behavior, and explicit Documented, not executed text plus a direct source for facts the environment cannot execute.
  7. Treat deprecations as migrations: remove the old recommendation, enable the warning, add --deny-warn, prove the old form is caught, and prove the replacement passes under the same settings. A documented-only deprecation still needs separate old-form and replacement evidence and the reason execution is unavailable.
  8. Add a deterministic content eval for each change that materially alters agent behavior. Follow references/evaluation.md: prove the grader with correct and wrong solutions, prefer silent-semantic risks over compiler-self-correcting tasks, and start with one paired AB/BA pass on DeepSeek Pro. Add at most one second repetition, only when the current-skill cell fails or the pair is unstable; use one Kimi fallback pair only if the current-skill cell fails again. Never run a third repetition or repeat unaffected tasks. When evaluating discoverability, use a clean task that does not expose the answer through compiler diagnostics and compare the current skill with a byte-identical purpose-built ablation of the route under test; use a historical tree only when the whole historical skill is the intended variable. Report the result in two layers: a short user-facing comparison first and the complete technical evidence second.
  9. Treat each skill's version as its installed content identity. Whenever files inside a skill directory change, increment metadata.skill-version using SemVer and set metadata.updated-date to the change date: patch for corrections or metadata, minor for new compatible coverage, and major for an incompatible rename or scope change. Change metadata.verified-date only after rerunning the pinned verification. Keep the public README status in sync; validate-skills checks the metadata format and README projection.
  10. Run vp run verify-latest-upstream, both source-verification gates, both surface-coverage gates, and vp run check-release-coverage. In update mode, close the current language and toolchain surfaces and every published release inventory before changing fixture stamps, skill pins, or README status. When the latest compiler has no website article, the exact toolchain and documentation-surface pins remain authoritative.
  11. Run the full repository check sequence from AGENTS.md, all relevant pinned targets, targeted model evals, and the required independent reviews.

Read the full file on GitHub · 51 lines

Files

What ships with it

5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 51 lines · 126 tokens per session scan A 12562b61c67c

Subscribe to this mod's changes

moonbit-agent-skills-maintainer is a skill published in the GitHub repository hyfdev/moonbit-agent-skills (6 stars, last pushed 1mo ago), licensed MIT. It adds 126 tokens to every session and 1,509 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.