vibe-build

vibe-build is a skill for Claude Code, Codex from KhazP/vibe-coding-prompt-template. It costs 43 tokens per session (1,392 once invoked), scanned A, original, MIT.

A guided implementation process for building a minimum viable product, or MVP, from an existing project plan. It works through features incrementally and tests each one.

In plain words
What is it for?
Use it to start coding an MVP, follow an AGENTS.md plan, implement features, run tests, and continue work across sessions.
Why use it?
It gives coding work a defined source of truth and checks progress as features are added. It also identifies the planning documents needed before implementation.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents); mentions AGENTS.md.

Good fit Use it to start coding an MVP, follow an AGENTS.md plan, implement features, run tests, and continue work across sessions.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/khazp/vibe-coding-prompt-template/vibe-build
About the project

KhazP/vibe-coding-prompt-template is a collection of templates and workflows that use large language models to turn an idea into a product requirements document, technical design, and minimum viable product plan. It is for people building MVPs with AI coding agents or chat tools, and its catalogue entries support that planning and coding workflow.

KhazP/vibe-coding-prompt-template · 3,053 stars · on GitHub · vibeworkflow.app

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add KhazP/vibe-coding-prompt-template --skill vibe-build
Clone the repo
git clone --depth 1 https://github.com/KhazP/vibe-coding-prompt-template

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for vibe-build

README.md
[![agentmods](https://agentmods.dev/badge/skills/khazp/vibe-coding-prompt-template/vibe-build/github.svg)](https://agentmods.dev/skills/khazp/vibe-coding-prompt-template/vibe-build)
Your own site
<a href="https://agentmods.dev/skills/khazp/vibe-coding-prompt-template/vibe-build"><img src="https://agentmods.dev/badge/skills/khazp/vibe-coding-prompt-template/vibe-build/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for vibe-build

Your own site · 80×15
<a href="https://agentmods.dev/skills/khazp/vibe-coding-prompt-template/vibe-build"><img src="https://agentmods.dev/badge/skills/khazp/vibe-coding-prompt-template/vibe-build.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 43 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,392 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 4 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Anti-Refusal · line 148
    Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
    Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
  • medium Excessive Agency · line 160
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
  • medium Excessive Agency · line 163
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
  • medium Excessive Agency · line 167
    Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
    Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00043 $0.01392
Opus 5 $0.00022 $0.00696
Sonnet 5 $0.00009 $0.00278
Haiku 4.5 $0.00004 $0.00139

Measured 9d ago against content hash ef4aee0fec9e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

vibe-build scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/vibe-build/SKILL.md · 206 lines

How it starts

The opening of the file, as written. The whole thing — 206 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Vibe-Coding MVP Builder

You are the build agent for the vibe-coding workflow. This is Step 5 - the final step where you build the actual MVP.

Your Role

Execute the plan in AGENTS.md to build the MVP incrementally, testing after each feature.

Session Continuity

  1. Continue in the active project session whenever possible.
  2. If context is too long, summarize/compact before resetting.
  3. If session reset is unavoidable, re-anchor with AGENTS state + recent completed work + next task.

Naming Policy

Use model family names in recommendations unless explicit version pinning is requested by the user. Verify fast-moving vendor claims before relying on them.

Prerequisites

Check for required files:

  1. AGENTS.md - REQUIRED (master plan)
  2. agent_docs/ directory - REQUIRED (detailed specs)
  3. docs/PRD-*.md - Reference for requirements
  4. docs/TechDesign-*.md - Reference for implementation
  5. REVIEW-CHECKLIST.md - Verification and safety gates

If missing, suggest running /vibe-agents first.

Workflow: Plan -> Execute -> Verify

1. Plan Phase

Before any coding:

  1. Read AGENTS.md to understand current phase and tasks
  2. Load relevant agent_docs/ files for the current task
  3. Propose a brief implementation plan
  4. Wait for user approval before proceeding

Example:

Plan for: User Authentication

  1. Set up auth provider (Supabase/Firebase)
  2. Create login/signup components
  3. Add protected route wrapper
  4. Test login flow

Shall I proceed?

2. Execute Phase

After approval:

  1. Implement ONE feature at a time
  2. Follow patterns in agent_docs/code_patterns.md
  3. Use tech stack from agent_docs/tech_stack.md
  4. Keep changes focused and minimal
  5. Commit after each working feature

3. Verify Phase

After each feature:

  1. Run the documented commands in agent_docs/testing.md
  2. Run linter/typecheck/build if the project defines them
  3. Manual/browser/device smoke test if needed
  4. Fix any issues before moving on
  5. Update AGENTS.md current state

Read the full file on GitHub · 206 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 206 lines · 43 tokens per session scan A ef4aee0fec9e

Subscribe to this mod's changes

vibe-build is a skill published in the GitHub repository KhazP/vibe-coding-prompt-template (3,053 stars, last pushed 3d ago), licensed MIT. It adds 43 tokens to every session and 1,392 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

vibe-coding-guardian

Behavioral modifier for AI coding assistants working with non-developers. Adapts AI behavior by risk level — fast for small changes, cautious for risky ones. Prevents debug death spirals, translates errors to plain language, auto-checkpoints with git, and runs periodic health checks. Always active, zero manual trigger…

kanyun-inc/reskill · 73 tokens

moai-workflow-thinking

Sequential Thinking MCP for structured step-by-step analysis via --deepthink flag. Separate from UltraThink which is Claude's native extended reasoning mode. Use for multi-step analysis or architecture decisions.

modu-ai/moai-adk · 43 tokens

code-mate-antigravity

Runs Antigravity CLI headlessly for repository analysis and coding tasks. Use when the user asks to delegate work to Antigravity CLI or compare its result with another coding agent.

CherryHQ/cherry-studio · 43 tokens

code-mate-openclaw

Runs a local OpenClaw agent non-interactively and returns its structured response. Use when the user asks to delegate a bounded task to the OpenClaw main agent.

CherryHQ/cherry-studio · 41 tokens

code-mate-qoder

Runs the Code Mate Qoder CN CLI non-interactively with structured output. Use when the user asks to delegate a bounded coding task to Qoder.

CherryHQ/cherry-studio · 36 tokens

office-hours

YC Office Hours — two modes. Startup mode: six forcing questions that expose demand reality, status quo, desperate specificity, narrowest wedge, observation, and future-fit. Builder mode: design thinking brainstorming for side projects, hackathons, learning, and open source. Saves a design doc. Use when asked to…

GCWing/BitFun · 168 tokens