vibe-workflow

vibe-workflow is a skill for Claude Code, Codex from KhazP/vibe-coding-prompt-template. It costs 59 tokens per session (1,668 once invoked), scanned A, original, MIT.

A guided five-step process for turning a product idea into a working minimum viable product (MVP), the simplest useful version of a product.

In plain words
What is it for?
It helps start a project, research the idea, write a PRD, design the technology, configure AI coding agents, and build the MVP.
Why use it?
It gives the project a sequence from research and requirements through technical design, AI setup, and building, while covering practical AI and safety decisions.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions subagents; names the AskUserQuestion tool; mentions Claude Code.

Good fit It helps start a project, research the idea, write a PRD, design the technology, configure AI coding agents, and build the MVP.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/khazp/vibe-coding-prompt-template/vibe-workflow
About the project

KhazP/vibe-coding-prompt-template is a collection of templates and workflows that use large language models to turn an idea into a product requirements document, technical design, and minimum viable product plan. It is for people building MVPs with AI coding agents or chat tools, and its catalogue entries support that planning and coding workflow.

KhazP/vibe-coding-prompt-template · 3,050 stars · on GitHub · vibeworkflow.app

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add KhazP/vibe-coding-prompt-template --skill vibe-workflow
Clone the repo
git clone --depth 1 https://github.com/KhazP/vibe-coding-prompt-template

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for vibe-workflow

README.md
[![agentmods](https://agentmods.dev/badge/skills/khazp/vibe-coding-prompt-template/vibe-workflow.svg)](https://agentmods.dev/skills/khazp/vibe-coding-prompt-template/vibe-workflow)
Your own site
<a href="https://agentmods.dev/skills/khazp/vibe-coding-prompt-template/vibe-workflow"><img src="https://agentmods.dev/badge/skills/khazp/vibe-coding-prompt-template/vibe-workflow.svg" alt="Measured on agentmods" height="20"></a>
Per session 59 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,668 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium MCP Rug Pull · line 120
    npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
    Fix: Pin the version: npx @scope/[email protected]
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00059 $0.01668
Opus 5 $0.00030 $0.00834
Sonnet 5 $0.00012 $0.00334
Haiku 4.5 $0.00006 $0.00167

Measured 8d ago against content hash 86c6ef38362e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

vibe-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/vibe-workflow/SKILL.md · 198 lines

How it starts

The opening of the file, as written. The whole thing — 198 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Vibe-Coding Workflow

You are the master orchestrator for the vibe-coding workflow. Guide users through all 5 steps to transform their idea into a working MVP.

The 5-Step Workflow

Idea -> Research -> PRD -> Tech Design -> Agent Config -> Build MVP / AI App
        (20 min)  (15 min)  (15 min)      (10 min)      (1-3 hrs)

Global Rules

  1. Keep users in one continuous project session where possible.
  2. Prefer compaction/summaries over opening empty replacement chats.
  3. Use model family naming in guidance unless the user explicitly requests version pinning.
  4. Verify pricing, quotas, model names, beta features, and vendor-specific agent capabilities against official docs.
  5. Treat product AI and internal automation as first-class possible outputs, not afterthoughts.
  6. Treat AI safety, provider retention/training settings, tool permissions, evals, telemetry, cost ceilings, and builder exit plans as design-time requirements.

Interview Rules

  • Use your native question tool (e.g. AskUserQuestion in Claude Code) to ask questions when available; otherwise ask in plain chat.
  • Ask one question at a time by default: ask, wait for the answer, then continue.
  • If the user answers several questions at once, accept those answers, skip the questions they covered, and carry on with the ones still open. Never re-ask something they already told you.
  • If the user says "I don't know" or seems unsure, propose a sensible default and ask them to confirm it rather than leaving the answer blank.
  • Never invent an answer they did not give. If a reply is vague, ask one short follow-up.
  • Cover every question in the lists below — but let the user's own answers, and anything a ## Handoff Context block already supplies, close them out.

Step 1: Assess Current State

First, check what already exists in the project:

File Status What It Means
docs/research-*.md (or *.txt) Check Research complete
docs/PRD-*.md Check Requirements defined
docs/TechDesign-*.md Check Architecture planned
AGENTS.md Check Ready to build
src/ or app/ Check Building started

Read the full file on GitHub · 198 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 198 lines · 59 tokens per session scan A 86c6ef38362e

Subscribe to this mod's changes

vibe-workflow is a skill published in the GitHub repository KhazP/vibe-coding-prompt-template (3,050 stars, last pushed 2d ago), licensed MIT. It adds 59 tokens to every session and 1,668 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

memstack-business-client-onboarding

Use this skill when the user says 'client onboarding', 'new client', 'onboard client', 'kickoff meeting', 'intake form', 'welcome email', or needs welcome sequences, questionnaires, and setup checklists for new clients. Do NOT use for contracts or invoicing.

cwinvestments/memstack · 65 tokens

memstack-product-mvp-scoper

Use this skill when the user says 'MVP', 'minimum viable product', 'scope the MVP', 'what should I build first', 'strip to core', or needs to define the smallest build that validates a product hypothesis. Do NOT use for full PRDs or roadmap planning.

cwinvestments/memstack · 65 tokens

memstack-product-roadmap-builder

Use this skill when the user says 'roadmap', 'product roadmap', 'quarterly plan', 'now/next/later', 'OKRs', or needs strategic planning with themes, milestones, resource allocation, and stakeholder-ready views. Do NOT use for MVP scoping or sprint-level planning.

cwinvestments/memstack · 67 tokens

memstack-product-user-story-generator

Use this skill when the user says 'user stories', 'write stories', 'backlog', 'sprint planning', 'acceptance criteria', or needs prioritized stories with Given/When/Then criteria and story point estimates. Do NOT use for full PRDs or detailed feature specs.

cwinvestments/memstack · 64 tokens

memstack-marketing-marketplace-submit

Use when the user says 'submit to marketplace', 'publish my skill', 'share this skill', 'list on marketplace', 'submit plugin', 'publish to community', or needs to submit a skill or plugin to a community marketplace via PR. Do NOT use for building skills or writing plugin code.

cwinvestments/memstack · 68 tokens

state

Use when the user says 'update state', 'project state', 'where was I', or at session start to load current context.

cwinvestments/memstack · 29 tokens