Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/kouroshez/coding-osnpx agentmods add skills/kouroshez/coding-os/react-native-patternsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kouroshez/coding-os/react-native-patterns)<a href="https://agentmods.dev/skills/kouroshez/coding-os/react-native-patterns"><img src="https://agentmods.dev/badge/skills/kouroshez/coding-os/react-native-patterns/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kouroshez/coding-os/react-native-patterns"><img src="https://agentmods.dev/badge/skills/kouroshez/coding-os/react-native-patterns.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 302 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 449 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 483 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Excessive Agency · line 90 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00116 | $0.04836 |
| Opus 5 | $0.00058 | $0.02418 |
| Sonnet 5 | $0.00023 | $0.00967 |
| Haiku 4.5 | $0.00012 | $0.00484 |
Grade A, and why
react-native-patterns scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 513 lines — stays where its author put it; the contents beside it link to each section on GitHub.
React Native (Bare) — Patterns
For React Native 0.76+ where the New Architecture is the default. Bare RN, not Expo (Expo gets its own template later). TypeScript throughout. Hexagonal client architecture (see src/core/skills/hexagonal-architecture).
When to Use This Skill
- Writing or reviewing a
.tsxscreen /.tshook /.tsuse case adapter undersrc/mobile/src/. - Authoring a TurboModule / Fabric component (Swift/Obj-C/Kotlin/Java).
- Touching anything in
src/mobile/ios/orsrc/mobile/android/. - Configuring Metro / Hermes / R8 / ProGuard.
- Debugging frame drops, JS-thread blocks, native crashes.
For cross-mobile-platform topics (navigation choices, offline-first, push notifications, deep links) see mobile-fundamentals.
The 0.76+ Baseline
Pin these and assume them everywhere:
- React Native 0.76 or newer (New Architecture default;
newArchEnabled=true). - React 18.3+.
- TypeScript 5.5+,
strict: true,noUncheckedIndexedAccess: true. - Hermes engine (default on both platforms).
- Metro 0.81+ with package exports support.
- Yarn 4 (
berry) or pnpm — npm classic gets RN dep resolution wrong on edge cases.
If your project pre-dates 0.76, the upgrade is worth doing before adding meaningful new features. The legacy bridge will be removed in 0.79.
Project Structure
This skill assumes the hexagonal layout (per hexagonal-architecture skill, RN section). Critical recap:
src/mobile/src/
├── domain/ # pure TS, no RN imports
├── application/ # use cases + ports
├── infrastructure/ # adapters: http/, storage/, push/, analytics/
├── delivery/ # UI: screens/, navigation/, providers/, components/
└── fakes/ # in-memory adapters for tests + Storybook
The TS source root has strict isolation — no react-native import inside domain/, no axios inside application/, no useState inside infrastructure/. ESLint eslint-plugin-boundaries enforces this.
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 513 lines · 116 tokens per session scan A 41c187288936
react-native-patterns is a skill published in the GitHub repository kouroshez/coding-os (6 stars, last pushed 2d ago), licensed Apache-2.0. It adds 116 tokens to every session and 4,836 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
graph-mutation-plan
Cookbook for composing an applygraphmutations plan — stable entitykey patterns, the canonical label/edge vocabulary, evidence/invalidation/confidence discipline, and a worked example. Load this when building a non-trivial mutation plan.
potpie-cli
Use when the task is centered on running, explaining, configuring, or troubleshooting the potpie command: doctor, login, pot management, source registration, search, graph workbench reads/writes, and pot scope behavior.
potpie-infra-architecture
Use for project infra and architecture context: environments, adapters, runtime configuration, deployments, service dependencies, datastores, API contracts, ownership, incidents, and dependency blast radius.
potpie-project-preferences
Use before writing, modifying, reviewing, refactoring, or testing code so repo/project preferences surface: error handling, file structure, frameworks, logging, dependency choices, testing, security, API style, and naming. Also use after code work when a reusable project preference should be recorded.
phone-harness
Control the user's phone — iPhone through the Mac's iPhone Mirroring window, or an Android over adb: open apps, tap, type, swipe, read the screen.
ui-mobile
Mobile UI patterns - React Native, iOS/Android, touch targets.