Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add KtKID/x-dev-pipeline --skill x-audit-stylegit clone --depth 1 https://github.com/KtKID/x-dev-pipelineWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ktkid/x-dev-pipeline/x-audit-style)<a href="https://agentmods.dev/skills/ktkid/x-dev-pipeline/x-audit-style"><img src="https://agentmods.dev/badge/skills/ktkid/x-dev-pipeline/x-audit-style/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ktkid/x-dev-pipeline/x-audit-style"><img src="https://agentmods.dev/badge/skills/ktkid/x-dev-pipeline/x-audit-style.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00106 | $0.00751 |
| Opus 5 | $0.00053 | $0.00376 |
| Sonnet 5 | $0.00021 | $0.00150 |
| Haiku 4.5 | $0.00011 | $0.00075 |
Grade A, and why
x-audit-style scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
x-audit-style · 代码规范巡检
x-audit-style 是独立巡检 skill，不在主流程内。做全项目视角的代码规范审查。
为什么独立
规范问题需要全局视角才有意义——单文件命名好但和邻居命名风格不一致，单看局部最优；单任务级别揪命名是过度审查。剥离出来周期巡检更合适。
流程
- 用户触发（手动调用 / 周期性）。
- dispatch 子 agent。
- 输出 audit-style 报告到
reports/audit/audit-style-YYYYMMDD-HHmmss.md。 - 不自动触发 x-fix——由用户决定。
子 agent dispatch
Agent({
description: "Style audit",
subagent_type: "general-purpose",
prompt: <本 SKILL.md 的"检查清单"段 + 项目代码 + 输出格式>
})
报告顶部必须填写 Completed by model。
检查清单
1. 命名一致性
- 函数 / 变量命名风格是否项目内统一？（snake_case / camelCase）
- 同概念是否多个名字（比如 user / account / member 混用）？
- 缩写是否一致（id / ID / Id）？
2. 复用机会
- 同样的代码在多处出现？提取函数。
- 类似但不完全一样的代码？考虑参数化。
- 多处用同一组 magic number？提取常量。
3. magic number / magic string
- 数字 / 字符串字面量没有名字？
- 配置值硬编码在代码里？
4. 函数 / 文件大小
- 函数超过 50 行？
- 文件超过 500 行？
- 一个类承担超过 3 件事？
5. 注释合理性
- 注释解释 WHAT（应该删，由代码说话）？
- 注释解释 WHY（保留，特别是非显而易见的设计决策）？
- 注释引用过期信息（"used by X"，但 X 已不存在）？
6. 死代码
- 未被引用的函数 / 变量 / import？
- 注释掉的代码（应删除，git 已记历史）？
- 永远走不到的分支（unreachable code）？
输出
写入 reports/audit/audit-style-YYYYMMDD-HHmmss.md，模板见 templates/audit-style-template.md。
不在范围
- 单任务级别的 style 审查（小范围 lint 工具搞定）
- 自动可修复的（lint 工具 --fix 即可）
- 主观偏好争议（用 lint config 决定，不靠 AI 评审）
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 76 lines · 106 tokens per session scan A 05b9f561a45f
x-audit-style is a skill published in the GitHub repository KtKID/x-dev-pipeline (12 stars, last pushed yesterday), licensed MIT. It adds 106 tokens to every session and 751 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
procoder
Work like a senior developer in a repository governed by procoder: run the commit gate before calling anything done, format and lint through the binary, and drive the spec, plan, todo, backlog, and sprint chain in .procoder/. Use this skill when the repository contains a .procoder/ directory or an AGENTS.md naming…
explain
Guided code tour of a file or subsystem this session touched — entry point, the load-bearing pieces, the edges, and what connects to it.
idea-team
A structured group discussion for exploring a product idea through three roles: researcher, critic, and analogy finder. The roles look for evidence, weaknesses, and useful comparisons.
codex-agent
Use when you want a second-opinion review via Codex CLI, cross-verification after another agent implements changes, debugging help, or alternative implementation proposals. Requires Codex CLI to be installed and authenticated.
project-health-auditor
Comprehensive codebase health analysis. Use when reviewing code quality, identifying technical debt, checking dependencies, or assessing project structure.
review-gate
Use before an agent-produced diff is committed, pushed, opened as a PR, merged, landed, or applied to user files when explicit implementation approval is missing. Trigger for review gate, review pack, approve before landing, diff first then land, human approval, merge gate, commit gate, push gate, or PR readiness.…