coding

coding is a skill for Claude Code, Codex from leon-ai/leon. It costs 24 tokens per session (900 once invoked), scanned A, original, MIT.

A repository coding workflow for investigating, editing, and checking software changes with an agent's file, search, and shell tools.

In plain words
What is it for?
Use it to find relevant code, make authorized changes, run checks, and verify the outcome directly in a project repository.
Why use it?
It keeps the agent within the requested scope and project instructions instead of treating analysis as permission to edit, commit, or publish. It also requires checking the real result rather than assuming a command or delegated task worked.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions AGENTS.md.

Good fit Use it to find relevant code, make authorized changes, run checks, and verify the outcome directly in a project repository.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/leon-ai/leon/coding
About the project

Leon is an open-source personal AI assistant that uses tools, memory, context, and agent-like execution to understand goals and complete tasks. People use it as a practical assistant that can run locally and work across structured workflows, while the catalogue skills support its operation.

leon-ai/leon · 17,579 stars · on GitHub · getleon.ai

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add leon-ai/leon --skill coding
Clone the repo
git clone --depth 1 https://github.com/leon-ai/leon

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for coding

README.md
[![agentmods](https://agentmods.dev/badge/skills/leon-ai/leon/coding/github.svg)](https://agentmods.dev/skills/leon-ai/leon/coding)
Your own site
<a href="https://agentmods.dev/skills/leon-ai/leon/coding"><img src="https://agentmods.dev/badge/skills/leon-ai/leon/coding/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for coding

Your own site · 80×15
<a href="https://agentmods.dev/skills/leon-ai/leon/coding"><img src="https://agentmods.dev/badge/skills/leon-ai/leon/coding.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 24 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 900 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00024 $0.00900
Opus 5.5 $0.00010 $0.00360
Sonnet 5.5 $0.00005 $0.00180
Haiku 4.5 $0.00002 $0.00090

Measured 5d ago against content hash 00871bcf5be0, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

coding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/agent/coding/SKILL.md · 38 lines

How it starts

The opening of the file, as written. The whole thing — 38 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Coding

Use Leon's existing agent loop and tools to complete coding tasks directly. Respect the owner's requested scope: analysis is not authorization to edit, commit, push or publish. Delegate only when the owner asks or has an applicable preference.

For requested delegation, use the owner's preferred available agent and interface. Pass the repository, task, applicable instructions and authorized scope. Inspect and verify the actual result; submitting a prompt is not completion. If delegation is unavailable, explain briefly and continue directly within the authorized scope.

Repository and instructions

  1. Establish the exact workspace and working directory from the request and live observations. Read relevant manifests and nearby implementations; use existing helpers before adding abstractions.
  2. Before editing, discover and read applicable AGENTS.md files from the repository root through each target directory. Deeper instructions apply only within their directory and take precedence over broader project rules. For a non-Git workspace, use the owner-selected workspace boundary; do not inherit unrelated parent-directory instructions.
  3. Record the workspace, applicable instruction paths, constraints and acceptance criteria from the request and supplied references in plan details. Pair each criterion with its required check. Before editing a new directory, discover its nested instructions. After compaction or continuation, reload applicable instruction files before further edits; summaries are not substitutes for their full current content.
  4. Inspect Git status and existing staged/unstaged diffs. Record unrelated changed and untracked files and preserve their content. Do not reset, clean, stage or commit owner work without authorization. Use an isolated worktree when concurrent work or the requested workflow warrants it.

Investigate and change

  • Use bounded file reads, ripgrep and available structural search. Trace definitions and callers; check installed dependencies instead of inventing symbols or APIs. Batch independent discovery calls.
  • For a bug, reproduce the failure with a relevant check before changing the implementation. Inspect existing tests and extend only meaningful coverage. Do not weaken tests to obtain a pass.
  • Prefer file.patch for changes to existing text, using the current read's content hash when available. Supply unique exact context and preserve unrelated changes. On stale or ambiguous matches, re-read and revise the patch rather than repeating it or overwriting from a partial view.
  • Use file.write for new files; overwriting an existing file requires its complete current content. Follow the project's formatting and dependency-management instructions.
  • Use shell.executeCommand for finite commands and project checks, always with the observed workspace cwd. Discover commands from project configuration rather than guessing a package manager.
  • Use shell session functions for dev servers, watchers or interactive programs. Record returned session IDs in the plan, follow output cursors, and verify process status. A started process is not a completed or successful check. Never invent handles, replay a command to recover output, or send secrets through stdin.

Read the full file on GitHub · 38 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago Changed · +1 lines 00871bcf5be0
  2. 9d ago First seen · 37 lines · 24 tokens per session scan A 275480dcb905

Subscribe to this mod's changes

coding is a skill published in the GitHub repository leon-ai/leon (17,579 stars, last pushed 4d ago), licensed MIT. It adds 24 tokens to every session and 900 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-07.

Related

Other skills, from other repositories

marimo-pair

Work inside the user's live marimo notebook from the code editor: run Python in the same kernel the user does, inspect live notebook state, and commit durable notebook changes through code mode. Use whenever you create, analyze, or improve the user's marimo notebook.

marimo-team/marimo · 57 tokens

fill-model-descriptions

Curate descriptions and provider-specific reasoning options and token limits in packages/llm-info/data/models.yml using models.dev, OpenRouter, and provider documentation. Use when the user asks to populate model descriptions, enrich the model catalog, or curate descriptions after running pnpm sync-models.

marimo-team/marimo · 65 tokens

lepton-cli

Operate NVIDIA DGX Cloud Lepton through the globally installed lep CLI. Use when the user asks to inspect or manage Lepton workspaces, endpoints/deployments, dev pods, batch jobs, fine-tuning jobs, Ray clusters, Slurm clusters, Dynamo endpoints, storage, secrets, nodes, ingress, templates, logs, authentication, or…

leptonai/leptonai · 122 tokens

flyenv-failure-boundaries

Use when implementing or reviewing FlyEnv multi-step operations, batch actions, PID candidate filtering, cleanup, supplementary actions, or changes to throw/reject and terminal result handling.

xpf0000/FlyEnv · 41 tokens

nanoresearch-experiment

Generate a Python code skeleton from an experiment blueprint.

OpenRaiser/NanoResearch · 15 tokens

python

The Vovk.ts Python client — generating a typed Python package from a Vovk API with vovk-python, the py / pySrc templates, TypedDict shapes, JSON + JSON Lines consumption, client-side validation, and PyPI publishing. Use whenever the user wants a typed Python SDK, ongoing Python integration, or PyPI publishing …

finom/vovk · 261 tokens