Borrowing it
Nothing to install: this file belongs to liuyingxuvka/FlowGuard. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/liuyingxuvka/FlowGuard/main/.agents/skills/flowguard-field-lifecycle-mesh/SKILL.mdgit clone --depth 1 https://github.com/liuyingxuvka/FlowGuardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/liuyingxuvka/flowguard/flowguard-field-lifecycle-mesh)<a href="https://agentmods.dev/skills/liuyingxuvka/flowguard/flowguard-field-lifecycle-mesh"><img src="https://agentmods.dev/badge/skills/liuyingxuvka/flowguard/flowguard-field-lifecycle-mesh/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/liuyingxuvka/flowguard/flowguard-field-lifecycle-mesh"><img src="https://agentmods.dev/badge/skills/liuyingxuvka/flowguard/flowguard-field-lifecycle-mesh.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.00641 |
| Opus 5 | $0.00028 | $0.00320 |
| Sonnet 5 | $0.00011 | $0.00128 |
| Haiku 4.5 | $0.00006 | $0.00064 |
Grade A, and why
flowguard-field-lifecycle-mesh scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 44 lines — stays where its author put it; the contents beside it link to each section on GitHub.
FlowGuard Field Lifecycle Mesh
Purpose
Account every discovered leaf field, project behavior-bearing fields upward, and close old-field disposition before broad confidence.
Entrypoint Scope
Route id: field_lifecycle_mesh; role: public_owner; native owner: field_lifecycle_mesh. This standalone FlowGuard satellite skill owns field boundaries and projections, not downstream behavior proof.
Local Material Routing
Read references/field_lifecycle_mesh_protocol.md for FieldLifecyclePlan, grouped leaf rows, projections, replacement policy, and handoffs.
Entrypoint Acceptance Map
Accept a bounded field inventory; create leaf rows and behavior projections; block missing fields or unknown old-field disposition; hand canonical malformed cases, owners, obligations, and repair evidence to their routes.
Use When
- Use for schema/payload/config/prompt/persisted/UI/runtime fields, migrations, aliases, defaults, fallbacks, or field-rooted model misses.
Do Not Use When
- Do not put every field in the high-level model, treat inventory as behavior proof, or replace alignment/testing; return missing behavior models to
flowguard.
Required Workflow
- Independently discover and freeze the field inventory revision, fingerprint, and evidence before disposition.
- For each field record one owner, locations, readers/writers, default, absence/null and serialization semantics, privacy, content fingerprint, and one modeled/delegated/scoped disposition.
- Add
FieldProjectiononly for locally modeled behavior-bearing fields; delegation names a specialist and current native evidence, while scope needs a bounded reason. - Route invalid/old cases to ContractExhaustionMesh, close replacement disposition, and send owners, projections, cases, and gaps downstream.
Hard Gates
- Model-purpose gate: pre-build/change freeze task-specific failure(s)/boundary; bind candidate to native good/bad-per-failure/oracle/current evidence. Reusable types are not fixed-purpose: no mode/fallback; only FlowGuard-declared checks may support completion claims.
- Require the real FlowGuard check engine and AGENTS.md managed record; forbid fake mini-frameworks.
- Default replacement requires delete, block, migrate, delegate, repair, explicit preserve, or scoped reason; unknown disposition blocks full confidence.
- A complete claim blocks on empty/stale inventory identity, missing or unexpected rows, duplicate field ids, missing semantics/fingerprints, or incomplete delegated/scoped dispositions.
- Behavior claims need current obligations, code/test owners, and freshness.
- Only explicit reuse/publication or proven cross-project use
triggers strict
risk_template_libraryclosure.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 44 lines · 56 tokens per session scan A 43add04e6c2c
flowguard-field-lifecycle-mesh is a skill published in the GitHub repository liuyingxuvka/FlowGuard (2 stars, last pushed 17d ago), licensed MIT. It adds 56 tokens to every session and 641 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
backend-idempotency
Use this skill when the user says 'idempotency', 'idempotent', 'idempotency key', 'exactly-once', 'retry safety', 'deduplication', 'duplicate detection', 'idempotent endpoint', 'safe retry'. This skill implements idempotency keys and exactly-once semantics so retries never result in duplicate side effects. Applies to…
butterbase
AI-native, open-source backend-as-a-service with a built-in Model Context Protocol server. Postgres, auth, storage, functions, AI gateway.
vector-db
Vector database expert for embeddings, similarity search, RAG patterns, and indexing strategies.
elasticsearch
Elasticsearch expert for queries, mappings, aggregations, index management, and cluster operations.
mongodb
MongoDB operations expert for queries, aggregation pipelines, indexes, and schema design.
postgres-expert
PostgreSQL expert for query optimization, indexing, extensions, and database administration.