What is vibeguard-setup?

A setup skill for installing, checking, inspecting, or removing VibeGuard hooks and related Codex configuration. VibeGuard is a Codex App plugin whose setup can change user configuration.

Use it to locate the VibeGuard checkout, run strict health checks, inspect Codex-specific status, or remove VibeGuard-managed assets.

It provides a controlled way to verify the installation and avoid claiming the hooks are working without a fresh status check.

vibeguard-setup — Skill for Claude Code and Codex by majiayu000

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo

git clone --depth 1 https://github.com/majiayu000/vibeguard

agentmods

npx agentmods add skills/majiayu000/vibeguard/vibeguard-setup

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/majiayu000/vibeguard/vibeguard-setup/github.svg)](https://agentmods.dev/skills/majiayu000/vibeguard/vibeguard-setup)

Your own site

<a href="https://agentmods.dev/skills/majiayu000/vibeguard/vibeguard-setup"><img src="https://agentmods.dev/badge/skills/majiayu000/vibeguard/vibeguard-setup/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/majiayu000/vibeguard/vibeguard-setup"><img src="https://agentmods.dev/badge/skills/majiayu000/vibeguard/vibeguard-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 34 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 468 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector pass 7 Sept 2026

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00034	$0.00468
Opus 5	$0.00017	$0.00234
Sonnet 5	$0.00007	$0.00094
Haiku 4.5	$0.00003	$0.00047

Measured 10d ago against content hash 47222e090b74, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

vibeguard-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/vibeguard/skills/vibeguard-setup/SKILL.md · 50 lines

What it actually says

VibeGuard Setup

This skill operates the explicit setup bridge for the VibeGuard Codex App plugin. Installing VibeGuard changes high-context user configuration, so always show the intended command before running it.

When to Activate

User asks to install VibeGuard hooks, rules, or skills for Codex.
User asks to check VibeGuard health, hook status, or Codex status.
User asks to uninstall or clean VibeGuard-managed assets.

Red Flags

Missing checkout - the plugin cache alone is not enough to install VibeGuard source assets.
Implicit install - do not run install --yes unless the user asked to install.
Stale status - do not report VibeGuard as healthy without a fresh setup check.

Checklist

Resolve the source checkout with plugins/vibeguard/scripts/vibeguard-plugin.sh repo-dir.
Run plugins/vibeguard/scripts/vibeguard-plugin.sh check --strict before claiming health.
Use plugins/vibeguard/scripts/vibeguard-plugin.sh codex-status for Codex-specific setup state.
Use VIBEGUARD_REPO_DIR=/path/to/vibeguard if the plugin is loaded outside the checkout.

Commands

From a VibeGuard checkout:

bash plugins/vibeguard/scripts/vibeguard-plugin.sh repo-dir
bash plugins/vibeguard/scripts/vibeguard-plugin.sh check --strict
bash plugins/vibeguard/scripts/vibeguard-plugin.sh codex-status
bash plugins/vibeguard/scripts/vibeguard-plugin.sh doctor
bash plugins/vibeguard/scripts/vibeguard-plugin.sh install --yes
bash plugins/vibeguard/scripts/vibeguard-plugin.sh clean

When running from a plugin cache:

VIBEGUARD_REPO_DIR=/path/to/vibeguard \
  bash scripts/vibeguard-plugin.sh check --strict

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

10d ago First seen · 50 lines · 34 tokens per session scan A 47222e090b74

Subscribe to this mod's changes

vibeguard-setup is a skill published in the GitHub repository majiayu000/vibeguard (41 stars, last pushed today), licensed MIT. It adds 34 tokens to every session and 468 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Claude Code Guardrails code-quality codex developer-tools hooks

ring:exploring-codebases

Exploring a codebase across phases: scopes the target, detects architecture, components, and layers, deep-dives each discovered perspective, then synthesizes findings into actionable guidance with file:line evidence. Use to understand how a feature or system works before planning changes, or to orient on an unfamiliar…

LerianStudio/ring · 91 tokens

ring:instrumenting-streaming-events

Instrumenting streaming events: wires lib-streaming event emission end-to-end into a Lerian Go service via a 13-gate cycle (catalog, Builder bootstrap, Emit sites, outbox, HTTP manifest, NoopEmitter fallback, integration and chaos tests), dispatching ring:backend-go under TDD. Consumes the validated…

LerianStudio/ring · 102 tokens

ring:mapping-feature-relationships

Mapping how features relate and phasing the work: categorizing PRD features, grouping them into domains, charting cross-feature journeys, dependencies, and integration points, and defining the binding Phases that plan.md mirrors one-to-one at Gate 7. Gate 2 of ring:planning-large-features; runs after…

LerianStudio/ring · 104 tokens

ring:validating-ux-completeness

Validating that UX specifications are complete before technical design: a read-only checklist over wireframes, states, responsive behavior, accessibility, and component-library alignment, emitting a DESIGN VALIDATED / NEEDS REVISION verdict to design-validation.md. Standalone utility — run after a product-designer…

LerianStudio/ring · 113 tokens

ring:auditing-dependency-security

Auditing a dependency for supply-chain risk before install (pip/npm/go/cargo): checks typosquatting, maintainer/age risk, vulnerability DBs (OSV, GHSA, Socket), and lockfile hash pinning, then emits a risk score and approve/conditional/escalate/block decision. Use when adding or updating a dependency, reviewing a…