Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add meganemura/headsign --skill design-workflowgit clone --depth 1 https://github.com/meganemura/headsignWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/meganemura/headsign/design-workflow)<a href="https://agentmods.dev/skills/meganemura/headsign/design-workflow"><img src="https://agentmods.dev/badge/skills/meganemura/headsign/design-workflow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/meganemura/headsign/design-workflow"><img src="https://agentmods.dev/badge/skills/meganemura/headsign/design-workflow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00141 | $0.18056 |
| Opus 5 | $0.00071 | $0.09028 |
| Sonnet 5 | $0.00028 | $0.03611 |
| Haiku 4.5 | $0.00014 | $0.01806 |
Grade A, and why
design-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 1,282 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Designing a headsign workflow
A headsign workflow is one YAML file, committed to the repository. It names the phases of a job and, for each phase, the shell commands whose exit codes decide whether the work may leave it. This skill works out what those phases and those commands should be for this repository, settles the shape with the person who asked, and writes the file.
When this skill runs inside the headsign plugin in Claude Code or Codex, the
CLI is bundled with it and no install is needed. In Claude Code,
headsign <cmd> below means:
node "${CLAUDE_SKILL_DIR}/../../dist/headsign.mjs" <cmd>
In Codex, use the absolute SKILL.md path that Codex supplies for this skill.
Go up from skills/design-workflow/SKILL.md to the plugin root, then invoke
dist/headsign.mjs with Node. Do not assume a session environment variable
for the skill directory; the Codex contracts checked for this release did not
confirm one.
(A PATH-installed headsign works too, and so does npx headsign once the
package is installed. Check which you have before reaching for either —
command -v headsign names a PATH copy if one exists. npx headsign with
nothing installed does not fail; it installs from the registry, at a version
npm chooses rather than the one this plugin ships, and that copy will read and
write the same .headsign/state.json the bundled one has been driving.)
If the bundled path above does not exist, this file is a copy running
outside its plugin (for example, in .claude/skills/ or .agents/skills/) — the bundle only
ships with the plugin. Use a PATH-installed headsign, or npx headsign
on the terms above; otherwise stop and tell the user to either install the
plugin or npm install the package. Do not guess at other paths.
What this skill does not do
- It is not itself driven as a headsign run. Do not
headsign startanything in order to write a workflow. This is the machinery for making workflows; it does not need to be one. - It never runs
headsign starton its own judgment.startdoes not just name a phase — it prints that phase's instructions, and an agent's discipline is to obey them, so the user's actual work begins the moment you call it. Someone who asked for a workflow to be written did not ask for the work in it to begin, least of all from a file that has never run. Finish at the file plus the one line that would start it. If the user asks you to write it and run it, that is a second request, and from there theworkflowskill takes over. - It never deletes or renames a workflow file. Revision here means the
contents of a file. A rename is not a design change, and it is the
shortest path to breaking a run: a run goes looking for the exact path it
recorded at
start. - It does not build the checks a repository is missing. If there is nothing here a shell command can judge, name what is missing and stop. Adding tests, a linter, or a build to someone's repository is a different job, and taking it turns this into a tool that no longer writes workflows.
- It does not send anyone to
docs/workflow-reference.md. That file ships in neither the plugin nor the npm package, so it is not on the user's disk. Everything you need is below; the rest is inreferences/schema.md, next to this file. For the same reason, do not point atexample.headsign/either. - It does not have to match the paste-in prompt in headsign's README. They are independent documents, maintained separately. The order between them is only this: this skill is the procedure for someone who has adopted headsign, and the README's prompt is that procedure adjusted for someone who has not yet. If a user arrives holding that prompt's output, take it (step 1) — but do not treat its wording as a specification for yours.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +96 lines 00406e2abd6c
- 10d ago First seen · 1,186 lines · 141 tokens per session scan A 73e4b4871307
design-workflow is a skill published in the GitHub repository meganemura/headsign (1 stars, last pushed 6d ago), licensed MIT. It adds 141 tokens to every session and 18,056 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
implement-issue
Take a GitHub issue from planning to PR, resumable across clarification waits.
review-health
Audit any repository's structural health and file the findings as proposed epics and one-PR issues.
plan-backlog
Turn a vision document into a curated backlog of proposed epics and one-PR issues.
repo-hygiene
Use when the scheduled repo-hygiene workflow runs from GitHub Actions (or an operator dry-run) to scan the repository for small, certain docs/test/code hygiene issues and fix them as one batched branch.
cw-gates
Use before claiming any Codewhale change is done, green, or ready to land: the focused-to-broad verification ladder, the budget checks CI enforces, and the rules for what counts as a passing test.
interview
Ask one useful structured question at a time only when material product/implementation choices are genuinely missing; remember answers and produce a brief/spec. Discoverable facts should be investigated instead of asked.