design-workflow

design-workflow is a skill for Claude Code from meganemura/headsign. It costs 141 tokens per session (18,056 once invoked), scanned A, original, MIT.

A guide for creating a YAML workflow that defines a repository's phases and the shell checks required to move between them. YAML is a text format commonly used for configuration.

In plain words
What is it for?
Use it to create or modify repository workflows, including their phases, checks, routes, and limits.
Why use it?
It helps make a development process explicit and enforceable by using command results as gates. It also explains how to run the bundled workflow tool in Codex or Claude Code.

Skill for Claude Code

Written for Claude Code: ${CLAUDE_SKILL_DIR} variable. Also seen: reads .claude/ paths; mentions subagents; mentions Claude Code.

Part of the headsign plugin — 2 skills, 2 hooks shipped together

Good fit Use it to create or modify repository workflows, including their phases, checks, routes, and limits.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/meganemura/headsign/design-workflow
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add meganemura/headsign --skill design-workflow
Clone the repo
git clone --depth 1 https://github.com/meganemura/headsign

Made for: Claude Code.

Or install headsign, the plugin that ships this one along with the rest of its 2 skills, 2 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for design-workflow

README.md
[![agentmods](https://agentmods.dev/badge/skills/meganemura/headsign/design-workflow/github.svg)](https://agentmods.dev/skills/meganemura/headsign/design-workflow)
Your own site
<a href="https://agentmods.dev/skills/meganemura/headsign/design-workflow"><img src="https://agentmods.dev/badge/skills/meganemura/headsign/design-workflow/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for design-workflow

Your own site · 80×15
<a href="https://agentmods.dev/skills/meganemura/headsign/design-workflow"><img src="https://agentmods.dev/badge/skills/meganemura/headsign/design-workflow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 141 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 18,056 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00141 $0.18056
Opus 5 $0.00071 $0.09028
Sonnet 5 $0.00028 $0.03611
Haiku 4.5 $0.00014 $0.01806

Measured 6d ago against content hash 00406e2abd6c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

design-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugin/skills/design-workflow/SKILL.md · 1,282 lines

How it starts

The opening of the file, as written. The whole thing — 1,282 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Designing a headsign workflow

A headsign workflow is one YAML file, committed to the repository. It names the phases of a job and, for each phase, the shell commands whose exit codes decide whether the work may leave it. This skill works out what those phases and those commands should be for this repository, settles the shape with the person who asked, and writes the file.

When this skill runs inside the headsign plugin in Claude Code or Codex, the CLI is bundled with it and no install is needed. In Claude Code, headsign <cmd> below means:

node "${CLAUDE_SKILL_DIR}/../../dist/headsign.mjs" <cmd>

In Codex, use the absolute SKILL.md path that Codex supplies for this skill. Go up from skills/design-workflow/SKILL.md to the plugin root, then invoke dist/headsign.mjs with Node. Do not assume a session environment variable for the skill directory; the Codex contracts checked for this release did not confirm one.

(A PATH-installed headsign works too, and so does npx headsign once the package is installed. Check which you have before reaching for either — command -v headsign names a PATH copy if one exists. npx headsign with nothing installed does not fail; it installs from the registry, at a version npm chooses rather than the one this plugin ships, and that copy will read and write the same .headsign/state.json the bundled one has been driving.)

If the bundled path above does not exist, this file is a copy running outside its plugin (for example, in .claude/skills/ or .agents/skills/) — the bundle only ships with the plugin. Use a PATH-installed headsign, or npx headsign on the terms above; otherwise stop and tell the user to either install the plugin or npm install the package. Do not guess at other paths.

What this skill does not do

  1. It is not itself driven as a headsign run. Do not headsign start anything in order to write a workflow. This is the machinery for making workflows; it does not need to be one.
  2. It never runs headsign start on its own judgment. start does not just name a phase — it prints that phase's instructions, and an agent's discipline is to obey them, so the user's actual work begins the moment you call it. Someone who asked for a workflow to be written did not ask for the work in it to begin, least of all from a file that has never run. Finish at the file plus the one line that would start it. If the user asks you to write it and run it, that is a second request, and from there the workflow skill takes over.
  3. It never deletes or renames a workflow file. Revision here means the contents of a file. A rename is not a design change, and it is the shortest path to breaking a run: a run goes looking for the exact path it recorded at start.
  4. It does not build the checks a repository is missing. If there is nothing here a shell command can judge, name what is missing and stop. Adding tests, a linter, or a build to someone's repository is a different job, and taking it turns this into a tool that no longer writes workflows.
  5. It does not send anyone to docs/workflow-reference.md. That file ships in neither the plugin nor the npm package, so it is not on the user's disk. Everything you need is below; the rest is in references/schema.md, next to this file. For the same reason, do not point at example.headsign/ either.
  6. It does not have to match the paste-in prompt in headsign's README. They are independent documents, maintained separately. The order between them is only this: this skill is the procedure for someone who has adopted headsign, and the README's prompt is that procedure adjusted for someone who has not yet. If a user arrives holding that prompt's output, take it (step 1) — but do not treat its wording as a specification for yours.

Read the full file on GitHub · 1,282 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago Changed · +96 lines 00406e2abd6c
  2. 10d ago First seen · 1,186 lines · 141 tokens per session scan A 73e4b4871307

Subscribe to this mod's changes

design-workflow is a skill published in the GitHub repository meganemura/headsign (1 stars, last pushed 6d ago), licensed MIT. It adds 141 tokens to every session and 18,056 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.