alignfirst-setup-guide

alignfirst-setup-guide is a skill for Claude Code, Codex from paleo/alignfirst. It costs 80 tokens per session (2,329 once invoked), scanned A, original, CC0-1.0.

Instructions for installing, upgrading, recommending, or combining AlignFirst development skills and related workspace tools. AlignFirst is a set of skills and command companions for structured software work.

In plain words
What is it for?
Setting up AlignFirst skills, upgrading them, preparing a repository or Linux deployment, and selecting related tools such as planning or review commands.
Why use it?
It helps choose the right AlignFirst component and follow the correct setup path without confusing the core skill with its optional companions.

Skill for Claude CodeCodex

Which agent this was written for is unclear — built for openclaw. Also seen: mentions CLAUDE.md; mentions Claude Code; mentions AGENTS.md.

Good fit Setting up AlignFirst skills, upgrading them, preparing a repository or Linux deployment, and selecting related tools such as planning or review commands.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/paleo/alignfirst/alignfirst-setup-guide
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add paleo/alignfirst --skill alignfirst-setup-guide
Clone the repo
git clone --depth 1 https://github.com/paleo/alignfirst

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for alignfirst-setup-guide

README.md
[![agentmods](https://agentmods.dev/badge/skills/paleo/alignfirst/alignfirst-setup-guide/github.svg)](https://agentmods.dev/skills/paleo/alignfirst/alignfirst-setup-guide)
Your own site
<a href="https://agentmods.dev/skills/paleo/alignfirst/alignfirst-setup-guide"><img src="https://agentmods.dev/badge/skills/paleo/alignfirst/alignfirst-setup-guide/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for alignfirst-setup-guide

Your own site · 80×15
<a href="https://agentmods.dev/skills/paleo/alignfirst/alignfirst-setup-guide"><img src="https://agentmods.dev/badge/skills/paleo/alignfirst/alignfirst-setup-guide.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 80 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,329 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium MCP Rug Pull · line 121
    npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
    Fix: Pin the version: npx @scope/[email protected]
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00080 $0.02329
Opus 5.5 $0.00032 $0.00932
Sonnet 5.5 $0.00016 $0.00466
Haiku 4.5 $0.00008 $0.00233

Measured today against content hash f51452cc51df, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

alignfirst-setup-guide scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

The scan reads SKILL.md. This mod also ships 13 executable files (assets/aligndev-openclaw-template/base/infra/openclaw/bin/apply-heartbeat-scratch.sh, assets/aligndev-openclaw-template/base/infra/openclaw/bin/apply-workspace.sh, assets/aligndev-openclaw-template/base/infra/openclaw/bin/assistant-kill.sh, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/alignfirst-setup-guide/SKILL.md · 151 lines

How it starts

The opening of the file, as written. The whole thing — 151 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AlignFirst Setup Guide

Route by the user's intent. Load only the references needed for that route. Docmap, workspace, and the AlignFirst skills can each be adopted independently.

Terminology

The AlignFirst CLI is the alignfirst npm package and bin. It provides guide, ticket, sync, plans, docmap, conventions, context, config, and doctor.

The AlignFirst skills are stubs that run the CLI. The nine command skills alspec, alplan, al, almerge, alreview, aldescription, alcatchup, alcatchupaad, and alcatchupspec keep disable-model-invocation: true; humans invoke them as /alspec in Claude Code, GitHub Copilot, Cursor, or $alspec in Codex. The optional alignfirst skill lets the agent recognize a protocol named in prose; a project whose instruction file starts with the canonical alignfirst context section provides this itself.

A work-files repository is an optional CLI mode configured through alignfirst plans setup.

aligndev, the AlignDev CLI, carries the assistant's playbook, coding-agent delegation, and project discovery. An OpenClaw assistant host installs it; a coding-agent assistant runs it through npx.

An Untouched Repository

When the user wants nothing written in the repository, every route below goes through companion-setup.md. The project's AlignFirst files then live in its companion directory, and only the tools that mode supports apply.

Named Tool

When the user names a tool, inspect the repository and proceed directly to that tool. Install or upgrade only what they requested.

Read the full file on GitHub · 151 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed f51452cc51df
  2. 2d ago Changed 692e6aa17ba0
  3. 3d ago Changed · -10 lines 0f6bdd440875
  4. 6d ago Changed · -2 lines · +13 tokens per session c53264757a7f
  5. 7d ago Changed e34c69a0d6c6
  6. 8d ago Changed 812c541e3d9a
  7. 9d ago Changed · +6 lines · +11 tokens per session 4b8a7ddaa729
  8. 13d ago Changed · +7 lines · +11 tokens per session b06f0c409597
  9. 21d ago Changed 74b9b06c7675
  10. 24d ago First seen · 150 lines · 45 tokens per session scan A 227db92a0526

Subscribe to this mod's changes

alignfirst-setup-guide is a skill published in the GitHub repository paleo/alignfirst (85 stars, last pushed today), licensed CC0-1.0. It adds 80 tokens to every session and 2,329 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.