A coding workflow for reviewing plans and design documents against the existing code, guiding implementation, and keeping project records updated. It also captures reported bugs for later work or a controlled hotfix.

Use it when implementing a planned feature, recording a bug, reviewing project conventions, following a test-first process, or handing work between sessions.

It keeps implementation decisions, bug reports, and project documents aligned with the codebase instead of letting them drift apart.

coding — Skill for Claude Code by pssah4/digital-innovation-agents

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add pssah4/digital-innovation-agents --skill coding

Clone the repo

git clone --depth 1 https://github.com/pssah4/digital-innovation-agents

Made for: Claude Code.

Or install digital-innovation-agents, the plugin that ships this one along with the rest of its 13 skills, 1 hook.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/pssah4/digital-innovation-agents/coding/github.svg)](https://agentmods.dev/skills/pssah4/digital-innovation-agents/coding)

Your own site

<a href="https://agentmods.dev/skills/pssah4/digital-innovation-agents/coding"><img src="https://agentmods.dev/badge/skills/pssah4/digital-innovation-agents/coding/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/pssah4/digital-innovation-agents/coding"><img src="https://agentmods.dev/badge/skills/pssah4/digital-innovation-agents/coding.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 75 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 3,382 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium Agent Snooping · line 89
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00075	$0.03382
Opus 5.5	$0.00030	$0.01353
Sonnet 5.5	$0.00015	$0.00676
Haiku 4.5	$0.00007	$0.00338

Measured 2mo ago against content hash fe062f904ae1, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

coding scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/coding/SKILL.md · 325 lines

How it starts

The opening of the file, as written. The whole thing — 325 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Coding -- review, handoff and living documents

Two entry conditions:

Implementation entry (typical): a FEAT / IMP / ADR / FIX is ready to be built. The full review-implement-writeback flow applies.
Bug-capture entry: the user reports a bug outside an active implementation run. Capture the FIX artefact without forcing an immediate fix: references/bug-capture.md. Trivial bugs may take the hotfix lane (fix-now, document-after, five conditions): references/hotfix-lane.md.

The actual implementation is done by the default Claude Code agent. This skill loads and reviews context, persists the plan, hands the binding protocols to the agent, and keeps the artifacts in sync.

MANDATORY Pre-Phase 0: Branch and item check

Standard ritual, full rules in skills/project-conventions/references/team-workflow.md: identify the active item (BACKLOG row first for anything new), verify the branch matches <type>/<item-id-lower>-<slug> (AskUserQuestion on mismatch), run flow.py create-issue + open-draft-pr when GitHub sync is on, tag the phase at ritual end (--phase code), and write .git/dia-active-skill so subsequent invocations stay silent.

MANDATORY Phase 0: Artifact triage

Before any code, doc, or spec change, determine the artifact category: new FEATURE, IMP on an existing feature, FIX for a bug, or ADR for an architecture decision. A DIA-Triage trailer on a prior commit for this item answers the question; otherwise, if the assignment cannot be derived unambiguously from the prompt, ask ONE short question before anything else:

"Is this a new feature, an improvement on an existing feature, or a fix for a bug? If feature or IMP/FIX: which feature and which epic?"

No code or spec change without this assignment. FIX and IMP require feature: and epic: in the frontmatter. Decision tree and exceptions: skills/project-conventions/references/graph-invariants.md.

MANDATORY: Backlog as single source of truth

Read the full file on GitHub · 325 lines

Files

What ships with it

13 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 325 lines · 75 tokens per session scan A fe062f904ae1

Subscribe to this mod's changes

coding is a skill published in the GitHub repository pssah4/digital-innovation-agents (44 stars, last pushed 20d ago), licensed MIT. It adds 75 tokens to every session and 3,382 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

arc42 business-analysis development-tools interview requirements-engineering security-audit

coding next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
codingpssah4/digital-innovation-agents	Skill	44	20d ago	MIT	A	75	Claude Code
prowler-uiprowler-cloud/prowler	Skill	15k	yesterday	Apache-2.0	A	64	Claude Code
prowler-commitprowler-cloud/prowler	Skill	15k	yesterday	Apache-2.0	A	44	Claude Code, Codex
prowler-mcpprowler-cloud/prowler	Skill	15k	yesterday	Apache-2.0	A	67	Claude Code
prowler-prprowler-cloud/prowler	Skill	15k	yesterday	Apache-2.0	A	88	Claude Code
prowler-test-apiprowler-cloud/prowler	Skill	15k	yesterday	Apache-2.0	A	62	Claude Code
tailwind-4prowler-cloud/prowler	Skill	15k	yesterday	Apache-2.0	A	47	Claude Code