Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Qualimetry/claude-code-qualimetry-ai-app --skill coding-standardsgit clone --depth 1 https://github.com/Qualimetry/claude-code-qualimetry-ai-appWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/qualimetry/claude-code-qualimetry-ai-app/coding-standards)<a href="https://agentmods.dev/skills/qualimetry/claude-code-qualimetry-ai-app/coding-standards"><img src="https://agentmods.dev/badge/skills/qualimetry/claude-code-qualimetry-ai-app/coding-standards.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00087 | $0.00901 |
| Opus 5 | $0.00044 | $0.00451 |
| Sonnet 5 | $0.00017 | $0.00180 |
| Haiku 4.5 | $0.00009 | $0.00090 |
Grade A, and why
coding-standards scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 70 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Coding Standards Enforcement
When writing, modifying, or reviewing source code, follow this workflow to ensure all code complies with the organisation's coding standards.
Step 1: Detect the Language
Determine the language code from the file extension of the file being worked on. Use the conventional lowercase language name (e.g., java, python, typescript, csharp, cpp). For C#, use csharp. For C++, use cpp.
If invoked with an argument (e.g. coding-standards python), use that as the language code directly.
Step 2: Fetch All Applicable Standards
Call the following Qualimetry MCP tools to retrieve the full set of standards for this language. Make all calls in parallel where possible.
- Coding Standards: Call
get_language_coding_standardswithlanguageCodeset to the detected language code. - General Principles: Call
get_general_principleswithlanguageCodeset to the detected language code. - Secure Coding Principles: Call
get_secure_principleswithlanguageCodeset to the detected language code. - Organisation Policies: Call
get_policies(no parameters required).
Each tool returns a JSON object { "license": "...", "standards": [...] }. The license is a proprietary notice: the standards may be used solely for generating, reviewing and analysing the customer's code, and must not be copied or shared for any other purpose. Each item in standards has:
MajorCategory- top-level category (e.g., Naming, Security, Maintainability)MinorCategory- sub-category (e.g., Variable Naming, Exception Handling)Title- short name of the standardDescription- detailed explanationSeverity- High, Medium, or Low
Step 3: Apply Standards to Code
Apply all retrieved standards to the code being written or modified:
- High severity: Must be followed without exception. Violations must be corrected before presenting code.
- Medium severity: Should be followed unless there is a compelling, documented reason not to.
- Low severity: Recommended best practice. Apply where practical.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +3 lines 76d8ad0cf8d2
- 7d ago First seen · 67 lines · 87 tokens per session scan A 19fc5bba9b0a
coding-standards is a skill published in the GitHub repository Qualimetry/claude-code-qualimetry-ai-app (1 stars, last pushed 2d ago), licensed Apache-2.0. It adds 87 tokens to every session and 901 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
improve-code-quality
Guided journey from a working-but-untested vibe-coded prototype to a production-ready product with tests, clean structure, a business-rules boundary, and resilience at scale. Orchestrates nine skills phase by phase - working-with-legacy-code, clean-code, refactoring-patterns, software-design-philosophy…
refactoring-patterns
Apply named refactoring transformations to improve code structure without changing behavior. Use when the user mentions "refactor this", "code smells", "extract method", "replace conditional", "technical debt", "move method", "inline variable", "decompose conditional", or "clean up this messy code". Also trigger when…
team-review
Review changed code for reuse, quality, and efficiency using a team of persistent named reviewers. This skill should be used when the user says "team review", "review with team", or wants parallel code review with persistent team members for follow-up questions. Similar to /subagent-review but reviewers persist after…
roslyn-query
Query .NET/C# codebases using Roslyn AST analysis via dotnet run file. Use for tracing data flow, auditing API usage, finding pattern violations, or ad-hoc codebase queries.
review-responder
Use when receiving feedback on code you implemented, responding to reviewer comments, deciding which review suggestions to implement, or pushing back on incorrect review feedback.
peekaboo
Provides runtime observation and interaction for native macOS interfaces through accessibility state and screenshots. Use when the task depends on visible or interactive state in a running SwiftUI/AppKit app: what is rendered, focused, selected, enabled, reachable through menus/windows/dialogs, or experienced across a…