Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/satsilem/ai-workflow-framework/project-setupnpx skills add satsilem/ai-workflow-framework --skill project-setupgit clone --depth 1 https://github.com/satsilem/ai-workflow-frameworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/satsilem/ai-workflow-framework/project-setup)<a href="https://agentmods.dev/skills/satsilem/ai-workflow-framework/project-setup"><img src="https://agentmods.dev/badge/skills/satsilem/ai-workflow-framework/project-setup.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00108 | $0.01933 |
| Opus 5 | $0.00054 | $0.00966 |
| Sonnet 5 | $0.00022 | $0.00387 |
| Haiku 4.5 | $0.00011 | $0.00193 |
Grade C, and why
project-setup scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
- **Destructive operations** (DROP, DELETE, rm -rf, etc.) require explicit confirmation How it starts
The opening of the file, as written. The whole thing — 319 lines — stays where its author put it; the contents beside it link to each section on GitHub.
project-setup — Project Structure Initializer
Purpose
Create a standard AI-ready project structure in the current directory. Non-destructive — always skip files and folders that already exist. After setup, offer to fill in the skeleton sections interactively.
Step 1 — Detect current state
Check what already exists in the current working directory:
ls -la
Note which of these already exist (skip them, only create what's missing):
CLAUDE.mdSESSION.mdTODO.mdNOTES.mdINSIGHTS.md.ai-notes/.reference/.tmp/.backups/.gitignore
Tell the user what you found and what you're about to create.
Step 2 — Create missing structure
CLAUDE.md
# PROJECT NAME — Reference
**Project:** ...
**Owner/Team:** ...
**Stack:** ...
**Status:** ...
**Last Updated:** DD-MM-YY
---
## 📁 PROJECT STRUCTURE
| File/Folder | Purpose |
|-------------|---------|
| `CLAUDE.md` | Master instructions — what Claude needs to know about this project |
| `SESSION.md` | Chronological log — gotchas, key findings, what was done and why |
| `TODO.md` | Open/closed tasks — single source of truth for what needs doing |
| `NOTES.md` | Quick personal scratchpad — raw notes, temp thoughts |
| `INSIGHTS.md` | Workflow improvement ideas — skill candidates, CLAUDE.md gaps, automation ideas |
| `.ai-notes/` | Deep-dive reports, incident docs, session-level investigations |
| `.reference/` | Stable evergreen reference docs (endpoint maps, runbooks, architecture references) |
| `.tmp/` | Claude's workspace — temporary scripts and batch files (never commit) |
| `.backups/` | File and DB backups (never commit) |
> 📋 **Where to find things:**
> - What was done last session → `SESSION.md` (CHRONOLOGICAL LOG section)
> - Critical gotchas and findings → `SESSION.md` (KEY LEARNINGS section)
> - What needs doing → `TODO.md`
> - Deep investigation reports → `.ai-notes/YYYY-MM-DD-topic.md`
> - Stable lookup docs → `.reference/<prefix>__<topic>.md`
---
## 🛠️ STACK
<!-- Fill in: languages, frameworks, hosting, DB, key services -->
---
## ⚙️ KEY COMMANDS
<!-- Fill in: run, validate, publish/release, common operations -->
---
## 🔀 GIT WORKFLOW
<!-- Fill in: branch/change naming convention, release pattern, remotes -->
---
## 🔒 SAFETY PROTOCOLS
- **Always confirm before high-risk release actions**
- **Never commit `.env`, credentials, or sensitive config**
- **Destructive operations** (DROP, DELETE, rm -rf, etc.) require explicit confirmation
- **`.tmp/` and `.backups/`** are for local use only — never commit
---
**Last Updated:** DD-MM-YY
**Project Owner:** ...
**Purpose:** Master reference for Claude sessions on this project.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 319 lines · 108 tokens per session scan C 7c01cfb47d5a
project-setup is a skill published in the GitHub repository satsilem/ai-workflow-framework (2 stars, last pushed 5mo ago), licensed MIT. It adds 108 tokens to every session and 1,933 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
html-ppt-hermes-cyber-terminal
OpenDesign + BYOK: choosing and wiring your own model, hands-on — cost, quality, and the routing decision. Built as a decision-grade AI literacy deck for engineers, IT, applied-AI teams.
feishu
Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.
azure-mgmt-botservice-dotnet
Azure Resource Manager SDK for Bot Service in .NET. Management plane operations for creating and managing Azure Bot resources, channels (Teams, DirectLine, Slack), and connection settings. Triggers: "Bot Service", "BotResource", "Azure Bot", "DirectLine channel", "Teams channel", "bot management .NET", "create bot".
diagnostic-stem-delivery
Audio production with diagnostic analysis, timecode parsing from documents, and verified export workflow.
accessibility
Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, design intent verification, and the Accessibility Planner workflow.
mochi-remind
Handle due reminders — notify the user with natural language and mark them done.