Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add thienanblog/awesome-ai-agent-skills --skill laravel-11-12-app-guidelinesgit clone --depth 1 https://github.com/thienanblog/awesome-ai-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/thienanblog/awesome-ai-agent-skills/laravel-11-12-app-guidelines)<a href="https://agentmods.dev/skills/thienanblog/awesome-ai-agent-skills/laravel-11-12-app-guidelines"><img src="https://agentmods.dev/badge/skills/thienanblog/awesome-ai-agent-skills/laravel-11-12-app-guidelines/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/thienanblog/awesome-ai-agent-skills/laravel-11-12-app-guidelines"><img src="https://agentmods.dev/badge/skills/thienanblog/awesome-ai-agent-skills/laravel-11-12-app-guidelines.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk warn
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.00884 |
| Opus 5.5 | $0.00020 | $0.00354 |
| Sonnet 5.5 | $0.00010 | $0.00177 |
| Haiku 4.5 | $0.00005 | $0.00088 |
Grade A, and why
laravel-11-12-app-guidelines scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 27d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 45 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Laravel 11/12 App Guidelines
Work from what the repository actually installs. Laravel 11 and 12 applications vary widely in skeleton, frontend, auth, and command runner, and most mistakes come from assuming a fresh-application default the project does not use.
Delegation
Run in the main conversation by default. Delegation can increase usage: obtain explicit approval for the proposed agent count and scope before using subagents. Reuse that approval within its bounds; ask again before expanding the approved count or scope.
Detect before deciding
Read repository instructions and the relevant documentation owners, then confirm from composer.json, composer.lock, package.json, frontend lockfiles, bootstrap/app.php, Compose files, and config/:
- the command path: host PHP, Sail, Docker Compose, or a repository wrapper, used consistently;
- API-only or full-stack, and the frontend: Inertia with React, Vue, or Svelte; Livewire; or Blade;
- the auth stack (Fortify, Sanctum, Passport, or custom) and the test runner (Pest or PHPUnit).
For version-sensitive behavior, use Laravel Boost search-docs when Boost is available, since it filters by installed versions; otherwise use the official documentation for the installed major. boost-tools.md covers Boost usage and its data-safety limits.
Follow the repository's architecture, naming, UI language, and component patterns, and keep its dependencies unless the user asks for a change.
Framework specifics that are easy to get wrong
- Skeleton. The modern skeleton configures middleware, exceptions, and routing in
bootstrap/app.php, registers providers inbootstrap/providers.php, and defines closure commands and schedules inroutes/console.php. An application upgraded from Laravel 10 may still useapp/Http/Kernel.phpandapp/Console/Kernel.php; that structure remains supported, so keep it unless the task is to migrate it. - API routes. Fresh applications omit
routes/api.php.install:apicreates it and installs Sanctum, so run it only when both are intended. API-only work should not pull in Vite, Tailwind, or Node. - Column changes.
change()drops every modifier that is not restated. Inspect the current column and repeat the modifiers that must survive. - Destructive database commands.
migrate:fresh,migrate:reset, rollbacks, anddb:wipeneed authorization that covers the target and its data loss; reuse permission already given. - Queries. Bound raw expressions and the query builder are fine where they are clearer than Eloquent; untrusted input is never interpolated into SQL.
- Inertia. Discover the page directory and casing from the page resolver. Use the form and navigation APIs of the installed Inertia major; examples from another major do not transfer.
- Wayfinder, when installed: use named imports so output tree-shakes, and regenerate after route or controller changes.
- Tailwind. Detect v3 or v4 from the lockfile. v4 is configured in CSS (
@import "tailwindcss",@theme) and removes utilities that v3 deprecated; leave a working v3 setup on v3 unless a migration is requested. - Livewire and Blade. Match the installed Livewire major and the component style neighbors use, without introducing a second frontend framework.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 27d ago Changed · -59 lines 045535888938
- 1mo ago Changed · -9 lines · -40 tokens per session 72b9e22094db
- 1mo ago First seen · 113 lines · 91 tokens per session scan A 513c00e2c244
laravel-11-12-app-guidelines is a skill published in the GitHub repository thienanblog/awesome-ai-agent-skills (70 stars, last pushed 27d ago), licensed Apache-2.0. It adds 51 tokens to every session and 884 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
laravel-specialist
Build and configure Laravel 10+ applications, including creating Eloquent models and relationships, implementing Sanctum authentication, configuring Horizon queues, designing RESTful APIs with API resources, and building reactive interfaces with Livewire. Use when creating Laravel models, setting up queue workers…
create-powergrid-plugin
Create a complete PowerGrid plugin from scratch, including PHP class, Column macro, Blade view, Alpine.js component, and registration.
owl-admin-devtools-generator
A development guide for Owl Admin, a Laravel-based administration system, covering its code generator, API templates, relationships, and visual pages.
llamaindex-development
Expert guidance for LlamaIndex development including RAG applications, vector stores, document processing, query engines, and building production AI applications.
php-laravel
Build and upgrade PHP/Laravel applications with validated requests, policy authorization and reliable jobs/data access. Use when implementing Laravel routes, Eloquent models or queues; preserve existing project conventions and runtime compatibility.
craftcms
Craft CMS 5 plugin and module development — extending Craft with PHP. Covers elements, element queries, services, models, records, controllers, migrations, queue jobs, console commands, field types, native fields, events, behaviors, Twig extensions, widgets, filesystems, permissions, project config, GraphQL, testing…