Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/vanja-emichi/a0_agent_skills/source-driven-developmentnpx skills add vanja-emichi/a0_agent_skills --skill source-driven-developmentgit clone --depth 1 https://github.com/vanja-emichi/a0_agent_skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/vanja-emichi/a0_agent_skills/source-driven-development)<a href="https://agentmods.dev/skills/vanja-emichi/a0_agent_skills/source-driven-development"><img src="https://agentmods.dev/badge/skills/vanja-emichi/a0_agent_skills/source-driven-development.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00047 | $0.01997 |
| Opus 5 | $0.00023 | $0.00999 |
| Sonnet 5 | $0.00009 | $0.00399 |
| Haiku 4.5 | $0.00005 | $0.00200 |
Grade A, and why
source-driven-development scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 244 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Source-Driven Development
Overview
Read authoritative sources before writing code that depends on them. AI training data has a cutoff — and even before that cutoff, documentation often reflects correct usage better than the patterns in training data. When building against a library, framework, or API, consulting the real source prevents hallucinated APIs, outdated patterns, and subtle bugs from subtle version differences.
When to Use
- Using a library or framework that may have changed since training
- Unsure about current API signatures, hooks, or configuration
- Working with rapidly evolving tools (AI SDKs, cloud APIs, build tools)
- Implementing against a third-party API (authentication flows, endpoints, payloads)
- Encountering an error that suggests an API mismatch
When NOT to use:
- Writing pure algorithms or logic with no external dependencies
- Working with extremely stable, well-established APIs (e.g., basic array methods)
- You have high confidence the pattern is current and correct
The Source-Driven Protocol
Step 1: Identify What Needs Verification
Before writing code that uses an external library or API, list the assumptions you're making:
ASSUMPTIONS TO VERIFY:
- Does this hook/function/method still exist with this name?
- Are the arguments in the right order?
- Is this the recommended pattern (not deprecated)?
- Are there new required parameters or options?
- Does the return type match what I expect?
Step 2: Fetch Authoritative Sources
Use Agent Zero tools to retrieve current documentation:
For package documentation (npm):
document_query: https://www.npmjs.com/package/<package-name>
For GitHub repos:
browser: open → navigate to github.com/<owner>/<repo>/blob/main/README.md
browser: content → read the README
For official docs sites:
browser: open → navigate to the official docs URL
browser: content → read the relevant section
For specific API references:
document_query: <direct URL to the API reference page>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 244 lines · 47 tokens per session scan A 1956f9950688
source-driven-development is a skill published in the GitHub repository vanja-emichi/a0_agent_skills (5 stars, last pushed 1mo ago), licensed MIT. It adds 47 tokens to every session and 1,997 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
golden-rss
Use when testing the rss golden build.
golden-chat-topics
Use when testing the goldenchattopics golden build.
golden-chat-single
Use when testing the goldenchatsingle golden build.
decided-import
Reformat ONE existing document (a decision, requirement, design, roadmap, or prompt) into ONE valid RAC (requirements-as-code) artifact, with a mandatory human-review step before any file is written and decided validate as the deterministic close. Use when a user wants to add or import a single existing decision or…
keep-the-why
Extract and preserve the reasoning code cannot explain - decisions, rejected alternatives, workarounds, incidents, constraints - plus project setup/decline and maintainer interviews. Not for what changed (see Keep a Changelog) - only why.
summarize
Summarize conversations, logs, docs, or investigation notes into action-oriented text with evidence tags. Use for recap, handoff, CI failure digest, or MEMORY. Triggers: 总结, 汇总, summarize, 交接, 复盘, 调试总结.