Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/vibeeval/vibecosystemnpx agentmods add skills/vibeeval/vibecosystem/agent-linterWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/vibeeval/vibecosystem/agent-linter)<a href="https://agentmods.dev/skills/vibeeval/vibecosystem/agent-linter"><img src="https://agentmods.dev/badge/skills/vibeeval/vibecosystem/agent-linter/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/vibeeval/vibecosystem/agent-linter"><img src="https://agentmods.dev/badge/skills/vibeeval/vibecosystem/agent-linter.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00064 | $0.01675 |
| Opus 5.5 | $0.00026 | $0.00670 |
| Sonnet 5.5 | $0.00013 | $0.00335 |
| Haiku 4.5 | $0.00006 | $0.00168 |
Grade A, and why
agent-linter scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 185 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent & Skill Linter
Agent ve skill dosyalarinin kalite kontrolu. Yanlis yapilandirilmis dosyalar runtime'da sessizce basarisiz olur -- linter bunu onler.
Agent Dosyasi Kurallari
Frontmatter (ZORUNLU)
---
name: agent-adi # kebab-case, dosya adiyla AYNI olmali
description: Tek satir # 20-200 karakter arasi
tools: ["Read", "Bash"] # Gecerli tool listesi
model: opus # Opsiyonel: opus | sonnet
---
Frontmatter Validasyonu
| Kural | Kontrol | Hata Seviyesi |
|---|---|---|
name mevcut |
Frontmatter'da name var mi? | ERROR |
name = dosya adi |
name: sleuth == sleuth.md |
ERROR |
name kebab-case |
code-reviewer OK, codeReviewer FAIL |
ERROR |
description mevcut |
Bos olmamali | ERROR |
description uzunlugu |
20-200 karakter | WARN |
tools array |
String array olmali | ERROR |
tools gecerli |
Sadece bilinen tool isimleri | WARN |
model gecerli |
opus, sonnet veya bos | ERROR |
Body Kurallari
| Kural | Kontrol | Hata Seviyesi |
|---|---|---|
| System prompt var | Frontmatter'dan sonra icerik var | ERROR |
| 50+ satir | Cok kisa agent tanimlari yetersiz | WARN |
| 2000 satir max | Cok uzun dosyalar token israf eder | WARN |
| Markdown basliklar | En az 1 ## basligi var |
WARN |
Skill Dosyasi Kurallari
Frontmatter (ZORUNLU)
---
name: skill-adi # kebab-case
description: Aciklama # 20-300 karakter
---
Skill Validasyonu
| Kural | Kontrol | Hata Seviyesi |
|---|---|---|
| Dosya adi | SKILL.md veya skill.md |
ERROR |
name mevcut |
Frontmatter'da | ERROR |
name = klasor adi |
name: tdd-workflow == skills/tdd-workflow/ |
WARN |
description mevcut |
Bos olmamali | ERROR |
| Icerik var | Frontmatter'dan sonra en az 20 satir | WARN |
| Kod ornegi var | En az 1 code block | INFO |
Lint Calistirma
Bash Script
#!/bin/bash
# scripts/lint-agents.sh
ERRORS=0
WARNS=0
lint_agent() {
local file="$1"
local name=$(basename "$file" .md)
# Frontmatter kontrolu
if ! head -1 "$file" | grep -q "^---"; then
echo "ERROR: $file - frontmatter yok"
ERRORS=$((ERRORS + 1))
return
fi
# name field kontrolu
local fm_name=$(sed -n '/^---$/,/^---$/p' "$file" | grep "^name:" | sed 's/name: *//')
if [ -z "$fm_name" ]; then
echo "ERROR: $file - name field yok"
ERRORS=$((ERRORS + 1))
elif [ "$fm_name" != "$name" ]; then
echo "ERROR: $file - name '$fm_name' != dosya adi '$name'"
ERRORS=$((ERRORS + 1))
fi
# description kontrolu
local desc=$(sed -n '/^---$/,/^---$/p' "$file" | grep "^description:")
if [ -z "$desc" ]; then
echo "ERROR: $file - description yok"
ERRORS=$((ERRORS + 1))
fi
# Uzunluk kontrolu
local lines=$(wc -l < "$file")
if [ "$lines" -lt 10 ]; then
echo "WARN: $file - cok kisa ($lines satir)"
WARNS=$((WARNS + 1))
elif [ "$lines" -gt 2000 ]; then
echo "WARN: $file - cok uzun ($lines satir)"
WARNS=$((WARNS + 1))
fi
}
echo "=== Agent Linter ==="
for f in agents/*.md; do
lint_agent "$f"
done
echo ""
echo "=== Skill Linter ==="
for f in skills/*/SKILL.md skills/*/skill.md; do
[ -f "$f" ] && lint_agent "$f"
done
echo ""
echo "Sonuc: $ERRORS error, $WARNS warning"
[ "$ERRORS" -gt 0 ] && exit 1 || exit 0
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 185 lines · 64 tokens per session scan A 2a3ef548c7b8
agent-linter is a skill published in the GitHub repository vibeeval/vibecosystem (538 stars, last pushed 2mo ago), licensed MIT. It adds 64 tokens to every session and 1,675 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
subagent-driven-development
Execute plans via delegatetask subagents (2-stage review).
mcporter
List, auth, and call MCP servers/tools from the terminal.
telegram-setup
Connect a Telegram bot to the Vellum Assistant gateway with automated webhook registration and credential storage.
vellum-skills-catalog
Discover bundled skills and search/install community skills from the skills.sh registry.
loongsuite-pilot-insight
A reporting workflow for turning LoongSuite Pilot and AI coding-agent logs into structured reports about events, teams, data quality, development efficiency, and AI use. It defines the meaning of the log fields and the measurements used in dashboards.
74-copy-hai-lop
Dung khi can viet slogan, headline poster hoac cau ngan co HAI LOP NGHIA — mat chu dung o hot/le/canh, lop trong la brand, de nguoi doc tu nhay mot nhip. Ra 3-5 phuong an khac cong thuc, kem brief visual giao skill 42. Kich hoat khi user nhac 'viet slogan', 'cau hai y', 'copy poster', 'an y nhu Durex', 'headline…