violet: Skill for Claude Code

.agents/skills/api-toolchain/SKILL.md

api-toolchain is a skill for Claude Code, Codex from VOD-Studio/violet. It costs 61 tokens per session (641 once invoked), scanned A, original, MIT.

A decision guide for running Go commands such as tests, builds, and code-generation tools when Go may not be installed locally. It chooses between the local machine and a Docker Compose development container, then remembers the user's choice.

In plain words
What is it for?
Use it before running Go tests, builds, linters, database-code generators, or migration tools in projects that may use Docker Compose.
Why use it?
It avoids repeatedly asking how Go should be run and prevents commands from being sent to an environment where the required tools are unavailable.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

This is VOD-Studio/violet's own configuration. It tells Claude Code and Codex how to work on violet itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything violet configures →

Reuse

Borrowing it

Nothing to install: this file belongs to VOD-Studio/violet. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/VOD-Studio/violet/release/2.0/.agents/skills/api-toolchain/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/VOD-Studio/violet

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for api-toolchain

README.md
[![agentmods](https://agentmods.dev/badge/skills/vod-studio/violet/api-toolchain/github.svg)](https://agentmods.dev/skills/vod-studio/violet/api-toolchain)
Your own site
<a href="https://agentmods.dev/skills/vod-studio/violet/api-toolchain"><img src="https://agentmods.dev/badge/skills/vod-studio/violet/api-toolchain/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for api-toolchain

Your own site · 80×15
<a href="https://agentmods.dev/skills/vod-studio/violet/api-toolchain"><img src="https://agentmods.dev/badge/skills/vod-studio/violet/api-toolchain.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 61 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 641 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00061 $0.00641
Opus 5.5 $0.00024 $0.00256
Sonnet 5.5 $0.00012 $0.00128
Haiku 4.5 $0.00006 $0.00064

Measured 2mo ago against content hash 4d91bd4c48e5, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

api-toolchain scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/api-toolchain/SKILL.md · 28 lines

What it actually says

Go 工具链执行决策

按顺序走,停止在第一个命中分支:

  1. go version 本机可用 → 直接执行,本 skill 到此为止。
  2. 本机无 Go,且已有用户决定(会话上下文或长期记忆中有记录)→ 按记录的决定路由,而非按安装状态:
    • 决定为「安装」→ 安装流程未完成(曾中断)则继续协助安装,装完走 1;仅当用户明确改口才转「拒绝」。
    • 决定为「拒绝」→ 走下方容器方案。
  3. 本机无 Go,无决定 → 问用户一次「是否在本机安装 Go?」
    • 允许 → 协助安装,装完走 1。
    • 拒绝 → 走容器方案。
    • 无论哪个回答,立即用 learn 记录决定,后续会话直接命中分支 2,不再重复询问。

容器方案(用户决定不装 Go 时)

项目以 compose 起 dev 环境时,go 命令一律进容器执行:

  • 定位 compose 文件(docker-compose*.yml / compose.y*ml)与 api service 名(docker compose -f <file> config --services,或 docker compose ps 的 Service 列按容器名映射)。
  • 形态:docker compose -f "<file>" exec -T "<svc>" go test ./...;-T 禁用 TTY,输出可直接进管道。占位符替换为实际值时保持引号。
  • Makefile 目标在宿主机不可用时,把目标 recipe 里的 go 命令搬进容器执行(参数以 Makefile 当前定义为准):$(VAR) 类 make 变量先在 make 层展开成实际值再搬,不原样粘贴。recipe 里的 cd <dir> 类相对路径,先看该路径在容器内的挂载点(compose 文件 volumes: 映射,或 docker compose exec <svc> pwd 确认工作目录),再换成容器内路径。
  • codegen / 迁移工具容器内缺失时向用户报告,不在宿主机安装。
  • 前提容器在运行:docker compose ps 确认;未启动则从 Makefile help 找启动目标——选纯 compose up 的,走本地脚本、依赖本机工具链的目标同样不可用。
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 28 lines · 61 tokens per session scan A 4d91bd4c48e5

Subscribe to this mod's changes

api-toolchain is a skill published in the GitHub repository VOD-Studio/violet (4 stars, last pushed yesterday), licensed MIT. It adds 61 tokens to every session and 641 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

api-toolchain compared with skills from other repositories

api-toolchain next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
api-toolchainVOD-Studio/violetSkill4yesterdayMITA61Claude Code, Codex
migrate-goldmark-extension-v1-to-v2yuin/goldmarkSkill5.1k4d agoMITA26Claude Code
migrate-goldmark-app-v1-to-v2yuin/goldmarkSkill5.1k4d agoMITA25Claude Code
use-modern-goJetBrains/go-modern-guidelinesSkill3.9k22d agoApache-2.0A32Claude Code
jwx-guide-v4lestrrat-go/jwxSkill2.4k3d agoMITA61Claude Code
goericrisco/rsc-harnessSkill5032d agoMITA86Claude Code, Codex
gographozgurcd/gographSkill231yesterdayMITA69Claude Code