Borrowing it
Nothing to install: this file belongs to wanghao9610/STAR. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/wanghao9610/STAR/main/.agents/skills/star-code-architect/SKILL.mdgit clone --depth 1 https://github.com/wanghao9610/STARWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wanghao9610/star/star-code-architect)<a href="https://agentmods.dev/skills/wanghao9610/star/star-code-architect"><img src="https://agentmods.dev/badge/skills/wanghao9610/star/star-code-architect/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wanghao9610/star/star-code-architect"><img src="https://agentmods.dev/badge/skills/wanghao9610/star/star-code-architect.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.03164 |
| Opus 5.5 | $0.00019 | $0.01266 |
| Sonnet 5.5 | $0.00010 | $0.00633 |
| Haiku 4.5 | $0.00005 | $0.00316 |
Grade A, and why
star-code-architect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Research Code Architect
Invocation: star-code-architect [GITHUB_URL | PLAN_NAME] [DESCRIPTION]. A URL selects the import branch and repository; a plan name selects the design source. Otherwise infer the branch from ${CODE_NAME}/ and resolve the plan if available. Treat remaining natural language as binding intent, constraints, and authorization within the selected scope.
Shared conventions. Follow docs/mds/star-workflow/research-workflow-conventions.md for scope, authority, .env controls (STAR_LANG, INVOLVE, STAR_*_MODEL), runtime, language and provenance. Its opening loading rule selects the sections and localized resources this task needs.
Passing a tier model. Before delegation, read conventions §6 (scope and independent context), §10.8 (tier selection), and the current harness entry in §13 (model and depth controls).
Role
Give the research plan a place for the code to live. Upstream, star-plan-coach and star-plan-decomposer own the top-level plan and executable sub-plans; downstream, star-plan-executor implements plan steps inside ${CODE_NAME}/ — but assumes that codebase exists. This skill produces it: a working, renamed, provenance-tracked codebase under ${CODE_NAME}/, plus one authoritative architecture spec (metds/codearc.md) telling every later agent where code belongs.
Architect; do not implement research features. Feature work belongs to star-plan-executor against its sub-plans. If the user asks for new functionality mid-run, finish the architecture work and hand off.
Core Principles
- The plan drives the code. Read the root plan under
metds/plans/first: the search profile (Branch A), the survey focus (Branch B), and the target architecture all derive from it. With no plan and no URL, offerstar-plan-coachfirst — or take a topic / URL directly and proceed without one. - Two material decisions; autonomous between them. The reference repository and the target architecture plus migration table must be settled before their dependent work. Apply conventions §7.2 and §7.7: a URL, a named choice, or clear prior approval can settle either decision; ask one concrete question only for what remains unresolved. Everything covered then runs autonomously with bounded retries.
- Upstream layout is the baseline. A cloned repo's organization is battle-tested; do not restructure it wholesale. Improvements happen as small, verified items within the settled migration table — for a fresh clone the table is often short or empty, and "no migrations" is a fine outcome.
- Conservative rebrand, full provenance. Rename only what is safe and necessary (top-level package, imports, packaging metadata, entry points, README title), verifying after each rename. Registry strings, config type keys, and checkpoint-coupled names go untouched into the do-not-rename list. Strip
.git, keep upstreamLICENSE/CITATIONfiles, and record source URL + commit + license in${CODE_NAME}/UPSTREAM.mdbefore the import commit. Checklist:references/rebrand_checklist.md. - Verify per group; delegate where it helps. Delegate surveys and migrations wherever it helps: hand off a bounded, independent area or migration group whenever collaboration tools are available and delegation materially helps, and execute locally when it does not. When delegating, dispatch a read-only sub-agent for a read-only survey — on the READ tier's model (conventions §10.8), where the harness can name one — or a writing sub-agent for a migration, on the EXEC tier's model, and give it the narrow brief in
references/orchestration_spec.md; a migration agent writes only its own group's files. Either way: disjoint file ownership per group, re-run every check yourself (never trust a self-reported pass; a migration's checks are cheap, so this skill does not take conventions §6.3's evidence-acceptance route), commit once per verified group, retry ≤2, restore what still fails. - One spec, short cross-references. The durable output is
metds/codearc.md— directory responsibilities, placement rules, naming and style conventions, plan-component map, migration record, the do-not-rename list.AGENTS.mdgets a ≤10-line summary section pointing to it (editAGENTS.mdonly —CLAUDE.mdis a symlink to it), and.cursor/rules/code-codearc.mdcgets an always-on pointer. Never fork the spec's content into multiple files.
What ships with it
15 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 64 B
- assets/codearch_template_zh.md 2.9 KB
- assets/codearch_template.md 3.0 KB
- assets/upstream_template_zh.md 1.2 KB
- assets/upstream_template.md 1.0 KB
- references/branch_a_zh.md 3.9 KB
- references/branch_a.md 4.1 KB
- references/orchestration_spec_zh.md 5.0 KB
- references/orchestration_spec.md 5.2 KB
- references/rebrand_checklist_zh.md 2.8 KB
- references/rebrand_checklist.md 2.8 KB
- references/repo_rubric_zh.md 3.3 KB
- references/repo_rubric.md 3.3 KB
- references/survey_spec_zh.md 3.1 KB
- references/survey_spec.md 3.2 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 14d ago Changed 4ef7075d44d0
- 1mo ago Changed 17281d255214
- 2mo ago Changed · -21 lines · -149 tokens per session 42f623b52907
- 2mo ago First seen · 123 lines · 197 tokens per session scan A 8c6f1d82e876
star-code-architect is a skill published in the GitHub repository wanghao9610/STAR (54 stars, last pushed 2d ago), licensed MIT. It adds 48 tokens to every session and 3,164 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
star-code-architect compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| star-code-architectwanghao9610/STAR | Skill | 54 | 2d ago | MIT | A | 48 | Codex |
| create-workflowLazyAGI/LazyMind | Skill | 589 | yesterday | Apache-2.0 | A | 0 | Claude Code, Codex |
| task-prd-creatorcoco-research/coco | Skill | 785 | yesterday | Apache-2.0 | A | 55 | Claude Code, Codex |
| personal-document-searchLazyAGI/LazyMind | Skill | 589 | yesterday | Apache-2.0 | A | 72 | Claude Code, Codex |
| ui-resilient-accessibilityLazyAGI/LazyMind | Skill | 589 | yesterday | Apache-2.0 | A | 39 | Claude Code, Codex |
| ui-safe-form-patternsLazyAGI/LazyMind | Skill | 589 | yesterday | Apache-2.0 | A | 50 | Claude Code, Codex |
| ui-secure-reviewLazyAGI/LazyMind | Skill | 589 | yesterday | Apache-2.0 | A | 51 | Claude Code, Codex |