javascript

javascript is a skill for Claude Code from xobotyi/cc-foundry. It costs 51 tokens per session (6,388 once invoked), scanned B, original, MIT.

Guidance for writing, reviewing, debugging, and understanding JavaScript, the programming language used to make web pages and many other applications.

In plain words
What is it for?
It is for JavaScript and JSX projects, including writing features, refactoring code, fixing bugs, and organizing imports and types.
Why use it?
It helps keep JavaScript code readable and avoids confusing patterns in functions, asynchronous work, modules, objects, and error handling.

Skill for Claude Code

Written for Claude Code: when-to-use in frontmatter. Also seen: mentions subagents; positional $N argument; mentions Claude Code.

Part of the javascript plugin — 5 skills shipped together

Good fit It is for JavaScript and JSX projects, including writing features, refactoring code, fixing bugs, and organizing imports and types.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/xobotyi/cc-foundry/javascript
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add xobotyi/cc-foundry --skill javascript
Clone the repo
git clone --depth 1 https://github.com/xobotyi/cc-foundry

Made for: Claude Code.

Or install javascript, the plugin that ships this one along with the rest of its 5 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for javascript

README.md
[![agentmods](https://agentmods.dev/badge/skills/xobotyi/cc-foundry/javascript/github.svg)](https://agentmods.dev/skills/xobotyi/cc-foundry/javascript)
Your own site
<a href="https://agentmods.dev/skills/xobotyi/cc-foundry/javascript"><img src="https://agentmods.dev/badge/skills/xobotyi/cc-foundry/javascript/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for javascript

Your own site · 80×15
<a href="https://agentmods.dev/skills/xobotyi/cc-foundry/javascript"><img src="https://agentmods.dev/badge/skills/xobotyi/cc-foundry/javascript.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 51 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,388 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00051 $0.06388
Opus 5.5 $0.00020 $0.02555
Sonnet 5.5 $0.00010 $0.01278
Haiku 4.5 $0.00005 $0.00639

Measured 7d ago against content hash e78265aeceb7, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

javascript scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Strips warnings and disclaimersmediumAnti-refusal

Omitting safety caveats hides risk from the user and is a common jailbreak preamble.

When **reviewing** JavaScript, cite the violation and show the fix inline. Do not lecture.
plugins/javascript/skills/javascript/SKILL.md · 362 lines

How it starts

The opening of the file, as written. The whole thing — 362 lines — stays where its author put it; the contents beside it link to each section on GitHub.

JavaScript fails by continuing. A mismatched type is coerced, a missing property is undefined, a rejected promise nobody watched is a warning. None of it reports itself, so the discipline is to make a failure loud at the earliest point it can be seen. Three biases decide most calls:

  • Prefer the construct that refuses over the one that converts — === over ==, ?? over ||, Number(s) over parseInt(s), a thrown error over a silent undefined.
  • The declared engine baseline decides what may be written, not the ECMAScript edition a feature belongs to.
  • Reach for the built-in globals first. A dependency earns its place by doing what Intl, URL, structuredClone, AbortController, and the iterator helpers do not.

Language Edition

Read the project's engine baseline before writing code: engines in package.json, browserslist, target and lib in tsconfig.json or jsconfig.json, .nvmrc, and the CI matrix. Where a transpiler stands between source and runtime, its target governs the output and the source may run ahead; where none does, the engine baseline's oldest engine governs the source.

An edition number is not an availability claim. Engines ship features years before ratification and lag on others, and the gap runs both ways inside a single edition: Array.fromAsync and Math.sumPrecise are both ES2026, yet the first shipped in Chrome 121 and reached Baseline widely available on 2026-07-25, while the second reached Baseline newly available on 2026-04-10 and is absent from Node.js 26. Check the feature, never the edition.

Floor edition per feature this skill's rules reference. Anything from ES2019 or earlier is available in every engine a project can realistically target.

  • ES2020 — ?., ??, globalThis, BigInt, Promise.allSettled, String.prototype.matchAll, dynamic import(), import.meta, specified for...in order
  • ES2021 — ??=, ||=, &&=, String.prototype.replaceAll, Promise.any, AggregateError, numeric separators
  • ES2022 — class fields, #private fields and methods, #x in obj, static {} blocks, top-level await, Object.hasOwn, .at(), Error cause, RegExp d flag
  • ES2023 — toSorted, toReversed, toSpliced, with, findLast, findLastIndex
  • ES2024 — Object.groupBy, Map.groupBy, Promise.withResolvers, RegExp v flag, String.prototype.isWellFormed
  • ES2025 — iterator helpers, Set methods (union, intersection, difference, …), Promise.try, RegExp.escape, RegExp modifiers (?i:), duplicate named capture groups, import attributes, JSON modules
  • ES2026 — Map.prototype.getOrInsert and getOrInsertComputed, Iterator.concat, Array.fromAsync, Error.isError, Math.sumPrecise, Uint8Array base64 and hex, JSON.rawJSON
  • Stage 4, unratified — using and await using with Symbol.dispose and DisposableStack; Temporal; Iterator.zip. No Safari 26.x release implements any of them, so none is safe for an engine baseline that includes Safari 26. using requires Chrome 134, Firefox 141, or Node.js 24; Temporal requires Chrome 144, Firefox 139, or Node.js 26. Atomics.pause is the exception, reaching Chrome 133, Firefox 137, and Safari 18.4.
  • Not shippable — decorators are Stage 2.7 and no engine implements them. A project using them runs TypeScript or Babel, and TypeScript's experimentalDecorators is the older, incompatible design.

Read [${CLAUDE_SKILL_DIR}/references/versions/es20NN.md] — one file per ratified edition, es2020.md through es2026.md, plus [${CLAUDE_SKILL_DIR}/references/versions/stage4-queue.md] for the unratified set — when writing against a feature near the engine baseline, and whenever raising it. Each carries what its edition added, what behavior it changed, and the traps it introduced.

Read the full file on GitHub · 362 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago Changed · +8 lines e78265aeceb7
  2. 1mo ago Changed · +74 lines · +4 tokens per session a317249c412e
  3. 1mo ago First seen · 280 lines · 47 tokens per session scan B a72f075621f1

Subscribe to this mod's changes

javascript is a skill published in the GitHub repository xobotyi/cc-foundry (22 stars, last pushed 7d ago), licensed MIT. It adds 51 tokens to every session and 6,388 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 1 finding (strips warnings and disclaimers). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

erlang-otp-behaviors

Use when oTP behaviors including genserver for stateful processes, genstatem for state machines, supervisors for fault tolerance, genevent for event handling, and building robust, production-ready Erlang applications with proven patterns.

benchflow-ai/skillsbench · 52 tokens

omh-rust

This is an OMH rust workflow skill, projected for Agent Skills hosts (Claude Code, Codex, Cursor, opencode, OpenClaw, pi).

rlaope/oh-my-hermes · 74 tokens

axiom-concurrency

Use when writing ANY async code, actors, or threads in an Apple-platform app, or seeing ANY concurrency error. Covers Swift 6 concurrency, @MainActor, Sendable, data races, async/await patterns.

CharlesWiltgen/Axiom · 49 tokens

haskell-pro

Expert Haskell engineer specializing in advanced type systems, pure functional design, and high-reliability software. Use PROACTIVELY for type-level programming, concurrency, and architecture guidance.

rmyndharis/antigravity-skills · 41 tokens

migrate-better-result-3

Migrate a TypeScript codebase from better-result 2.x to 3.0. Use when upgrading better-result across the TaggedError syntax, removed Result serialization helpers, recovery inference, matching, or retry APIs.

dmmulroy/better-result · 52 tokens

advpl-tlpp-sdd

Plan and implement Protheus projects/features with 4 adaptive phases — Specify, Design, Tasks, Execute. Auto-sizes depth based on complexity. Creates atomic tasks with verification criteria, atomic commits, requirement traceability, and persistent memory across sessions. Specific to AdvPL/TLPP + Protheus. Use when…

totvs/engpro-advpl-tlpp-skills · 209 tokens