Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add YuDefine/nuxt-supabase-starter --skill cli-designgit clone --depth 1 https://github.com/YuDefine/nuxt-supabase-starterWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yudefine/nuxt-supabase-starter/cli-design)<a href="https://agentmods.dev/skills/yudefine/nuxt-supabase-starter/cli-design"><img src="https://agentmods.dev/badge/skills/yudefine/nuxt-supabase-starter/cli-design/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yudefine/nuxt-supabase-starter/cli-design"><img src="https://agentmods.dev/badge/skills/yudefine/nuxt-supabase-starter/cli-design.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00090 | $0.01060 |
| Opus 5.5 | $0.00036 | $0.00424 |
| Sonnet 5.5 | $0.00018 | $0.00212 |
| Haiku 4.5 | $0.00009 | $0.00106 |
Grade A, and why
cli-design scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
CLI Design
設計與稽核共用同一份判準:每一項有 ID,設計時逐項滿足,稽核時逐項判定。下文 <skill 根目錄> 指本 skill 所在目錄(Claude Code 載入時印出的 Base directory for this skill)。
SOP
Phase 1 -- 收斂對象與 lane
- READ 讀取使用者需求與目標 CLI 的原始碼入口、文件與既有
--help,判定走 design lane(新 CLI,或新增、改動命令介面)還是 audit lane(稽核既有 CLI),並確認主要使用者(agent、CI、人)與規模(單支 script 或多層命令樹)。 - READ 讀取
rules/AI友善CLI設計判準.md,依其適用條件與已確認的使用者、規模,列出本次適用的判準 ID;design lane 進 Phase 2,audit lane 進 Phase 3。
Phase 2 -- 產出命令介面規格(design lane)
- THINK 依已載入判準逐項 ID 設計命令樹、共通旗標、輸出契約、錯誤與退出碼、非互動行為、破壞性操作、可發現性、認證設定與一致性治理;與既有命令衝突時,以已載入判準的詞彙為準並列出遷移方式。
- WRITE 先讀取
templates/cli-design-spec.md與templates/cli-design-spec.example.md,再依骨架複製結構、參考範例改寫內容,產出規格寫入使用者指定位置(未指定時寫進 scratchpad)。 - WRITE 若使用者要求實作,依規格實作,完成後以實作出的 CLI 為對象進 Phase 3;未要求實作則進 Phase 5。
Phase 3 -- 蒐集稽核證據(audit lane)
- READ 讀取
rules/稽核探測與判定判準.md,從原始碼確認--help會被攔截,以及目標 CLI 不帶引數與遇到看不懂的輸入時做什麼,再依已載入規則決定本次--allow、--typo與--depth。 - DELEGATE 執行
uv run <skill 根目錄>/scripts/probe_cli.py [--allow <已確認安全的探測>] [--typo <名稱>] [--depth <N>] -- <CLI 命令與前綴參數>,取得 help、版本、未知命令、未知旗標、色碼、等待輸入、子命令與旗標清單的 JSON 事實。 - READ 讀取目標 CLI 原始碼與文件,補齊探測拿不到的判準項(破壞性操作的確認路徑、退出碼對照、錯誤輸出串流、認證優先序)。
Phase 4 -- 判定並產出稽核報告(audit lane)
- THINK 依已載入規則逐項 ID 判定 PASS、PARTIAL、FAIL 或 N/A,每格對應一筆探測輸出或原始碼位置,FAIL 與 PARTIAL 寫出修法,再依嚴重度排序。
- WRITE 先讀取
templates/cli-audit-report.md與templates/cli-audit-report.example.md,再依骨架複製結構、參考範例改寫內容,產出報告寫入使用者指定位置(未指定時寫進 scratchpad)。
Phase 5 -- 驗證產出
- READ 回頭檢查產出是否符合已載入規則:規格的每個適用 ID 都有對應設計或 N/A 理由;報告的每格判定都有證據、每個 FAIL 都有修法、未探測項都寫了原因;不符合就回到對應 phase 修正。
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 44 lines · 90 tokens per session scan A 4da29e51eb14
cli-design is a skill published in the GitHub repository YuDefine/nuxt-supabase-starter (44 stars, last pushed today), licensed MIT. It adds 90 tokens to every session and 1,060 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-26.
Other skills, from other repositories
before-after
Produce a before/after visual comparison of an evlog surface (landing, docs, telemetry, playgrounds) and share it as public Blob URLs. Load when a change is visual, when someone asks for screenshots or a visual diff, or when a shipped PR touches apps/docs or apps/telemetry and deserves visual evidence.
svg
Author and edit .svg files in a Grida editor session — live-canvas binding, SVG output style, and parse-error recovery. Use when creating or modifying an SVG document.
create-wot-ui-theme
A workflow for creating one SCSS file that defines and mounts a custom Wot UI theme. SCSS is a CSS format with extra features for organizing styles.
prd-v04-screen-flow-definition
Connect user journeys to screens, defining the UI structure and navigation paths during PRD v0.4 User Journeys. Triggers on requests to define screens, design screen flows, map UI structure, plan navigation, or when user asks "what screens do we need?", "define screens", "screen flow", "UI structure", "information…
export-component-to-other-repo
Port a component from nextjs-css-agent-components into a different repo without losing the design-system precision. Use when the user says "copy this component to ", "lift Button into ", "bring the Thin layout over", or otherwise wants a faithful transplant of one or more components from this codebase. Carries over…
ui-asset-pipeline
Define import, 9-slice, atlas packing, theming, and naming rules for UI visual assets (buttons, panels, icons, bars).