code-pipeline-skill

code-pipeline-skill is a skill for Claude Code, Codex from yunzeforbetter/CastFlow. It costs 49 tokens per session (1,965 once invoked), scanned A, original, MIT.

A workflow for coordinating coding work across one or more software modules. A module is a focused part of a larger application.

In plain words
What is it for?
Use it for changes involving several modules, shared interfaces, requirement documents, designs, dependency handoffs, or staged verification.
Why use it?
It helps agents understand existing requirements and dependencies before changing code, while providing checkpoints for simple and complex work.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions CLAUDE.md; mentions subagents.

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/yunzeforbetter/castflow/code-pipeline-skill
Any agent
npx skills add yunzeforbetter/CastFlow --skill code-pipeline-skill
Clone the repo
git clone --depth 1 https://github.com/yunzeforbetter/CastFlow

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for code-pipeline-skill

README.md
[![agentmods](https://agentmods.dev/badge/skills/yunzeforbetter/castflow/code-pipeline-skill.svg)](https://agentmods.dev/skills/yunzeforbetter/castflow/code-pipeline-skill)
Your own site
<a href="https://agentmods.dev/skills/yunzeforbetter/castflow/code-pipeline-skill"><img src="https://agentmods.dev/badge/skills/yunzeforbetter/castflow/code-pipeline-skill.svg" alt="Measured on agentmods" height="20"></a>
Per session 49 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,965 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00049 $0.01965
Opus 5 $0.00024 $0.00983
Sonnet 5 $0.00010 $0.00393
Haiku 4.5 $0.00005 $0.00197

Measured 6d ago against content hash e6be09a629a2, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

code-pipeline-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/pipeline_merge.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.castflow/core/skills/code-pipeline-skill/SKILL.md · 101 lines

How it starts

The opening of the file, as written. The whole thing — 101 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Code Pipeline 工作流

code-pipeline-skill 是一个复合组件:它组合 shared agents、模块配对执行单元与可选 skill,在 pipeline 执行期间维护自己的协议与运行态投影;它不定义 shared components 的本体规则。

场景入口

  • 标准模式:单模块、双模块、依赖链短,但仍需要 Step 1 / 3 / 4 / 5 的最小闭环
  • 复杂系统模式:3+ 模块、共享契约重、需要 wave / dispatch / checkpoint / sub-pipeline
  • 简单局部改动:若一个 skill 或单个 agent 就能收敛,不值得启 pipeline
  • 但只要输入包含 PRD / 外部需求文档 / 设计稿,或执行者尚未掌握该功能域的现有承载面,就不得以“简单局部改动”为由跳过 pipeline;至少先完成一次 Step 1

AI 读取顺序

  1. SKILL_MEMORY.md
  2. config/step_contracts.md
  3. config/pipeline_protocol.md
  4. 进入 L1+、多模块协作或需要 Freeze / Closure / Coverage 时,再读 config/handoff_protocol.md
  5. 需要 runtime state 真身时,读 config/runtime_state_schema.md
  6. 进入复杂系统模式后,再按需读取对应主定义页:
    • 总模型:architecture/orchestration-model.md
    • 状态:architecture/artifact-state-machine.md
    • barrier / wave / dispatch:architecture/barrier-and-wave-scheduling.md
    • 子 pipeline:architecture/subpipeline-strategy.md
    • stalled / recovery:architecture/stall-recovery.md
    • 局部 / 全局验证:architecture/verification-architecture.md
  7. 需要模板或判例时读取 EXAMPLES.mdexamples/*

Step 1 快速门

  • code-pipeline 模式下,Step 1 的正文必须显式出现独立的 ### CapabilityScan block,不能用 Phase 叙事、PRD 摘要或一句“已检索”代替
  • CapabilityScan 至少要写出 MatchedCapabilitiesCandidateHostsEvidenceRecommendation;即使未命中可复用承载,也必须显式写 None / 未命中,不能省略
  • Evidence 只接受项目代码路径、符号、检索范围与命中说明;PRD、用户口述、设计说明只能定义 scan scope,不能单独充当源码证据
  • 未满足以上条件时,主流程只能维持 DiscoveringPendingDecision,不得宣布 Step 1 完成,更不得进入 Step 2 / Step 3

工作流总览

Step 1-9 的唯一 Step 收口页与 Step 级强规则入口见 config/step_contracts.md;执行期的精确调度合同、状态迁移与读写路径见 config/pipeline_protocol.md。本页只回答三件事:什么时候启 pipeline、每一步由谁执行、接下来该深读哪里。

Step 1 内部允许按 DecompositionSnapshot(拆解快照) -> CapabilityScan(能力探寻) -> ArtifactBinding(产物绑定) -> DecisionSynthesis(决策综合)做认知分治;scan 类任务可以拆给只读 subagent,但 decision_statusHandoff Level DecisionFreeze Recommendation 仍只由 Step 1 聚合层写回。

Step 导航

Step 执行单元 导航信息 深读
Step 1 requirement-analysis-agent 先产出 DecompositionSnapshot;复杂认知优先拆给只读 scan subagent;若 CapabilityScan 无独立 block 或缺少源码 Evidence,视为 Step 1 未完成;若存在路线分歧,必须停在决策态,不能直接推进实现 config/step_contracts.mdconfig/pipeline_protocol.md
Step 2 requirement-analysis-agent 只在路线已收敛且命中冻结条件时进入 config/step_contracts.mdconfig/pipeline_protocol.mdconfig/handoff_protocol.md
Step 3 模块配对执行单元 / main agentL0 负责实现;进入前必须确认决策态已解决且 Freeze Gate 已过 config/step_contracts.mdconfig/pipeline_protocol.md
Step 4 integration-matching-agent 只做依赖闭合验证,不改代码 config/step_contracts.mdconfig/handoff_protocol.md
Step 5 pipeline-verify-agent 只做 coverage / verdict 决策,不改代码 config/step_contracts.mdconfig/pipeline_protocol.mdconfig/handoff_protocol.md
Step 6 模块配对执行单元 / main agent 只补 CompletableBlocks,补完后至少回 Step 4 config/step_contracts.mdconfig/handoff_protocol.md
Step 7 debug-skill 只在需要边界条件验证时进入 config/step_contracts.md
Step 8 profiler-skill 只在需要性能诊断时进入 config/step_contracts.md
Step 9 main agent 必做收尾;未完成 run_id / signal 清理不得结束 pipeline config/step_contracts.mdconfig/pipeline_protocol.md

Read the full file on GitHub · 101 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 101 lines · 49 tokens per session scan A e6be09a629a2

Subscribe to this mod's changes

code-pipeline-skill is a skill published in the GitHub repository yunzeforbetter/CastFlow (108 stars, last pushed 2mo ago), licensed MIT. It adds 49 tokens to every session and 1,965 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

local-ai-agents

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…

microsoft/ai-agents-for-beginners · 200 tokens

chronicle

Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…

microsoft/vscode · 72 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens

next-cache-components-adoption

Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…

vercel/next.js · 95 tokens