Install
$ agentstack add skill-xonika9-agent-skills-x9-agent-instructions ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Agent instructions
Own global behavioral policy in ~/.claude/CLAUDE.md, ~/.codex/AGENTS.md, and bounded briefs handed to another agent. Write machine-facing instructions in English; preserve literal user phrases in their original language.
Classify before editing
Place each rule in the narrowest owner that can reliably enforce it:
- Stable personal policy: authority, preservation, uncertainty, completion, communication → mirrored shared core in both global files.
- Runtime adapter: current models, tools, CLI flags, browser and subagent schemas → a runtime-specific global section or a user-owned adapter outside the reusable skill.
- Repository context: commands and local constraints → repository
AGENTS.md/CLAUDE.md, owned byx9-context-files-generator. - Domain behavior: situation-specific method → the relevant skill.
- Operational state: rankings, measurements, experiments, freshness dates → a dated state/log file, not standing policy.
- One-off task: goal, constraints, evidence, authority, deliverable, and observable completion bar → the task brief.
System and developer instructions remain higher authority than user, repository, or skill instructions. Never write a lower layer as though it can override a higher one.
Editing contract
- Read both global files and any runtime adapter affected by the change.
- Add a standing rule only when omitting it would make a capable agent materially likely to behave differently or repeat a known failure. Do not spend always-loaded context on generic advice the model already follows.
- Identify the canonical owner. Allow a short audience-specific summary elsewhere only when it changes behavior; point back to the owner.
- Preserve unrelated user content. Replace only the intended bounded section when markers exist.
- Keep the shared block between `
and` byte-identical in both global files. - State hard negative boundaries explicitly when safety or preservation depends on them. Prefer positive target behavior for ordinary guidance.
- Specify process only when the path is part of correctness: dependencies, approval gates, deterministic transformations, state/checkpoints, or known failure modes.
- Resolve the installed
x9-agent-instructionsdirectory from the loadedSKILL.md, then runpython3 /scripts/check_globals.py. Do not resolve the script from the caller's current working directory. Exercise the behavior scenarios below; a prose reread alone is not validation.
Behavior scenarios
- Answer/review request → inspect and report; no edits.
- Explicit build/fix request → safe in-scope local edits and tests proceed; external, destructive, costly, or expanded actions require confirmation.
- Required tool fails → report the failure; no from-memory substitution.
- Runtime fact changes → update one adapter and its freshness marker, not every skill.
- Shared policy changes → both global copies match; runtime-specific sections may differ deliberately.
- One-off brief has a load-bearing ambiguity → ask one question; otherwise proceed with a stated assumption.
Done
- Every added standing rule changes likely behavior or prevents a documented failure; generic advice was left out.
- The rule has one canonical owner and no accidental contradiction.
- Shared global policy passes
python3 /scripts/check_globals.pyfrom an unrelated working directory. - At least one positive and one boundary scenario were checked in a fresh context for substantive changes.
- The handoff names changed files and validation performed.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: xonika9
- Source: xonika9/agent-skills
- License: MIT
- Homepage: https://skills.sh/xonika9/agent-skills
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.