Install
$ agentstack add skill-xonika9-agent-skills-x9-context-files-generator ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README — it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming — see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps — measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Repository context files
Create concise, evidence-backed onboarding files for two audiences: agents (AGENTS.md/CLAUDE.md) and humans (README.md). Existing files are user-owned inputs, not blank templates.
Select the action
- Create or update: an explicit request to create, update, fix, or rewrite a context file authorizes the requested in-scope edits; do not ask for the same permission again.
- Audit: an explicit audit/check request is read-only. Report findings and proposed changes, then ask once whether to apply them.
- Bare skill invocation: inspect the current repository read-only by default. If changes would help, show the proposal and ask once before editing.
Infer the action from the whole request, not only trigger words. When an authorized edit reveals an additional normalization outside the requested change, ask once before applying that extra change.
Workflow
- Read current repository instructions and README completely enough to preserve non-inferable rules. Inspect actual commands, manifests, CI, and representative code before writing.
- Classify content by audience:
- Agent file: commands, dangerous gotchas, local constraints, non-inferable conventions, and verification contracts.
- README: purpose, setup, normal usage, and links to deeper material.
- Keep one canonical owner for each fact. A short audience-specific summary is allowed when it changes behavior; link to the owner instead of copying full detail.
- Make root
AGENTS.mdthe single canonical local instruction file and rootCLAUDE.mdexactly@AGENTS.mdplus a final newline, unless the repository or user declares an exception. Put every new local rule inAGENTS.md. Before normalizing an existingCLAUDE.md, merge its unique rules intoAGENTS.md; never discard them silently or preserve a duplicate copy by default. Apply this normalization immediately when it was explicitly requested or already required by repository policy; otherwise propose it and ask once before editing. - Treat an existing
AGENTS.md,CLAUDE.md, orREADME.mdas merge-only unless the user explicitly requests replacement. Show a diff for substantive rewrites. - Include architecture only when the rationale or boundary cannot be recovered cheaply from code and materially affects decisions. Avoid generated file trees and generic overviews.
- Use English for machine-facing instructions by default; follow repository/user language when human maintenance or domain literals make that clearer.
- Run commands you present only when they are safe, local, and within the requested repository scope. Read-only inspection and ordinary local validation are allowed by default. Destructive, external, costly, deployment, migration, production-data, account-mutating, or credential-changing commands require explicit user authority; otherwise preserve the command and label it unverified with the reason.
Read [references/agents-md.md](references/agents-md.md) when editing agent files, [references/readme.md](references/readme.md) for README work, and [references/research-basis.md](references/research-basis.md) when judging how much inferred architecture belongs in context.
Boundaries
- Global
~/.claude/CLAUDE.mdand~/.codex/AGENTS.mdbelong tox9-agent-instructions. - Skill folders belong to
x9-skill-creator. - Do not put personal absolute paths such as
/Users//...or/home//...in committed files. Prefer repository-relative paths or neutral placeholders; keep a machine-bound path only when the repository genuinely depends on that machine and the user explicitly wants it documented. - Do not overwrite existing instructions by position from a stale read; re-read immediately before applying a patch.
Done
- Existing non-inferable rules are preserved or intentionally changed with user authority.
- When canonical-file normalization was authorized and no exception applies,
CLAUDE.mdcontains only@AGENTS.mdand all local instructions are owned byAGENTS.md. - Commands and paths trace to the current repository.
- Agent and human files contain only behavior-changing audience-specific material.
- A fresh-context reader can start the project without inventing a command.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: xonika9
- Source: xonika9/agent-skills
- License: MIT
- Homepage: https://skills.sh/xonika9/agent-skills
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.