mirror of
https://github.com/addyosmani/agent-skills.git
synced 2026-10-26 15:05:04 +00:00
SyamsandClaude Opus 5
623af98704
SKILL.md loaded ~5.3k tokens on every activation, 30% of it inline TypeScript examples that an agent only needs when it reaches that code. docs/skill-anatomy.md already asks for SKILL.md under 500 lines with reference material in supporting files; this skill was at 524. Move the OWASP prevention patterns, input-validation and upload code, SSRF check, destructive-path discussion, dependency-audit decision tree, rate-limiting and secrets snippets, data-classification table, and LLM output example verbatim into references/hardening-patterns.md (same convention as constraint-driven-development/references/floor-guard.md). SKILL.md keeps the workflow: threat model, three-tier boundaries, and a condensed "Hardening Controls" section stating each rule with a deep link to its pattern. Frontmatter, Process, Rationalizations, Red Flags, and Verification are byte-identical to before. The skill's own review checklist duplicated references/security-checklist.md; replace it with a pointer and add its three privacy items to the shared checklist so nothing is lost. SKILL.md: 524 -> 216 lines, 4096 -> 2449 words (~-40% tokens per load). Routing unchanged: run-evals rank-1 stays 100%, no description edits. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>