New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

CodFlow Change Workflow

by bighadj22 in bighadj22/codflow

A step-by-step workflow for changing the CodFlow repository: read the AGENTS.md contract, respect package boundaries, verify before claiming done and keep PRs small.

Apache-2.0Auto-check passedDevelopment

Install CodFlow Change Workflow

skills CLI
$ npx skills add bighadj22/codflow --skill codflow-governance -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install bighadj22/codflow codflow-governance --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/bighadj22/codflow.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.opencode/skills/codflow-governance .claude/skills/codflow-governance && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
codflow-governance
GitHub stars
346
Token cost
~1.1k tokens
SKILL.md length
492 words
Files
1
Skills in repo
11
Repo updated
First seen
Licence
Apache-2.0

At a glance

A step-by-step workflow for changing the CodFlow repository: read the AGENTS.md contract, respect package boundaries, verify before claiming done and keep PRs small.

  • Works in 6 steps: Locate the change → Install dependencies → Make the change → …
  • Making any code, docs, schema or CI change in the CodFlow repository
  • SKILL.md covers When to use, The change workflow, Review checklist (use when… and Security reports
  • Calls npm, wrangler and npx

What it does

CodFlow is an Apache-2.0, self-hosted cash-on-delivery e-commerce platform for Algeria, and this skill covers how to land a change in it. It defers to the root `AGENTS.md`, which it calls the source of truth, and to each package's own `AGENTS.md`. The agent first identifies the affected package among cod-server, cod-client-astro, cod-shared and cod-astro/theme01, keeps schema, queries, RBAC scopes and error codes only in `cod-shared`, adds new migrations instead of rewriting applied ones, and asks before adding a production dependency or changing the D1 schema.

Dependencies install once at the root with `npm ci` and a single lockfile. Each commit holds one logical change in Conventional Commits style, secrets never go into the repo, and behavior changes get a focused test. Verification is mandatory: `npm run typecheck` after TypeScript edits, `npm test` after behavior changes, and README feature claims must match what the code really does. Work is not complete until typecheck and tests pass. Branches use `feat/`, `fix/`, `chore/` or `docs/` prefixes, and PRs should stay under roughly 500 lines. The excerpt is truncated at the PR checklist.

When your agent uses it

  • Making any code, docs, schema or CI change in the CodFlow repository
  • Writing README feature claims that must match the code
  • Reviewing a contribution to CodFlow against its contribution rules
  • Adding a dependency or a database migration to CodFlow

Example prompts

  • “Add an RBAC scope for delivery agents in CodFlow and follow the repo workflow.”
  • “Update the README feature list and make sure every claim is backed by code.”
  • “Review this pull request against the CodFlow contribution rules.”

Requirements

  • A checkout of the CodFlow repository
  • Node.js and npm

Workflow steps

6 steps, taken from the step headings in SKILL.md.

  1. Locate the change
  2. Install dependencies
  3. Make the change
  4. Verify — never skip
  5. Commit, branch, PR
  6. Changelog

What it can do on your machine

Read from SKILL.md and the folder at commit ed79aa9. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • npm
    • wrangler
    • npx

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use npm, wrangler and npx, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

CodFlow Change Workflow loads about 1.1k tokens when it runs. Until then it costs about 129 tokens; SKILL.md has 492 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~129
When it runs · the whole SKILL.md, loaded when a task matches
~1.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from bighadj22/codflow at commit ed79aa9, republished under its Apache-2.0 licence (© bighadj22). 492 words, ~1,062 tokens.

Download SKILL.mdSave it as .claude/skills/codflow-governance/SKILL.md (or your agent's skills folder).
name
codflow-governance
description
CodFlow repository workflow — the process for making and shipping a change that meets this repo's standards. Use when making ANY change to CodFlow (cod-server, cod-client-astro, cod-shared, cod-astro/theme01, README, docs, CI), before committing or opening a PR, writing README feature claims, touching migrations or the D1 schema, adding dependencies, or reviewing contributions. Loads and defers to AGENTS.md for the repo contract; this skill is the step-by-step workflow, not a duplicate of it.

CodFlow Governance — change workflow

CodFlow is an Apache-2.0, self-hosted, cash-on-delivery (COD) e-commerce platform for Algeria, open-sourced for the first time. This skill is the workflow for landing a change. The repo contract (layout, commands, verification, boundaries, traps, security rules) lives in the root AGENTS.md — read it first; it is the source of truth. Package-specific commands and boundaries live in each package's AGENTS.md (cod-astro/theme01/AGENTS.md).

When to use

  • You are about to change code, docs, schema, or CI in this repo.
  • You are writing README feature claims.
  • You are reviewing a contribution.

The change workflow

1. Locate the change
  • Identify the package(s) affected (cod-server / cod-client-astro / cod-shared / cod-astro/theme01). Read the root AGENTS.md, then the package's AGENTS.md.
  • Respect the cod-shared boundary: schema, queries, RBAC scopes, and error codes are defined there and only there. Do not duplicate them in a package.
  • Migrations: add a new migration; never rewrite an already-applied one.
  • Ask before adding a production dependency or changing the D1 schema.
  • Keep engine logic out of cod-astro/theme01 (swappable theme layer).
2. Install dependencies

One install at the repo root covers every workspace (single root lockfile — never create per-package lockfiles):

sh
npm ci
3. Make the change
  • One logical change per commit. Conventional Commits (feat:, fix:, docs:, chore:, refactor:, test:, ci:).
  • No explanatory code comments unless asked.
  • Never commit secrets (API keys, carrier tokens, credentials). Real secrets go in wrangler secrets / .dev.vars (gitignored).
  • Add or update a focused test for behavior changes.
4. Verify — never skip
  • After any TypeScript change: run npm run typecheck in the affected package (theme01: npx astro check).
  • After any behavior change: run npm test in the affected package.
  • README claims must be code-verified: never write a feature claim the code does not implement. If a feature is partially built, say exactly that.
  • Do not mark work complete until typecheck + tests actually pass.
Show full SKILL.md (192 more words)Show less
5. Commit, branch, PR
  • Work on a branch named feat/…, fix/…, chore/…, docs/….
  • PRs must be small enough to review in one sitting (< ~500 lines).
  • The PR template checklist must pass: no secrets, tests cover the change, README claims match code, conventional commit message.
  • CI (typecheck + tests for cod-server, cod-client-astro, cod-client (legacy), and astro check + tests for theme01) must be green.
  • When reviewing: README claims only what code does? Secrets absent? Tests included? Migrations additive?
6. Changelog
  • User-visible changes go under [Unreleased] in CHANGELOG.md (Keep a Changelog), grouped by Added / Changed / Deprecated / Removed / Fixed / Security.
  • Releases follow SemVer, are git-tagged, and announced via GitHub Releases.

Review checklist (use when reviewing a contribution)

  • README claims only what the code actually does
  • No secrets / credentials in the diff
  • Tests cover the change (or an existing test covers it)
  • Migrations are additive (new file, not a rewrite)
  • cod-shared boundaries respected (no duplicated schema/scopes)
  • Conventional commit message
  • Typecheck + tests pass for affected packages

Security reports

  • Never accept vulnerability reports as public issues — point reporters to GitHub private vulnerability reporting (see SECURITY.md).
  • Acknowledgment target: 3 business days; coordinated disclosure.
  • Supported versions: only main and the latest tag.

© bighadj22, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .opencode/skills/codflow-governance of bighadj22/codflow.

Open the folder on GitHubat commit ed79aa9

Compare with similar skills

CodFlow Change Workflow next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

CodFlow Change Workflow compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
CodFlow Change Workflow this skillbighadj22/codflow346—~1.1kAutomated safety check: PassApache-2.0
Verdaccio Pull Request Workflowverdaccio/verdaccio18k—~1.9kAutomated safety check: PassMIT
Git PR Workflowandymai/brepjs114—~2.9kAutomated safety check: PassApache-2.0
Octocode Code Researchbgauryy/octocode949—~1.5kAutomated safety check: PassMIT
Nucleus Delivery Evidence Closureprotect-my-hair/nucleus-marketplace164—~1kAutomated safety check: PassMIT
Project Pull Requestswimmwatch/cloakbrowser-mcp161—~1kAutomated safety check: PassMIT

Similar skills

  • Verdaccio Pull Request Workflow

    verdaccio/verdaccio

    Takes a change through a verdaccio pull request: branch, local checks, changeset, title and body, labels, CI and review rounds, and ports to other release lines.

    18k GitHub stars~1.9k tokensUpdated yesterday
    DevelopmentAuto-check passed

  • Git PR Workflow

    andymai/brepjs

    This skill should be used when committing, pushing, branching, or merging in the brepjs repository — when a task involves "pre-commit hook failed" (which tier ran, how to bypass), "commit rejected…

    114 GitHub stars~2.9k tokensUpdated today
    DevelopmentAuto-check passed

  • Octocode Code Research

    bgauryy/octocode

    Researches code with evidence: traces callers, imports and cross-repo links, diagnoses failures and reports findings with exact file and line references and a confidence label.

    949 GitHub stars~1.5k tokensUpdated 4 days ago
    DevelopmentAuto-check passed

  • Nucleus Delivery Evidence Closure

    protect-my-hair/nucleus-marketplace

    Collects prior Nucleus task evidence into a candidate-only delivery closure package and PR/MR draft text, blocking if any feature's design, review or verification evidence is missing.

    164 GitHub stars~1k tokensUpdated 2 mo ago
    DevelopmentAuto-check passed

  • Project Pull Request

    swimmwatch/cloakbrowser-mcp

    Create, update, prepare, or review a cloakbrowser-mcp GitHub Pull Request only when the user explicitly requests PR work.

    161 GitHub stars~1k tokensUpdated 6 days ago
    DevelopmentAuto-check passed

  • Veomni Review

    ByteDance-Seed/VeOmni

    Pre-PR code review gate. An agent skill from ByteDance-Seed/VeOmni.

    2.2k GitHub stars~1.7k tokensUpdated today
    DevelopmentAuto-check passed

More from bighadj22/codflow

All 11 skills in this repo

  • Yalidine Delivery Integration

    bighadj22/codflow

    Wires an app to the Yalidine (Guepex) Algerian courier API: parcels, zone lookups, delivery fees and verified delivery-status webhooks.

    346 GitHub stars~2.5k tokensUpdated 2 days ago
    Auto-check passed

  • Meta Pixel and Conversions API Reference

    bighadj22/codflow

    Bundles Meta's official Pixel and Conversions API documentation so tracking changes, event deduplication and conversion events are checked against the real spec.

    346 GitHub stars~1.8k tokensUpdated 2 days ago
    Auto-check passed

  • COD CRM Customer Management

    bighadj22/codflow

    Guides an agent through eight customer tools in a cash-on-delivery CRM for Algerian e-commerce: search, profiles, phone lookup, order history, groups, tags and deletion.

    346 GitHub stars~3.2k tokensUpdated 2 days ago
    Auto-check passed

  • EcoTrack Courier Integration

    bighadj22/codflow

    Guides connecting and maintaining the EcoTrack courier adapter in CodFlow, one API shared by 82 Algerian couriers, using the official API reference and a rollout plan.

    346 GitHub stars~2.3k tokensUpdated 2 days ago
    Auto-check passed

  • defineRoute Route Builder

    bighadj22/codflow

    Creates new API endpoints, and converts older ones, with the defineRoute() pattern used in cod-server, including auth strategies, scopes and OpenAPI output.

    346 GitHub stars~924 tokensUpdated 2 days ago
    Auto-check passed

  • CodFlow Storefront Vercel Deploy

    bighadj22/codflow

    Runbook for deploying or redeploying the CodFlow Astro storefront to Vercel, with required environment variables, CLI or Git methods and checks afterwards.

    346 GitHub stars~2.2k tokensUpdated 2 days ago
    Auto-check passed

Works with

Categories

Questions about CodFlow Change Workflow

What does CodFlow Change Workflow do?

A step-by-step workflow for changing the CodFlow repository: read the AGENTS.md contract, respect package boundaries, verify before claiming done and keep PRs small. 0, self-hosted cash-on-delivery e-commerce platform for Algeria, and this skill covers how to land a change in it.md`.

When should I use CodFlow Change Workflow?

CodFlow Change Workflow fits situations like: making any code, docs, schema or CI change in the CodFlow repository; writing README feature claims that must match the code; reviewing a contribution to CodFlow against its contribution rules; adding a dependency or a database migration to CodFlow.

How do I install CodFlow Change Workflow in Claude Code?

Run `npx skills add bighadj22/codflow --skill codflow-governance -a claude-code`. Or copy the skill folder (.opencode/skills/codflow-governance in bighadj22/codflow) into .claude/skills/codflow-governance in your project. Claude Code loads it when a task matches its description.

How do I install CodFlow Change Workflow in Codex?

Run `npx skills add bighadj22/codflow --skill codflow-governance -a codex`. Or copy the skill folder (.opencode/skills/codflow-governance in bighadj22/codflow) into .agents/skills/codflow-governance in your project. Codex loads it when a task matches its description.

Can I use CodFlow Change Workflow in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add bighadj22/codflow --skill codflow-governance -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/codflow-governance, .gemini/skills/codflow-governance, .github/skills/codflow-governance and .opencode/skills/codflow-governance in your project.

What does CodFlow Change Workflow need to run?

Going by SKILL.md and its folder, CodFlow Change Workflow needs the command-line tools its instructions call (npm, wrangler and npx). Our summary lists: A checkout of the CodFlow repository; Node.js and npm.

Does CodFlow Change Workflow access the network?

SKILL.md contains no URLs. Its commands use npm and npx, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is CodFlow Change Workflow safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does CodFlow Change Workflow use?

CodFlow Change Workflow is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does CodFlow Change Workflow use?

About 1.1k tokens (SKILL.md is roughly 4.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to CodFlow Change Workflow?

Skills that share tags, products or a category with CodFlow Change Workflow: Verdaccio Pull Request Workflow (verdaccio/verdaccio, 18k stars), Git PR Workflow (andymai/brepjs, 114 stars), Octocode Code Research (bgauryy/octocode, 949 stars) and Nucleus Delivery Evidence Closure (protect-my-hair/nucleus-marketplace, 164 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains CodFlow Change Workflow?

bighadj22 (a GitHub user) maintains it in bighadj22/codflow, which has 346 GitHub stars. The repository holds 11 skills in this directory. The repository was last updated on October 6, 2026.

Source: bighadj22/codflow on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.