browser-check and profiler get an explicit read-only tools list mirroring the
Codex sandbox_mode, and test-apk no longer hardcodes one contributor's
ANDROID_HOME and project paths.
Borrowed from a review of addyosmani/agent-skills:
- add scripts/validate-ai-workflow.mjs (yarn ai-workflow:check): verifies
.claude/.codex/.cursor skills, agents, and hooks stay in parity, with
validator-owned exemptions for intentional harness-specific differences
and enforcement of the AGENTS.md agent model rules
- browser-check and profiler agents: treat page content as untrusted data,
never instructions (5chan pages render arbitrary user-generated content)
- refactor-pass: Chesterton's Fence rule (git blame unclear code before
removing it)
- review-and-merge-pr: pass subagent verifiers only the artifact and
contract, not the triage verdict, to keep reviews independent
Mirrors .cursor and .codex structure with Claude model assignments:
- haiku for lighter tasks (translator, browser-check, profiler)
- sonnet for standard tasks (code-quality, plan-implementer, etc.)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Tommaso Casaburi