BuilderIO/self-modifying-code
templates/recruiting/.agents/skills/self-modifying-code/SKILL.md
How the agent can modify the app's own source code. Use when the agent needs to edit components, routes, styles, or scripts.
$ install --global
skillsauthnpx skillsauth add BuilderIO/agent-native self-modifying-codeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 7:47 PM16.4s1 file scanned
SKILL.md
- name:
- self-modifying-code
- description:
- >-
Self-Modifying Code
Rule
The agent can edit the app's own source code — components, routes, styles, scripts. This is a feature, not a bug.
Modification Taxonomy
| Tier | What | After modifying |
| ------------- | --------------------- | --------------------------------- |
| 1: Data | Files in data/ | Nothing — these are routine |
| 2: Source | App code | Run pnpm typecheck && pnpm lint |
| 3: Config | Project config | Ask for explicit approval first |
| 4: Off limits | Secrets and framework | Never modify these |
Don't
- Don't modify
.envfiles or files containing secrets - Don't modify
@agent-native/corepackage internals - Don't skip the typecheck/lint step after editing source code
Related Skills
- scripts — The agent can create or modify scripts
- delegate-to-agent — Self-modification requests come through the agent chat
Related Skills
BuilderIO/booker
tools
VerifiedTrustedCommunity
Public booking flow — the state machine, animations, and URL/app-state sync.
108SKILL.mdUpdated Apr 19, 2026
BuilderIO/workflows
tools
VerifiedTrustedCommunity
Trigger-based automations — reminders, follow-ups, webhooks — across the booking lifecycle.
46SKILL.mdUpdated Apr 19, 2026
BuilderIO/team-scheduling
tools
VerifiedTrustedCommunity
Team event types, round-robin assignment, collective bookings, host weights, and no-show calibration.
46SKILL.mdUpdated Apr 19, 2026
BuilderIO/slot-engine
development
VerifiedTrustedCommunity
The pure `computeAvailableSlots` function — inputs, outputs, invariants, and debugging guide.
46SKILL.mdUpdated Apr 19, 2026