BuilderIO/self-modifying-code
templates/issues/.agents/skills/self-modifying-code/SKILL.md
How the agent can modify the app's own source code. Use when the agent needs to edit components, routes, styles, or scripts, when designing UI for agent editability, or when deciding what the agent should and shouldn't modify.
$ install --global
skillsauthnpx skillsauth add BuilderIO/agent-native self-modifying-codeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 7:45 PM21.3s1 file scanned
SKILL.md
- name:
- self-modifying-code
- description:
- >-
Self-Modifying Code
Rule
The agent can edit the app's own source code — components, routes, styles, scripts. This is a feature, not a bug. Design your app expecting this.
Modification Taxonomy
| Tier | What | Examples | After modifying |
| ------------- | --------------------- | ------------------------------------------------ | --------------------------------- |
| 1: Data | Files in data/ | JSON state, generated content, markdown | Nothing — these are routine |
| 2: Source | App code | Components, routes, styles, scripts | Run pnpm typecheck && pnpm lint |
| 3: Config | Project config | package.json, tsconfig.json, vite.config.* | Ask for explicit approval first |
| 4: Off limits | Secrets and framework | .env, @agent-native/core internals | Never modify these |
Don't
- Don't modify
.envfiles or files containing secrets - Don't modify
@agent-native/corepackage internals - Don't modify
.agents/skills/orAGENTS.mdunless explicitly requested - Don't skip the typecheck/lint step after editing source code
Related Skills
- scripts — The agent can create or modify scripts to add new capabilities
- delegate-to-agent — Self-modification requests come through the agent chat
Related Skills
BuilderIO/booker
tools
VerifiedTrustedCommunity
Public booking flow — the state machine, animations, and URL/app-state sync.
108SKILL.mdUpdated Apr 19, 2026
BuilderIO/workflows
tools
VerifiedTrustedCommunity
Trigger-based automations — reminders, follow-ups, webhooks — across the booking lifecycle.
46SKILL.mdUpdated Apr 19, 2026
BuilderIO/team-scheduling
tools
VerifiedTrustedCommunity
Team event types, round-robin assignment, collective bookings, host weights, and no-show calibration.
46SKILL.mdUpdated Apr 19, 2026
BuilderIO/slot-engine
development
VerifiedTrustedCommunity
The pure `computeAvailableSlots` function — inputs, outputs, invariants, and debugging guide.
46SKILL.mdUpdated Apr 19, 2026