Bundle multiple context files into shareable starter kits. Export as a zip or share with your team.
SaferSkills independently audited dev-packs (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Open, community-curated AI context for software engineering. A collection of production-grade prompts, rules, skills, and memory files that make Cursor, Claude, Copilot, and Windsurf code like your best engineer — every time.
This is the official open-source home for ModelBound Dev Packs — bundled, version-controlled AI context that teams use to standardize how their AI coding tools behave.
Each folder in this repo is a self-contained Dev Pack containing some combination of:
The packs in this repo are mirrored to the ModelBound Marketplace, where they can be cloned into any workspace with one click.
Packs are organized by category. Each folder contains its own README.md describing what it does, what files it ships, and how to apply it.
| Pack | Use Case | Best For |
|---|---|---|
frameworks/perfect-react-refactor/ | Modern React refactoring, hooks, RSC | React / Next.js teams |
frameworks/nextjs-app-router-best-practices/ | Server components, caching, routing | Next.js 14+ |
frameworks/nodejs-backend-patterns/ | Express/Fastify, async patterns, errors | Node.js APIs |
| Pack | Use Case | Best For |
|---|---|---|
languages/typescript-strictness/ | Strict TS, no-any enforcement | TypeScript codebases |
languages/python-test-writer/ | Pytest-style test generation | Python projects |
| Pack | Use Case | Best For |
|---|---|---|
architecture/clean-architecture-enforcer/ | Layered architecture & DDD | Backend services |
architecture/api-design/ | REST/GraphQL API design review | API teams |
| Pack | Use Case | Best For |
|---|---|---|
data/sql-migration-reviewer/ | Safe migrations, indexing, locks | Postgres / MySQL |
| Pack | Use Case | Best For |
|---|---|---|
quality/senior-code-review/ | Rigorous PR-style code review | Any codebase |
quality/tailwind-design-system-enforcer/ | Token-driven Tailwind | Design-system teams |
| Pack | Use Case | Best For |
|---|---|---|
process/production-grade-engineering-skills/ | Planning, debugging, CI/CD, and engineering workflows | Any team |
You get versioning, AI review, eval scoring, team sharing, and auto-optimization out of the box.
git clone https://github.com/modelbound/dev-packs.git
cp -r dev-packs/frameworks/perfect-react-refactor/. /path/to/your/project/Then point your IDE at the files (see IDE Setup below).
If your agent supports the Model Context Protocol (Cursor, Claude Code, Claude Desktop, Windsurf, Codex, or any custom agent), you can skip cloning entirely and let the agent fetch packs from ModelBound at runtime.
// .cursor/mcp.json (or claude_desktop_config.json)
{
"mcpServers": {
"modelbound": {
"url": "https://mcp.modelbound.co",
"headers": { "Authorization": "Bearer mb_live_YOUR_KEY" }
}
}
}Then ask your agent:
"Load the senior-code-review pack from ModelBound and review this PR."The agent will call get_pack, pull the latest version, and apply it — no files in your repo, always up to date. See MCP Server below.
Dev Packs ship files that map cleanly to every major AI coding tool.
.cursor/rules/*.mdc and .cursorrules are auto-detectedAGENTS.md is loaded as agent-level context@filename in chatclaude --system-prompt system-prompt.mdOr load the pack into a Claude Project as knowledge.
copilot-instructions.md at .github/copilot-instructions.md.windsurf/rules/*.md are auto-loadedAGENTS.md provides directory-scoped context to Cascade.kiro/steering/*.md and .kiro/specs/<feature>/{requirements,design,tasks}.md are auto-loaded| File | Purpose |
|---|---|
system-prompt.md | Role, persona, and global constraints for the model |
.cursorrules / .cursor/rules/*.mdc | Cursor-specific behavior rules |
copilot-instructions.md | GitHub Copilot custom instructions |
.windsurf/rules/*.md | Windsurf rule files |
AGENTS.md | Cross-IDE agent context (Cursor, Windsurf, Kiro) |
skill-*.md | Task-specific skill files (refactor, review, test…) |
memory.md | Decisions, gotchas, project history |
evals/*.md | Test cases verifying pack effectiveness |
This isn't just a dump of static files — it's the public mirror of a living catalog.
┌─────────────────────────┐ ┌──────────────────────────┐
│ ModelBound Marketplace │ ◀─────▶ │ github.com/modelbound │
│ (clone, version, eval) │ sync │ /dev-packs │
└─────────────────────────┘ └──────────────────────────┘
▲ ▲
│ clone / publish │ PRs / issues
▼ ▼
Your ModelBound workspace The open-source community
│
│ one-click sync
▼
Your Git repo + IDEModelBound runs a hosted Model Context Protocol server at https://mcp.modelbound.co that exposes every dev pack (and your private library) as live tools your agent can call.
| Problem with copying files | What MCP solves |
|---|---|
| Packs go stale the moment you clone | Always fetches the latest version |
| Have to re-clone for every project | One config, works everywhere |
| Can't search across packs from inside the agent | search_all, get_pack, list_skills tools |
| No telemetry on what worked | Runs are logged for eval & improvement |
| Manual updates when a pack improves | Updates flow automatically |
.cursor/mcp.jsonmcp-remote proxylist_packs / get_pack — browse and load any published packsearch_all — semantic search across packs, rules, skills, and corporalist_skills / get_skill — pull individual skills (e.g. "write-pytest-tests")add_file_to_pack / create_pack — contribute back from inside your agentoptimize_tokens / estimate_conversation_cost — keep context leanRead scope (or more if you want write access)💡 Read-only keys are safe to share with teammates — they can consume packs but not modify your library.
Full setup guide: [Serve Context to Any AI Agent via MCP →](https://modelbound.co/guides/serve-mcp-context)
We want community contributions. If you have a better React refactor prompt, a smarter SQL reviewer, or a brand-new pack for your favorite stack — open a PR.
frameworks/perfect-react-refactor/system-prompt.md)evals/[perfect-react-refactor] tighten hook rulesframeworks/rust-axum-patterns/)README.md — what it does, who it's forsystem-prompt.md — the core promptevals/new-packmainBe kind. Assume good faith. We follow the Contributor Covenant.
pack-request label and describe the use caseAll packs in this repository are released under the MIT License unless otherwise stated inside an individual pack folder. Use them, fork them, ship them in your products — just don't claim you wrote the originals.
<p align="center"> <b>Built and maintained by <a href="https://modelbound.co">ModelBound</a></b><br> <sub>The context engineering platform for AI-powered development teams.</sub><br> <br> <a href="https://modelbound.co">modelbound.co</a> · <a href="mailto:[email protected]">[email protected]</a> </p>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.