
This is a solid reference for building agents that can actually write code and use tools without going off the rails. You get the core agent loop (think, decide, act, observe), tool design patterns with proper schemas, and a thoughtful edit_file implementation that uses search/replace with occurrence counting to avoid clobbering the wrong lines. The multi-model architecture is smart: use fast models for planning, powerful ones for reasoning, specialized ones for code. What I appreciate is the focus on reliability, like the edit tool's conflict detection and the structured ToolResult pattern. If you're building anything that needs to autonomously modify codebases or chain tool calls, this gives you the architectural bones to do it safely.
$ npx -y skills add sickn33/antigravity-awesome-skills --skill autonomous-agent-patterns --agent claude-codeInstalls into .claude/skills of the current project.
Design patterns for building autonomous coding agents, inspired by Cline and OpenAI Codex.
Read the detailed guide before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.
Use this skill when:
These classes are conceptual fragments with missing imports/types/adapters/helpers, not working Cline/Codex/MCP implementations. response.to_history_message is an adapter contract to implement for the actual provider, not a standard SDK method. MCP clients need an actual transport/session and lifecycle; the Server(config) sketch is not a valid client handshake. Generated server code stays inert until reviewed.
Tool-name session approval authorizes too broadly: bind authorization to the concrete action, target, data and limits, reusing existing user authorization within scope. Read tools can expose secrets, and npm/python/node/git can execute arbitrary code; allowlisting their names or setting cwd/HOME does not sandbox them. Enforce filesystem/network/process boundaries outside model control, reject escaping/symlink paths, validate schemas and budget all tool/LLM calls and outputs. Approval UI and substring command checks alone provide no security boundary.
File edits need original-content conflict checks and atomic safe replacement; checkpoints require validated session IDs, private atomic files and a real workspace snapshot/restore strategy. Git status/ref alone cannot restore uncommitted content. Bound file sizes/context, exclude credentials and mark external content as untrusted data. Browser TreeWalker text is not an accessibility tree or guaranteed visible text; networkidle and approximate coordinates do not establish action correctness. Use current observed UI targets and verify results. No agent, tool, browser or generated server ran during review.
Sponsors