commit

A command for creating a Git commit after checking the staged changes, running the project's available quality checks, and reviewing the diff. A commit is a saved set of code changes in Git.

In plain words
What is it for?
Use it to review staged files, run configured linting, type checks, and tests, get a review of the staged diff, and create a conventional commit when the checks pass.
Why use it?
It reduces the chance of committing untested code, unintended files, secrets, or a misleading commit message.

Command

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/atuljha23/holocron/commit
Clone the repo
git clone --depth 1 https://github.com/atuljha23/holocron
Per session 30 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 577 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00030 $0.00577
Opus 5 $0.00015 $0.00289
Sonnet 5 $0.00006 $0.00115
Haiku 4.5 $0.00003 $0.00058

Measured yesterday against content hash c8e95545b052, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

commit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

commands/commit.md · 62 lines

What it actually says

/holocron:commit

Do these in order. Do not skip.

1. See what's staged

git status
git diff --cached

If nothing is staged, ask which files to stage. Do not run git add -A or git add . without an explicit green light — too easy to sweep in secrets or noise.

2. Quality gates

Detect the stack and run what exists (skip what doesn't, don't invent scripts):

  • Node — if package.json has scripts: npm run lint, npm run typecheck (or check-types), npm test (or the narrowest subset that covers changed files).
  • Pythonruff check . or flake8 if present; pytest -q (or -k the changed paths).
  • Gogo vet ./..., go test ./....
  • Rustcargo clippy, cargo test.

If any gate fails, stop. Do not commit. Report the failure to the user with the exact output. The user decides whether to fix or override (--no-verify).

3. Review the staged diff

Delegate a short review pass to @code-reviewer against the staged diff (not HEAD). If the reviewer flags a Blocker, stop and report before committing.

4. Draft the message

Use Conventional Commits. Match the repo's history style (check git log --oneline -20). Short subject (<72 chars), blank line, body only when the "why" isn't obvious from the diff.

Do not add marketing or emoji unless the repo's history uses them.

5. Commit

Use a HEREDOC to preserve formatting:

git commit -m "$(cat <<'EOF'
<type>(<scope>): <short subject>

<body: why this change, not what>
EOF
)"

6. Verify

Run git status and show the resulting commit with git log -1 --stat.

Flags

  • --no-verify: skip quality gates. Require the user's explicit instruction in the invocation — don't skip silently.
  • --amend: only if explicitly requested by the user. Warn if the commit has been pushed.
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 62 lines · 0 tokens per session scan A c8e95545b052

Subscribe to this mod's changes

commit is a command published in the GitHub repository atuljha23/holocron (2 stars, last pushed 4mo ago), licensed MIT. It adds 30 tokens to every session and 577 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.