Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/dingdawg/dingdawg-governanceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/dingdawg/dingdawg-governance/audit)<a href="https://agentmods.dev/commands/dingdawg/dingdawg-governance/audit"><img src="https://agentmods.dev/badge/commands/dingdawg/dingdawg-governance/audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/dingdawg/dingdawg-governance/audit"><img src="https://agentmods.dev/badge/commands/dingdawg/dingdawg-governance/audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00476 |
| Opus 5.5 | $0.00000 | $0.00190 |
| Sonnet 5.5 | $0.00000 | $0.00095 |
| Haiku 4.5 | $0.00000 | $0.00048 |
Grade C, and why
audit scanned grade C with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codemediumSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
13:15:44 Bash "curl | bash" — remote execution blocked Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Recursive force deletemediumDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
12:02:17 Bash "rm -rf /var/data" — dangerous pattern Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
13:15:44 Bash "curl | bash" — remote execution blocked What it actually says
/governance-audit
Generate a structured audit report for the current session or a specified time range. The report summarises every governed action, lists any blocked requests, and provides a compliance-ready summary you can download or share.
Usage
/governance-audit
/governance-audit --session SESSION_ID
/governance-audit --since 2024-01-15 --until 2024-01-16
/governance-audit --format json
Options
| Option | Description | Default |
|---|---|---|
--session ID |
Audit a specific session by ID | current session |
--since DATE |
Start of audit window (ISO 8601 or YYYY-MM-DD) | session start |
--until DATE |
End of audit window | now |
--format text|json|pdf |
Output format | text |
What it does
- Calls the
generate_audit_reporttool on the DingDawg Governance MCP server - Aggregates all receipts in the requested window
- Flags anomalies: repeated blocks, unusual tool sequences, or policy drift
- Returns a structured report with a shareable URL and optional PDF download
Example output
DingDawg Governance — Audit Report
─────────────────────────────────────────────
Session: ses_01J5KX2ABC
Period: 2024-01-15 09:00 → 14:37 UTC
Total actions: 87
Succeeded: 84
Blocked: 3
Rollbacks used: 1
Blocked actions:
12:02:17 Bash "rm -rf /var/data" — dangerous pattern
13:15:44 Bash "curl | bash" — remote execution blocked
14:01:09 Edit "/etc/hosts" — path outside project root
Report URL: https://app.dingdawg.com/governance/reports/rpt_01J5KX2
─────────────────────────────────────────────
Tool called
dingdawg-governance → generate_audit_report
Arguments forwarded from the command options above.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 56 lines · 0 tokens per session scan C c09a76362469
audit is a command published in the GitHub repository dingdawg/dingdawg-governance (1 stars, last pushed 3mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 476 tokens. A static security scan graded it C with 3 findings (downloads and executes remote code, recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
ai-act-scan
Scan a codebase for EU AI Act compliance evidence and gaps. Produces a dimension-scored report with per-file findings, architecture graph, and prioritized recommendations.
ai-act-article
Show which analyzers, compliance dimensions, and current findings in this codebase map to a specific EU AI Act article.
ai-act-cross-framework
Project EU AI Act scan findings across NIST AI RMF, ISO 42001, GDPR, OWASP LLM 2025, OWASP Agentic Top 10, and SOC 2. Identifies 'Satisfy Once, Comply Everywhere' levers.
ai-act-dossier
Generate and cryptographically seal an immutable compliance release dossier (compliance-dossier.json) for Notified Bodies, auditors, and release gates.
ai-act-graph
Generate an interactive visual context graph browser for the codebase. Browse architecture components, inspect each node for compliance gaps, and view copyable recommended fixes.
ai-act-scan-fix
Scan a codebase, then propose concrete remediation (code edits, new files, tests) for the top compliance gaps. Does NOT auto-apply — always shows the plan first.