Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/NikiforovAll/claude-code-rulesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/nikiforovall/claude-code-rules/fact-check)<a href="https://agentmods.dev/commands/nikiforovall/claude-code-rules/fact-check"><img src="https://agentmods.dev/badge/commands/nikiforovall/claude-code-rules/fact-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/nikiforovall/claude-code-rules/fact-check"><img src="https://agentmods.dev/badge/commands/nikiforovall/claude-code-rules/fact-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.01001 |
| Opus 5 | $0.00009 | $0.00500 |
| Sonnet 5 | $0.00003 | $0.00200 |
| Haiku 4.5 | $0.00002 | $0.00100 |
Grade A, and why
fact-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
97% identical to fact-check — 22 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Load the visual-explainer skill, then verify the factual accuracy of a document that makes claims about a codebase. Read the file, extract every verifiable claim, check each against the actual code and git history, correct inaccuracies in place, and add a verification summary.
For HTML files: read the skill's references/css-patterns.md to match the existing page's styling when inserting the verification summary.
Target file — the requested target: $ARGUMENTS
- Explicit path: verify that specific file (
.html,.md, or any text document) - No argument: verify the most recently modified
.htmlfile in~/.agent/diagrams/(ls -t ~/.agent/diagrams/*.html | head -1)
Auto-detect the document type and adjust the verification strategy:
- HTML review pages (diff-review, plan-review, project-recap): detect from page content, verify against the git ref or plan file the review was based on
- Plan/spec documents (markdown): verify file references, function/type names, behavior descriptions, and architecture claims against the current codebase
- Any other document: extract and verify whatever factual claims about code it contains
Phase 1: Extract claims. Read the file. Extract every verifiable factual claim:
- Quantitative: line counts, file counts, function counts, module counts, test counts, any numeric metrics
- Naming: function names, type names, module names, file paths referenced in the document
- Behavioral: descriptions of what code does, how things work, before/after comparisons
- Structural: architecture claims, dependency relationships, import chains, module boundaries
- Temporal: git history claims, commit attributions, timeline entries
Skip subjective analysis (opinions, design judgments, readability assessments) — these aren't verifiable facts.
Phase 2: Verify against source. For each extracted claim, go to the source:
- Re-read every file referenced in the document — check function signatures, type definitions, behavior descriptions against the actual code
- For claims about git history: re-run git commands (
git diff --stat,git log,git diff --name-status, etc.) and compare output against the document's numbers - For diff-reviews: read both the ref version (
git show <ref>:file) and working tree version to verify before/after claims aren't swapped or fabricated - For plan docs: verify that files, functions, and types the plan references actually exist and behave as described
- For project-recaps: re-run
git logcommands to verify activity narrative and timeline
Classify each claim:
- Confirmed: claim matches the code/output exactly
- Corrected: claim was inaccurate — note what was wrong and what the correct value is
- Unverifiable: claim can't be checked (e.g., references a file that doesn't exist, or a behavior that requires runtime testing)
Phase 3: Correct in place. Edit the file directly using surgical text replacements:
- Fix incorrect numbers, function names, file paths, behavior descriptions
- Fix before/after swaps (a common error class in review pages)
- If a section is fundamentally wrong (not just a detail error), rewrite that section's content while preserving the surrounding structure
- For HTML: preserve layout, CSS, animations, Mermaid diagrams (unless they contain factual errors in node labels or edge descriptions)
- For markdown: preserve heading structure, formatting, and document organization
Phase 4: Add verification summary.
- HTML files: insert a verification section as a banner at the top or final section, matching the page's existing styling. Use a subtle card with muted colors.
- Markdown files: append a
## Verification Summarysection at the end of the document.
Include in the summary:
- Total claims checked
- Claims confirmed (with count)
- Corrections made (with brief list of what was fixed: "Changed
processCleanuptorunCleanupto match actual function name inworker.ts:45") - Unverifiable claims flagged (if any)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 60 lines · 17 tokens per session scan A 9105a182a54f
fact-check is a command published in the GitHub repository NikiforovAll/claude-code-rules (141 stars, last pushed 2d ago), licensed Apache-2.0. It adds 17 tokens to every session and 1,001 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. It is 97% identical to fact-check, differing in 22 lines, and is treated as a copy.
Other commands, from other repositories
security-audit-static
Static security audit of AI-built code — map trust boundaries, cross-reference documented intent, self-refute every finding, and report only evidence-backed risks.
ship-check
Turn a vibe-coded repo into a reviewer-ready shipping packet — document the app, wire agent context, run correctness, security and performance reviews, add an independent unsteered pass, map test coverage, and compile the results.
analyze-pr
Review PR for quality, security, and coverage (GitHub/GitLab/Forgejo).
sm-buff
You usually don't run buff directly — run sm sail. sm sail drives the whole PR to green and calls buff watch / triage for you, stopping only when it needs you to act (see /sm-sail). Reach for sm buff here only for surgical work: inspecting a specific failure, or resolving a single review thread when sail has parked on…
code-review-teach
Educational code review that teaches while reviewing. Provides constructive feedback, explains best practices, discusses trade-offs, and helps developers improve their coding skills.
ship
Branch, commit, open PR, gather Claude + every enabled AI reviewer (Copilot, CodeRabbit, etc.), fix/justify/resolve every finding, loop until clean, then merge. Run only when implementation is finished AND the owner has said to ship (e.g. "ship it") — never self-invoke just because the work looks done. To design and…