no-mistakes is a local Git proxy that validates changes in an isolated worktree before forwarding a push to the real remote and opening a pull request. It is for developers and coding agents that want automated checks, safe fixes, CI repair, and human review before changes are published.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/kunchenguid/no-mistakes/agents-mdgit clone --depth 1 https://github.com/kunchenguid/no-mistakesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/kunchenguid/no-mistakes/agents-md)<a href="https://agentmods.dev/instructions/kunchenguid/no-mistakes/agents-md"><img src="https://agentmods.dev/badge/instructions/kunchenguid/no-mistakes/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.05771 | $0.05771 |
| Opus 5 | $0.02885 | $0.02885 |
| Sonnet 5 | $0.01154 | $0.01154 |
| Haiku 4.5 | $0.00577 | $0.00577 |
Grade A, and why
no-mistakes AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- `.github/actions/require-no-mistakes/verify.py` reads the PR body/head SHA it verifies from a **live** GitHub REST API lookup first (via `live_pr_facts`, a direct `urllib.request` GET to `{GITHUB_API_URL}/repos/{repo}/ How it starts
The opening of the file, as written. The whole thing — 110 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
This file is for agentic coding tools working in this repo.
This repository is a Go CLI app named no-mistakes.
The binary entrypoint is cmd/no-mistakes; implementation code lives under internal/, and the package names there are the layout map (CLI in internal/cli, daemon in internal/daemon, pipeline and steps in internal/pipeline, agent adapters in internal/agent, terminal UI in internal/tui, shared infrastructure in internal/git, internal/ipc, internal/config, internal/db, internal/paths, internal/types).
Build, test, and release commands are owned by the Makefile; read it for the full target list instead of relying on a copy here.
Safest local verification sequence after non-trivial changes:
gofmt -w .make lint(generated-skill drift check plusgo vet)go test -race ./...(the e2e suite is behind thee2ebuild tag and excluded)make e2ewhen touching agent integrations, the e2e harness, or recorded fixturesgo build -o ./bin/no-mistakes ./cmd/no-mistakes
GitLab Backend (internal/scm/gitlab)
- The backend is pinned against
glab v1.5x, whose flag surface drifts between versions: the auth check must be host-scoped (--hostname <host>, falling back to unscoped only when the host is unknown),glab mr listno longer accepts--state opened,glab mr updatehas no-y/--yesflag at all (unlikemr create, which does, soUpdatePRmust not pass it), and the daemon's detached-HEAD worktree breaksglab ci get, so pipeline jobs are read via the branch-independentglab api .../pipelines/<id>/jobsREST endpoint. - The comments in
internal/scm/gitlab/gitlab.goown the full rationale for each trap; extend them there when you hit new glab version drift.
Gitea Backend (internal/scm/gitea)
- Verified empirically against a real
tea 0.15.1CLI and a real Gitea 1.27.2 + Actions instance (Docker/Podmangitea/gitea+gitea/act_runner), not guessed from docs.tea whoamihas no--loginflag (unlike every other tea entity subcommand), soHost.Availablescopes its check throughtea api --login <name> /userinstead - the same host-scoping purpose as glab's--hostname. tea actions runs view --jobs --output jsondoes NOT emit clean structured JSON:--output jsonrenders the run header as plain text and only the trailing jobs array is real JSON, and that array carriesstatus(queued/in_progress/completed) but noconclusion(success/failure/...) at the job level. Job-level pass/fail is read from the REST endpoint (GET /repos/{owner}/{repo}/actions/runs/{run}/jobs, which does carrystatus+conclusion) reached throughtea api, which reuses tea's own stored login/token - no separate HTTP client or credential needed.tea pulls list --output jsonrenders every field (includingindexandmergeable) as a JSON string, whiletea pulls <idx> --output json(single-PR view) renders the same fields with native JSON types (indexan int,mergeable/hasMergedbools). The two response shapes are genuinely different structs ingitea.go; do not unify them.tea pulls createhas no--output jsonflag and echoes the PR body into its human-readable stdout, so a body containing anhttp(s)://URL can defeat a naive "first URL line" scrape.CreatePRre-lists the PR by head branch viatea pulls listfor a structured result instead of parsing create's own output; scraping stdout is only a last-resort fallback.tea pulls edithas no--baseflag (unliketea pulls create --base). Retargeting usestea api --method PATCH --field base=<branch>on/repos/{owner}/{repo}/pulls/{index}; omitting--methodwould POST because a body defaults tea api to POST.FindPRcopiesitem.Baseontoscm.PR.BaseBranchso a per-run override can see the live forge base.- tea infers "which Gitea instance" from the current directory's git remote, which the daemon's detached bare-gate repo never has, so every invocation carries
--login <name>explicitly. The login name is resolved from tea's ownconfig.ymlby host (scm.ResolveGiteaLogin), mirroringglabKnowsHost/ghKnowsHostfor detection. Capabilities().MergeableStateis declined (matching Bitbucket): Gitea's PRmergeablefield has a documented upstream bug (go-gitea/gitea#25849) that can stickfalseafter a conflict is actually resolved.tea actions runs list's array order is not documented as newest-first, and a branch can have more than one run sharing the same head SHA (e.g. a manual UI re-run), soGetChecks/FetchFailedCheckLogsselect the run viamostRecentRun(highest numeric run ID) rather than trusting list order or index[0].- The comments in
internal/scm/gitea/gitea.goown the full rationale for each trap.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +5 lines · +377 tokens per session 0c4932428b35
- yesterday Changed · +1 lines · +99 tokens per session c7244be96cea
- 3d ago Changed · +16 lines · +928 tokens per session 1cc8abf3014e
- 5d ago First seen · 88 lines · 4,367 tokens per session scan A 0b1dc0f72de2
no-mistakes AGENTS.md is an instructions file published in the GitHub repository kunchenguid/no-mistakes (8,294 stars, last pushed today), licensed MIT. It adds 5,771 tokens to every session, about $0.0289 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).