lint-cdc

lint-cdc is a skill for Claude Code from chipweaver/veripower. It costs 28 tokens per session (615 once invoked), scanned A, original, MIT.

A lint and CDC skill runs SpyGlass checks on hardware RTL. Lint finds code and design-rule problems, while clock-domain-crossing checks look for unsafe signals moving between different clock regions.

In plain words
What is it for?
It is for running SpyGlass lint and CDC analysis, reviewing violations, adding waivers or annotations, and checking again after RTL changes.
Why use it?
It helps identify RTL issues and unsafe clock-crossing behavior, then tracks the fixes or approved waivers until the checks are clean.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the veripower plugin — 12 skills, 2 hooks shipped together

Good fit It is for running SpyGlass lint and CDC analysis, reviewing violations, adding waivers or annotations, and checking again after RTL changes.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/chipweaver/veripower/lint-cdc
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add chipweaver/veripower --skill lint-cdc
Clone the repo
git clone --depth 1 https://github.com/chipweaver/veripower

Made for: Claude Code.

Or install veripower, the plugin that ships this one along with the rest of its 12 skills, 2 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for lint-cdc

README.md
[![agentmods](https://agentmods.dev/badge/skills/chipweaver/veripower/lint-cdc/github.svg)](https://agentmods.dev/skills/chipweaver/veripower/lint-cdc)
Your own site
<a href="https://agentmods.dev/skills/chipweaver/veripower/lint-cdc"><img src="https://agentmods.dev/badge/skills/chipweaver/veripower/lint-cdc/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for lint-cdc

Your own site · 80×15
<a href="https://agentmods.dev/skills/chipweaver/veripower/lint-cdc"><img src="https://agentmods.dev/badge/skills/chipweaver/veripower/lint-cdc.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 28 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 615 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00028 $0.00615
Opus 5.5 $0.00011 $0.00246
Sonnet 5.5 $0.00006 $0.00123
Haiku 4.5 $0.00003 $0.00061

Measured 1mo ago against content hash f794203e0044, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

lint-cdc scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 8 executable files (scripts/lintcdc/__init__.py, scripts/lintcdc/__main__.py, scripts/lintcdc/bootstrap.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/lint-cdc/SKILL.md · 53 lines

How it starts

The opening of the file, as written. The whole thing — 53 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Lint and CDC

Assess the RTL against the task's lint and CDC requirements. Read dispatch.json, original intent, requirements, RTL, constraint annotations and specification SGDC. Use carried evidence when its implementation, setup and scope still apply; choose the checks the current task needs.

Write under {workdir}; upstream inputs remain read-only. The framework carries published setup and reports into this directory, without the old verdict. Keep useful analysis in evidence/.

Prepare and check

<skill> is this skill's directory:

python3 <skill>/scripts/lintcdc/__main__.py bootstrap --workdir {workdir}

Bootstrap installs missing setup without overwriting authored files and refreshes the file list and generated SGDC. constraint-annotations.json supplies synchronizer, reset, case-analysis and quasi-static declarations. Check inherited scripts/local.sgdc and scripts/waiver.tcl against the current design. Correct invalid input declarations at their source.

Run make lint, make cdc, or make all from the prepared workdir; all shares elaboration. The entrypoint withdraws the selected check's old summaries before execution. Wait for completion, read the reports and inspect both reported and waived violations. The reports include native waiver details when messages were waived. Record the basis in -comment, with evidence references where needed; assess it against the requirements, including whether limits apply before or after waivers. Repair local setup errors and rerun the affected checks.

Judge and close

python3 <skill>/scripts/lintcdc/__main__.py finalize --workdir {workdir} \
  [--requirements '[{"id":"R-1","met":true,"actual":"observed result","measured":"report and scope"}]'] \
  [--fail-reason "unresolved cause"] [--fix-owner <rule>]

Declare a judgment for every lint-cdc requirement using the reports and the actual waiver policy. finalize reads lint-violations.json and cdc-violations.json; it does not judge waiver reasoning. Use --fail-reason for unjustified waivers or invalid/incomplete checks, even when counts are zero. Name the repair owner from the defect, including this stage for its own setup; do not infer ownership from the path of an error. Attribution guidance describes the constraint sources to check. Acceptance changes follow the user's actual authorization.

Read the full file on GitHub · 53 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · -94 lines · -12 tokens per session f794203e0044
  2. 1mo ago Changed · -2 lines 2e875398a6cf
  3. 1mo ago Changed · +5 lines 5fb378673fd6
  4. 1mo ago First seen · 144 lines · 40 tokens per session scan A 130ba506d9e1

Subscribe to this mod's changes

lint-cdc is a skill published in the GitHub repository chipweaver/veripower (10 stars, last pushed 7d ago), licensed MIT. It adds 28 tokens to every session and 615 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.