Borrowing it
Nothing to install: this file belongs to EndogenAI/dogma. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/EndogenAI/dogma/main/.github/skills/validate-before-commit/SKILL.mdgit clone --depth 1 https://github.com/EndogenAI/dogmaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/endogenai/dogma/validate-before-commit)<a href="https://agentmods.dev/skills/endogenai/dogma/validate-before-commit"><img src="https://agentmods.dev/badge/skills/endogenai/dogma/validate-before-commit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/endogenai/dogma/validate-before-commit"><img src="https://agentmods.dev/badge/skills/endogenai/dogma/validate-before-commit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00102 | $0.01999 |
| Opus 5.5 | $0.00041 | $0.00800 |
| Sonnet 5.5 | $0.00020 | $0.00400 |
| Haiku 4.5 | $0.00010 | $0.00200 |
Grade A, and why
validate-before-commit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 200 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Validate Before Commit
This skill enacts the Algorithms Before Tokens axiom from MANIFESTO.md: validation is encoded once as a deterministic gate and executed consistently, not re-checked interactively per session. The full guardrail sequence is governed by AGENTS.md § Guardrails. When this skill and those documents conflict, the primary documents take precedence.
1. Decision Table — Which Checks Apply
Run the checks corresponding to which file types were changed:
| Files changed | Required checks |
|---|---|
scripts/ or tests/ |
Lint, format, fast tests |
.github/agents/*.agent.md |
Lint, format, fast tests, agent compliance, drift check |
.github/skills/*/SKILL.md |
Lint, format, fast tests, skills compliance |
docs/research/*.md |
Research doc compliance |
| Any of the above | All applicable checks in the rows above |
| None of the above (docs, plans, guides) | No code checks required |
Pre-commit hook coverage — the hooks in
.pre-commit-config.yamlrun automatically ongit commit(andfast-testsongit push) once installed withuv run pre-commit install. They cover every row in this table. If pre-commit is installed, manual checks are needed only for lychee dead links (network-only, no local equivalent).
When in doubt, run all checks. The full sequence takes under 60 seconds on a warm environment.
2. Full Check Sequence
2.1 Lint and Format
uv run ruff check scripts/ tests/
uv run ruff format --check scripts/ tests/
To auto-fix format violations (safe, no logic changes):
uv run ruff format scripts/ tests/
2.2 Fast Tests
uv run pytest tests/ -x -m "not slow and not integration" -q
The -x flag stops on the first failure. The marker filter skips network and slow tests — fast enough to run before every commit.
2.3 Agent File Compliance
Run this only when .github/agents/*.agent.md files were changed:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 200 lines · 102 tokens per session scan A 6d5601abe0a6
validate-before-commit is a skill published in the GitHub repository EndogenAI/dogma (2 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 102 tokens to every session and 1,999 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
validate-before-commit compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| validate-before-commitEndogenAI/dogma | Skill | 2 | 2mo ago | Apache-2.0 | A | 102 | Claude Code |
| open-code-reviewalibaba/open-code-review | Skill | 50k | yesterday | Apache-2.0 | A | 98 | Cursor |
| baby-sitlangchain-ai/open-swe | Skill | 11k | yesterday | MIT | A | 30 | Claude Code, Codex |
| meta-codereview-current-diffopensquilla/opensquilla | Skill | 7.1k | 6d ago | Apache-2.0 | A | 73 | Claude Code, Codex |
| cyrus-setup-repositorycyrusagents/cyrus | Skill | 883 | yesterday | Apache-2.0 | A | 25 | Claude Code, Codex |
| approve-mergeme2resh/apexyard | Skill | 542 | yesterday | MIT | A | 33 | Claude Code |
| install-skill-from-githubniki914/zafiro | Skill | 340 | 4d ago | MIT | A | 85 | Claude Code, Codex |