fix-once-auto-inject

fix-once-auto-inject is a skill for Claude Code, Codex from fabioc-aloha/Alex_Skill_Mall. It costs 14 tokens per session (590 once invoked), scanned A, original, MIT.

A pattern for applying a one-time correction to existing files and checking future files automatically during a build or Git hook. A Git hook is a script that runs when an operation such as a commit occurs.

In plain words
What is it for?
Use it for required file headers, imports, flags, formatting rules, or other changes that should remain consistent in new code.
Why use it?
It prevents the same small fix from being repeated by hand and reduces reliance on memory.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is │ node scripts/fix-all.cjs │.

Good fit Use it for required file headers, imports, flags, formatting rules, or other changes that should remain consistent in new code.

Compare 6 skills from other repositories ↓
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/fabioc-aloha/Alex_Skill_Mall
agentmods
npx agentmods add skills/fabioc-aloha/alex_skill_mall/fix-once-auto-inject

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for fix-once-auto-inject

README.md
[![agentmods](https://agentmods.dev/badge/skills/fabioc-aloha/alex_skill_mall/fix-once-auto-inject/github.svg)](https://agentmods.dev/skills/fabioc-aloha/alex_skill_mall/fix-once-auto-inject)
Your own site
<a href="https://agentmods.dev/skills/fabioc-aloha/alex_skill_mall/fix-once-auto-inject"><img src="https://agentmods.dev/badge/skills/fabioc-aloha/alex_skill_mall/fix-once-auto-inject/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for fix-once-auto-inject

Your own site · 80×15
<a href="https://agentmods.dev/skills/fabioc-aloha/alex_skill_mall/fix-once-auto-inject"><img src="https://agentmods.dev/badge/skills/fabioc-aloha/alex_skill_mall/fix-once-auto-inject.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 14 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 590 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00014 $0.00590
Opus 5 $0.00007 $0.00295
Sonnet 5 $0.00003 $0.00118
Haiku 4.5 $0.00001 $0.00059

Measured 7d ago against content hash 07b676eb3c05, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

fix-once-auto-inject scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/devops-process/fix-once-auto-inject/skills/fix-once-auto-inject/SKILL.md · 101 lines

How it starts

The opening of the file, as written. The whole thing — 101 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Fix-Once + Auto-Inject-Future

The Problem

One-time fixes get repeated manually:

  • "Add the missing import to every new file"
  • "Remember to set the flag when creating services"
  • Relies on human memory → fails over time

The Solution

Pair an idempotent one-time fix with a build-time auto-inject fallback.

Prong 1: One-Time Fix Script

// scripts/fix-missing-headers.cjs
const fs = require('fs');
const glob = require('glob');

const header = '// Copyright 2026 Company\n\n';

glob.sync('src/**/*.ts').forEach(file => {
  const content = fs.readFileSync(file, 'utf8');
  if (!content.startsWith('// Copyright')) {
    fs.writeFileSync(file, header + content);
    console.log(`Fixed: ${file}`);
  }
});

Run once to fix existing files.

Prong 2: Auto-Inject at Build

// In build pipeline or git hook
const files = getChangedFiles();
files.filter(f => f.endsWith('.ts')).forEach(file => {
  const content = fs.readFileSync(file, 'utf8');
  if (!content.startsWith('// Copyright')) {
    // Auto-fix or fail the build
    console.error(`Missing header: ${file}`);
    process.exit(1);
  }
});

Git Hook Version

#!/bin/bash
# .git/hooks/pre-commit

for file in $(git diff --cached --name-only | grep '\.ts$'); do
  if ! head -1 "$file" | grep -q "Copyright"; then
    echo "Missing copyright header: $file"
    exit 1
  fi
done

Pattern

┌─────────────────────────────────────┐
│  Fix existing files (one-time)      │
│  node scripts/fix-all.cjs           │
└─────────────────────────────────────┘
                 │
                 ▼
┌─────────────────────────────────────┐
│  Enforce on new files (ongoing)     │
│  build hook / pre-commit / CI       │
└─────────────────────────────────────┘

Verification

  1. Running fix script on already-fixed files is idempotent
  2. Creating a new file without the fix fails the hook
  3. No manual enforcement needed after setup

When to Apply

  • License headers
  • Required imports
  • Configuration defaults
  • Any "every file must have X" rule

Read the full file on GitHub · 101 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 101 lines · 14 tokens per session scan A 07b676eb3c05

Subscribe to this mod's changes

fix-once-auto-inject is a skill published in the GitHub repository fabioc-aloha/Alex_Skill_Mall (4 stars, last pushed today), licensed MIT. It adds 14 tokens to every session and 590 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

apply-trust-building

Use when a manager is new to a team, has experienced a trust breach, or wants to deliberately strengthen the trust foundation of their management relationships — because trust determines whether employees share real problems, follow direction with confidence, and engage fully.

jeffreytse/grimoire-core · 52 tokens

design-team-meeting-structure

Use when a team's meetings feel like the wrong type of conversation for the decisions being made, when meetings are too frequent or too infrequent, or when team members feel their time is wasted — to design the right meeting types, cadences, and facilitation practices for how the team actually works.

jeffreytse/grimoire-core · 66 tokens

prevent-employee-burnout

Use when a manager wants to reduce the risk of burnout on their team, or when they observe signs that a direct report may be approaching burnout — to identify contributing factors and intervene before the employee becomes disengaged, impaired, or leaves.

jeffreytse/grimoire-core · 54 tokens

run-underperformance-conversation

Use when a manager first observes that a direct report's performance is declining or falling below expectations — to have an early, direct, non-punitive conversation that names the gap and opens a path to correction before the situation requires formal process.

jeffreytse/grimoire-core · 54 tokens

apply-distributed-team-practices

Use when managing a team where members work in different locations, time zones, or on hybrid schedules — to adapt management practices so remote members have equal access to information, relationships, and advancement opportunities as in-office members.

jeffreytse/grimoire-core · 51 tokens

give-employee-recognition

Use when a manager wants to acknowledge a direct report's specific contribution, achievement, or behavior in a way that reinforces it and builds engagement — separate from compensation and formal performance reviews.

jeffreytse/grimoire-core · 42 tokens