Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add fakoli/fakoli-plugins/plugin install gate-routerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/fakoli/fakoli-plugins/gate-check)<a href="https://agentmods.dev/skills/fakoli/fakoli-plugins/gate-check"><img src="https://agentmods.dev/badge/skills/fakoli/fakoli-plugins/gate-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/fakoli/fakoli-plugins/gate-check"><img src="https://agentmods.dev/badge/skills/fakoli/fakoli-plugins/gate-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00110 | $0.00920 |
| Opus 5.5 | $0.00044 | $0.00368 |
| Sonnet 5.5 | $0.00022 | $0.00184 |
| Haiku 4.5 | $0.00011 | $0.00092 |
Grade C, and why
gate-check scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
shell, so a changed file named `x;rm -rf ~` is an inert argument), but the How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Resolve PLUGIN_ROOT from the host-provided PLUGIN_ROOT / CLAUDE_PLUGIN_ROOT, or from this loaded skill’s directory (../..). Use that absolute path for the bundled commands; do not assume the current directory is the install root.
Gate Check
Deterministic changed-path → verify-command routing. The rules live in the
project, not in anyone's memory: .claude/gate-router.local.md (the
marketplace's plugin-settings pattern).
Check the current diff
bash "${PLUGIN_ROOT}/scripts/gate-router.sh" --list # what's required
bash "${PLUGIN_ROOT}/scripts/gate-router.sh" --run # run them, stop on failure
bash "${PLUGIN_ROOT}/scripts/gate-router.sh" --list --json
- Default diff base is
origin/main(fall backHEAD); override with--base <ref>. The changed set is committed-vs-base + staged + unstaged + untracked — the full "about to ship" surface. --runexecutes gates in rule order and stops at the first failure with its exit code — report that failure to the user verbatim, fix, re-run.- No config → the script says so and exits 0 (nothing to enforce). Suggest authoring one (below) when the repo clearly has gate-worthy surfaces.
Author or extend the rules file
.claude/gate-router.local.md, rules in the frontmatter, glob => command:
---
rules:
- docs/** => mkdocs build --strict
- "**/*.sh" => for file in {files}; do test ! -f "$file" || bash -n "$file" || exit; done
- bin/src/** => cd bin && uv run pytest -q
- plugins/** => bash scripts/validate.sh
---
Notes for humans below the fence (ignored by the router).
**crosses directories; a leading**/also matches paths at the root.{files}passes the matched files to the command as separate arguments (safe for spaces, Unicode, tabs, and newlines). Keep{files}standalone and unquoted; the router adds quoting. Use it for linters; omit it for suite commands that don't take a file list.- Duplicate commands from overlapping rules run once. Order = rule order.
- Derive rules from the repo's own history: CI workflow steps, CLAUDE.md test instructions, and past incident classes (encoding, docs links) are the gate candidates. Keep each gate FAST — these run per-change, not nightly.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +2 lines 0ca4bb4a1eb2
- 1mo ago First seen · 74 lines · 110 tokens per session scan C 3e92fb26674c
gate-check is a skill published in the GitHub repository fakoli/fakoli-plugins (4 stars, last pushed 28d ago), licensed MIT. It adds 110 tokens to every session and 920 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
github-release-management
GitHub release orchestration — automated versioning, testing, deployment, and rollback. Use when cutting a release, tagging a version, drafting release notes, or coordinating a deploy/rollback workflow.
verification-loop
After a feature or refactor on this Windows estate, run six checks in order and write a PASS or FAIL note before a draft pull request. Use when work is about to be committed, pushed, or handed to another harness.
jira-delivery
Close the needs-fix branch for both ticket classes: isolated git worktree, a red test BEFORE any implementation on change tickets, delegation to a core executor, every publish action (push / PR / comment / QA transition) gated behind a green @verification-agent verdict, commit + push + PR, then writeback via…
alpha-forge-preship
Alpha Forge quality gates for PR review - RNG determinism, URL validation, parameter validation, manifest sync.
moai-gate
Run lint+format+type-check+test in parallel (pre-commit quality gate).
demo-review
Quality-checks a rendered demo video before it ships — extracts frames, grades each section against its successCriteria, and finds spinners, empty states, clipped text, exposed secrets, audio/video desync, and pacing problems. Use after a draft render, before a final render, or when asked whether a demo video is good…