Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add get-tmonier/argot --skill argot-checkgit clone --depth 1 https://github.com/get-tmonier/argotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/get-tmonier/argot/argot-check)<a href="https://agentmods.dev/skills/get-tmonier/argot/argot-check"><img src="https://agentmods.dev/badge/skills/get-tmonier/argot/argot-check.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00110 | $0.03467 |
| Opus 5 | $0.00055 | $0.01733 |
| Sonnet 5 | $0.00022 | $0.00693 |
| Haiku 4.5 | $0.00011 | $0.00347 |
Grade A, and why
argot-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 223 lines — stays where its author put it; the contents beside it link to each section on GitHub.
argot-check
Run argot on the current changes and act on what it reports. argot is
statistical; false positives happen. Every hit names a rule, and the rule —
not the confidence glyph — tells you what to do. The human has the last word.
Preconditions
argot --version— if missing, tell the user how to install it (see https://argot.tmonier.com/docs/getting-started/) and stop.- The repo must have a complete fit snapshot. Run
argot status --format json: it must reportsnapshot.complete: true. If there is no initial fit, hand off to argot-setup. If it reports uncommitted files, ask the user to review and commit the listed.argot/artifacts; if refresh isrecommended/strongly_recommended, or config is incompatible, hand off to argot-refresh. It readsrefresh.next_action, reviews scope and mutes, then fits locally only after confirmation.watchis informational. Never fit automatically during a routine check.
Run it
Score the changes you care about, as JSON:
argot check --format json # working-tree changes
argot check --staged --format json # what's about to be committed
Exit codes: 0 clean (or warn-severity hits only) · 1 at least one
error-severity hit · 2 setup/usage error. Treat 1 as "there is something
to act on," not as a mystery failure — walk the decision tree below.
Each hit in the JSON hits array carries:
| Field | Use |
|---|---|
rule |
Kebab-case rule name (foreign-import, redundant, …) — branch on this (see the rules table and decision tree). |
rule_label |
Human label of the rule: foreign import, already implemented here, … |
severity |
error or warn — the rule's configured severity for this run. Error hits drive exit code 1. |
confidence |
unusual / suspicious / foreign — strength of the evidence, display-grade only (see below). |
evidence |
The lines to show the user — names the foreign symbol, the duplicated function, or the area the code belongs in. |
hash |
Stable id for argot mute <hash>. |
path, line_start, line_end |
Where it is. |
source |
workdir / staged / untracked / a commit SHA — where the change came from. |
score, threshold |
Raw internals. Read rule and severity, not these — they sit on different scales per signal, so comparing them directly is meaningless. |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 223 lines · 110 tokens per session scan A 2076b22b474a
argot-check is a skill published in the GitHub repository get-tmonier/argot (48 stars, last pushed 6d ago), licensed MIT. It adds 110 tokens to every session and 3,467 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ring:adding-multi-tenancy
Adding database-per-tenant isolation into a Go service end-to-end via an 11-gate cycle: detects the stack, audits compliance, then dispatches backend agents to implement tenantId-from-JWT routing through the lib-commons v5 dispatch layer (config, middleware, repositories, metrics, tests) and runs reviewers. Use when…
ring:writing-skills
Writing or editing a Ring skill: SKILL.md structure, frontmatter and Agent-Search-Optimization rules, token-efficiency targets, and bulletproofing (Iron Law, rationalization tables, Red Flags) so discipline-enforcing skills resist excuses. Use when creating or revising a skill. Delegates pressure-testing to…
ring:creating-worktrees
Creating an isolated git worktree for parallel branch work: selects the directory by priority order, verifies/adds .gitignore safety, auto-installs the detected toolchain's dependencies, runs a baseline test, and reports readiness. Use before a feature that needs isolation from the main workspace or before executing…
ring:test-driven-development
Enforcing the RED-GREEN-REFACTOR loop: write one failing test and watch it fail, write minimal code to pass, then refactor green. Use when starting implementation of a new feature or bugfix, or writing any new production code. Requires pasted failure output as proof of RED; code written before its test must be…
ring:checking-frontend-quality
Checking frontend quality against changed UI via ring:qa-frontend in accessibility, visual, e2e, or performance mode and aggregating pass/fail verdicts. Use when a frontend change needs standalone a11y, visual-snapshot, Playwright e2e, or Lighthouse/Core-Web-Vitals validation outside the dev cycle. Skip for…
genie-orca-review
Independent, read-only review of a group, a wish, or a PR on Orca — SHIP / FIX-FIRST / BLOCKED with severity-tagged findings. Council and retro are this skill with a different input.