Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add hmj1026/dhpk --skill dhpk-js-static-check-strategygit clone --depth 1 https://github.com/hmj1026/dhpkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hmj1026/dhpk/dhpk-js-static-check-strategy)<a href="https://agentmods.dev/skills/hmj1026/dhpk/dhpk-js-static-check-strategy"><img src="https://agentmods.dev/badge/skills/hmj1026/dhpk/dhpk-js-static-check-strategy/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hmj1026/dhpk/dhpk-js-static-check-strategy"><img src="https://agentmods.dev/badge/skills/hmj1026/dhpk/dhpk-js-static-check-strategy.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00186 | $0.02114 |
| Opus 5 | $0.00093 | $0.01057 |
| Sonnet 5 | $0.00037 | $0.00423 |
| Haiku 4.5 | $0.00019 | $0.00211 |
Grade A, and why
dhpk-js-static-check-strategy scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 184 lines — stays where its author put it; the contents beside it link to each section on GitHub.
JS static-check strategy — progressive rollout playbook
Always-loaded SSOT rule:
modules/js/references/static-checks.md.
This skill carries the long-form execution detail so the always-loaded rule stays short. Load this when you are actually doing the rollout work.
Legacy-globals — three-list sync
When a leaf introduces a new global, all three lists must update together (no automatic derivation — three independent maintained files):
eslint.config.js<projectName>LegacyGlobalsconstant — readonly / writable annotation. SSOT forno-undef.<frontend-root>/<project>-ambient.d.ts—declare var X: any;block. SSOT fortsc --noEmitbare-identifier resolution.<frontend-root>/jsdoc-globals.js—@typedef(only when the defaultanyfrom the ambient.d.tsis too loose and a real shape adds value).
A leaf PR that misses any of the three surfaces later as no-undef or
TS2304. CI catches drift after the fact; reviewers should still verify
three-way sync proactively.
// @ts-check progressive strategy
- One leaf per PR: add
// @ts-check+ clean up the JSDoc + run the unit / contract tests to confirm no regression. - Track the rollout against your mechanical-extraction cadence (Stage A, B, C…). Each stage produces a batch of leaves ready for type-check enablement.
- A stuck leaf can land
// @ts-nocheckwith a TODO comment as a transitional state — but every transitional file should have a tracked exit PR.
Measure progress with the line-anchored grep (anything looser is gameable — see the trap below):
# Step 1 — strict opt-in (exit gate: this list must end up empty)
find <frontend-root> -maxdepth 1 -name '*.js' -exec \
grep -lE '^[[:space:]]*//[[:space:]]*@ts-check[[:space:]]*$' {} \;
# Step 2 — files still on `// @ts-nocheck` (governance indicator;
# should trend toward zero, but some files may be permanent exclusions —
# see classification below).
find <frontend-root> -maxdepth 1 -name '*.js' -exec \
grep -lE '^[[:space:]]*//[[:space:]]*@ts-nocheck' {} \;
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 184 lines · 186 tokens per session scan A 029d73e2a705
dhpk-js-static-check-strategy is a skill published in the GitHub repository hmj1026/dhpk (2 stars, last pushed today), licensed MIT. It adds 186 tokens to every session and 2,114 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
verify
A four-layer check for deciding whether a software feature is truly finished: code checks, runtime tests, end-to-end tests, and user-reported confirmation.
validation-sample
A skill for building a reference test set of 50–100 realistic scenarios for checking an agent or product. It separates user inputs from expected answers to prevent answer leakage and requires at least 90% before shipping.
opsx:tdd
Adds a TDD gate to OpenSpec — write REAL failing tests from specs//.md before implementation. Run after opsx:propose and before opsx:apply. Solid RED — never expect.fail placeholders.
evaluator-write-qa-parallel
Internal Auto-Harness evaluator skill for parallel sprint QA and QA report writing. Use only inside the Evaluator subagent during evaluatorqaparallel.
evaluator-write-qa
Internal Auto-Harness evaluator skill for sprint QA and QA report writing. Use only inside the Evaluator subagent during qa mode.
evaluator-write-retest-parallel
Internal Auto-Harness evaluator skill for parallel sprint retest and retest report writing. Use only inside the Evaluator subagent during evaluatorretestparallel.