pact-check

pact-check is a skill for Claude Code, Codex from jonathanmr22/pact. It costs 9 tokens per session (284 once invoked), scanned A, original, MIT.

A checklist-based review of recent code changes against a project's architecture, documentation, caches, package knowledge, and app lifecycle.

In plain words
What is it for?
Use it after making changes to classify findings as passed, stale, unchecked, or a rule violation.
Why use it?
It catches stale documentation, missed dependencies, unverified packages, and other problems that may be overlooked during implementation.

Skill for Claude CodeCodex

Part of the pact plugin — 5 skills, 3 agents shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/jonathanmr22/pact/pact-check
Any agent
npx skills add jonathanmr22/pact --skill pact-check
Clone the repo
git clone --depth 1 https://github.com/jonathanmr22/pact

Made for: Claude Code, Codex.

Or install pact, the plugin that ships this one along with the rest of its 5 skills, 3 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pact-check

README.md
[![agentmods](https://agentmods.dev/badge/skills/jonathanmr22/pact/pact-check.svg)](https://agentmods.dev/skills/jonathanmr22/pact/pact-check)
Your own site
<a href="https://agentmods.dev/skills/jonathanmr22/pact/pact-check"><img src="https://agentmods.dev/badge/skills/jonathanmr22/pact/pact-check.svg" alt="Measured on agentmods" height="20"></a>
Per session 9 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 284 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00009 $0.00284
Opus 5 $0.00005 $0.00142
Sonnet 5 $0.00002 $0.00057
Haiku 4.5 $0.00001 $0.00028

Measured 5d ago against content hash bf6a03fded31, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

pact-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/pact/skills/pact-check/SKILL.md · 27 lines

What it actually says

Review the changes made in this session against PACT's cognitive redirections. For each question, evaluate honestly:

1. Dependency trace: For every file edited this session, what depends on it and what does it depend on? Were all downstream consumers updated?

2. Staleness audit: What did the changes make stale? Check:

  • Architecture map (SYSTEM_MAP.yaml) — does it still reflect reality?
  • Feature flow docs — do they still describe the correct behavior?
  • Package knowledge files — any new packages used without research?
  • Pending work tracker — updated with current status?

3. Cache consistency: If any provider/state management was modified, were ALL caches updated (both list and map caches)?

4. Package verification: Were any packages used based on assumption rather than verified documentation? Check knowledge/packages/ for knowledge files.

5. Lifecycle impact: Do the changes survive all app states? Fresh install, normal open, background, force close, backup restore?

Report findings as:

  • PASS — checked and correct
  • STALE — needs updating (specify what)
  • UNCHECKED — couldn't verify (explain why)
  • VIOLATION — cognitive redirection was not followed (specify which)
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 27 lines · 9 tokens per session scan A bf6a03fded31

Subscribe to this mod's changes

pact-check is a skill published in the GitHub repository jonathanmr22/pact (15 stars, last pushed 2mo ago), licensed MIT. It adds 9 tokens to every session and 284 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

orloj-generator

Interactive scaffold generator for Orloj multi-agent systems. Use this skill whenever someone wants to create, set up, scaffold, bootstrap, or generate an Orloj agent system, pipeline, swarm, or hierarchy. Also trigger when users mention "orlojctl init", ask how to get started with Orloj, want to build a multi-agent…

OrlojHQ/orloj · 168 tokens

memory-sync

Review the auto-extracted candidates in .claude/memory/pending.md and commit keepers to the canonical memory files (landmarks.md, libraries.md, decisions.md, landmines.md, conventions.md, pending-questions.md, backlog.md). Invoke at session start when the SessionStart hook reports pending candidates, or any time…

friedbotstudio/baseline · 99 tokens

spec

Draft a Workflow Phase 4 technical spec from an intake (and optionally a BRD + scout + research memo). The spec defines how the system will change: design (C4 + UML + dependency graph in PlantUML), data, APIs, tests, rollout, rollback. Output lives at docs/specs/ .md. Never self-approves — approval happens via…

friedbotstudio/baseline · 0 tokens

chore

Workflow track for tasks that need no TDD — documentation edits, governance count bumps, vendored-skill content updates, configuration tweaks, formatting, typo fixes, dependency bumps where no project code changes. Skips /scenario and /implement (no failing test to drive) and runs the work directly. archive…

friedbotstudio/baseline · 183 tokens

commit

Workflow Phase 11 — Commit Preparation and Execution. Stages and commits the work. Requires /grant-commit first (Git Commit Guard enforces a 15-min ad-hoc consent window; inside a workflow the grant is slug-scoped and one grant covers the whole landing).

friedbotstudio/baseline · 59 tokens

design-ui

Orchestrates impeccable for every design task inside a workflow phase. Captures intent in natural language, classifies it (design / development / copy), translates design intents into a sequence of impeccable subcommand invocations, runs them in main context with state persistence at .claude/state/design/ .json, and…

friedbotstudio/baseline · 126 tokens