Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/metraton/gaia/git-conventionsnpx skills add metraton/gaia --skill git-conventionsgit clone --depth 1 https://github.com/metraton/gaiaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/metraton/gaia/git-conventions)<a href="https://agentmods.dev/skills/metraton/gaia/git-conventions"><img src="https://agentmods.dev/badge/skills/metraton/gaia/git-conventions.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00023 | $0.01195 |
| Opus 5 | $0.00012 | $0.00598 |
| Sonnet 5 | $0.00005 | $0.00239 |
| Haiku 4.5 | $0.00002 | $0.00120 |
Grade C, and why
git-conventions scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
T3 (`Verb: 'rm' (MUTATIVE)` on text that only *mentions* `rm -rf`). How it starts
The opening of the file, as written. The whole thing — 100 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Git Conventions
Commit Format
| Element | Rule |
|---|---|
| Format | type(scope): short description |
| Types | feat, fix, refactor, docs, test, chore, ci, perf, style, build |
| Scope | Optional, reflects module/area changed |
| Subject | Max 72 chars, lowercase start, imperative mood, no period, no emoji |
| Body | Optional, blank line after subject, 72 char line wrap |
| Footers | BREAKING CHANGE:, Refs:, Closes:, Fixes:, Implements:, See: |
Examples
feat(helmrelease): add Phase 3.3 services
fix(pg-non-prod): correct API key environment variable mappings
refactor: simplify context provider logic
chore(deps): update terraform to v1.6.0
Multi-Line Body (No Heredoc, No Temp File)
Repeat -m once per paragraph -- git -C /abs commit -m "type: subject" -m "First paragraph." -m "Second paragraph." -- no heredoc, no temp file. For
exact wraps, use git commit -m "$(cat <<'EOF' ... EOF)" instead
(command-execution Rule 7). Never attach a bare, unquoted heredoc
directly to git (git commit -F - <<EOF ... EOF) -- measured, the
classifier misreads a prose line as a command and blocks with a spurious
T3 (Verb: 'rm' (MUTATIVE) on text that only mentions rm -rf).
Git Path Flags
Target the repo with git -C /absolute/path <verb> -- this is the canonical
form in a subagent. The T3 consent gate parses -C as a flag and classifies
the command identically to the bare verb (git -C /repo push is T3 push,
same as git push); there is NO bypass of Gaia's gate. The full discipline --
why one byte-identical form prevents the approval loop, and why a separate cd
call cannot work (the cwd resets between Bash calls) -- lives in
command-execution Rule 7; follow it there.
Two narrow caveats:
- Prefer
-C /abs(short flag) or--git-dir=/abs(equals form); both are cleanly absorbed. Avoid the SPACE-separated--git-dir /abs/--work-tree /absforms -- the path leaks into the first non-flag token and shifts the subcommand the local-safe guard reads (a mutative verb likepushis still caught by the fallback scanner, but commit-message-leak protection is lost). - The historical warning that a leading path flag "bypasses all rules silently"
described Claude Code's NATIVE settings.json prefix matching (
Bash(git commit:*)), which Gaia used in 3.2.1 but no longer ships -- enforcement is now the PreToolUse hook, which is-C-robust. If a user adds their ownBash(git ...:*)allow rules, a leading path flag can still shift that prefix, but that affects only their auto-allow convenience, never Gaia's consent gate.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 100 lines · 23 tokens per session scan C f2a97d3fde37
git-conventions is a skill published in the GitHub repository metraton/gaia (3 stars, last pushed 7d ago), licensed MIT. It adds 23 tokens to every session and 1,195 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
review-team
6つの専門レビュアーロールを並列実行し、consensusLevel(複数ロールの合意度)と Tech Lead レポート(top3指摘・blindSpots・consensusSummary)で結果を統合する マルチエージェントレビュー entry skill。 Parallel multi-role review with consensus scoring (consensusLevel) and Tech Lead report. Use when a major release needs exhaustive multi-angle review, or when a single-perspective review…
mode
Adopt the lead role for this session: plan work, delegate to executors via relay, review reports, never implement large work directly. Invoke with /relay:mode.
verify
Machine-check an executor's report against its staged reality — TL;DR block well-formed, claimed files actually staged, declared counts cross-checked — stamping MALFORMED / MISMATCH / INCONCLUSIVE / COUNTS-MATCH. Invoke with /relay:verify, or when asked "check that report", "did it really do what it says", "verify X's…
auto
Flip this lead session's autonomous posture: proceed by default on routine in-plan steps instead of asking, or go back to waiting. Invoke with /relay:auto, or when asked to "go autonomous", "stop asking me every time", "just proceed", "turn auto off", "what posture am I in".
handoff
Hand this lead session off to a fresh successor. Invoke with /relay:handoff, or when asked to "hand off", "hand this off to a new session", "start a successor lead".
route
Retain escape hatch for lead mode: when the routing gate blocks a large inline edit that is genuinely lead-appropriate work, declare a reason and open a short grace window so the edit can proceed. Invoke with /relay:route, or when a PreToolUse block tells you to.