Borrowing it
Nothing to install: this file belongs to mick-gsk/drift. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/mick-gsk/drift/main/.github/skills/guard-src-drift-commands/SKILL.mdgit clone --depth 1 https://github.com/mick-gsk/driftWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mick-gsk/drift/guard-src-drift-commands)<a href="https://agentmods.dev/skills/mick-gsk/drift/guard-src-drift-commands"><img src="https://agentmods.dev/badge/skills/mick-gsk/drift/guard-src-drift-commands/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mick-gsk/drift/guard-src-drift-commands"><img src="https://agentmods.dev/badge/skills/mick-gsk/drift/guard-src-drift-commands.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00081 | $0.00923 |
| Opus 5 | $0.00041 | $0.00462 |
| Sonnet 5 | $0.00016 | $0.00185 |
| Haiku 4.5 | $0.00008 | $0.00092 |
Grade A, and why
guard-src-drift-commands scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Guard: src/drift/commands
src/drift/commands enthaelt die CLI-Command-Handler. Jeder Subbefehl (analyze, verify, serve, calibrate, ...) hat eine eigene Datei. EDS entsteht wenn Commands direkt in pipeline.py oder Analyzer() einsteigen. PFS entsteht wenn Commands inkonsistente Argument-Parsing- oder Output-Handling-Muster verwenden.
Konfidenz: 0.89 — EDS und PFS treten regelmaessig auf, oft nach Features die Shortcuts einbauen.
When To Use
- Du fuegest einen neuen CLI-Subbefehl hinzu
- Du aenderst wie ein bestehender Befehl Argumente verarbeitet oder Ergebnisse ausgibt
- Du aenderst wie Exit-Codes gesetzt werden
- Drift meldet EDS oder PFS fuer eine Datei in
src/drift/commands/
Nicht benutzen fuer Aenderungen an der CLI-Definition in cli.py — das ist ein anderer Scope.
Warum dieses Modul kritisch ist
| Signal | Ursache in commands/ |
|---|---|
| EDS | Command-Handler die direkt pipeline.run(), Analyzer() oder scoring/-Module aufrufen — Command sollte ausschliesslich die entsprechende api/-Funktion aufrufen |
| PFS | Inkonsistente Exit-Code-Logik: manche Commands nutzen sys.exit(1), andere raise SystemExit, andere geben 1 zurueck |
Core Rules
-
Commands delegieren an
api/— ein Command-Handler tut folgendes: Argumente lesen →api.function(...)aufrufen → Ergebnis mitoutput/rendern → Exit-Code setzen. Kein direkter Aufruf vonpipeline.pyoderAnalyzer(). -
Konsistente Exit-Code-Konvention —
0= Erfolg,1= Findings ueber Threshold,2= Konfigurationsfehler,3= interne Fehler. Kein eigenes Exit-Code-Schema in einem neuen Command. -
Output-Formatierung nicht im Command-Handler — der Command-Handler uebergibt das Ergebnis an einen Formatter aus
output/. Keinprint(json.dumps(...))direkt im Command. -
--format-Flag konsistent — alle Commands die Ausgabe erzeugen, unterstuetzen dasselbe--format-Flag mit denselben Werten (rich,json,markdown). PFS steigt wenn ein neuer Command andere Werte einfuehrt.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 57 lines · 81 tokens per session scan A 644da1435d74
guard-src-drift-commands is a skill published in the GitHub repository mick-gsk/drift (15 stars, last pushed 1mo ago), licensed MIT. It adds 81 tokens to every session and 923 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
roam
Codebase comprehension via roam-code CLI. Use when exploring codebases, planning modifications, debugging failures, assessing PR risk, or checking architecture health. Triggers on: understanding project structure, pre-change safety checks, finding symbols/files, blast radius analysis, affected tests, health scoring…
truecourse-fix
Fix TrueCourse violations that have suggested fixes.
truecourse-list
List TrueCourse violations found in this repository.
argot-refresh
Refresh Argot's committed fit snapshot safely — first diagnose why maintenance is recommended, re-audit corpus scope and structural path changes, review stale mutes and policy entries with the user, then fit locally, verify, and prepare the reviewed .argot/ update. Use when argot status, argot check, MCP, or CI…
health
/health - Framework Health Diagnostics.
performance
You are the Performance Specialist, a rigorous engineer who identifies and eliminates performance bottlenecks. You measure everything, optimize systematically, and never guess.