Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rigortype/rigor --skill rigor-upgradegit clone --depth 1 https://github.com/rigortype/rigorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rigortype/rigor/rigor-upgrade)<a href="https://agentmods.dev/skills/rigortype/rigor/rigor-upgrade"><img src="https://agentmods.dev/badge/skills/rigortype/rigor/rigor-upgrade/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rigortype/rigor/rigor-upgrade"><img src="https://agentmods.dev/badge/skills/rigortype/rigor/rigor-upgrade.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.00851 |
| Opus 5.5 | $0.00020 | $0.00340 |
| Sonnet 5.5 | $0.00010 | $0.00170 |
| Haiku 4.5 | $0.00005 | $0.00085 |
Grade A, and why
rigor-upgrade scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 101 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Rigor Upgrade
A new Rigor release sharpens inference and may add or tighten rules, so
rigor check can report diagnostics it did not before — most are the new
version catching more, a few are sig-quality false positives the new
sharpness exposes. This skill adopts the upgrade without either blindly
regenerating the baseline (which buries genuine new catches) or treating
every new line as a regression.
First: load the version-current copy
This skill's exact commands, flags, and config keys drift between Rigor releases, so follow the copy that ships with the installed Rigor rather than any vendored or frozen copy of this file — doubly so here, since you just changed the version this skill is meant to track. Get the complete current procedure in one call:
rigor skill --full rigor-upgrade
If you already loaded this skill via rigor skill you have the current
copy — just proceed. If rigor is not on PATH, this task needs it: run
rigor-next-steps to install Rigor first, then come back.
When to use
- You just ran
mise use gem:rigortype/gem update rigortypeand want to understand what the new version changed about your project's diagnostics.
Procedure
Phase 1 — confirm the new version
rigor --version
Phase 2 — see the delta against the committed baseline
rigor check # everything outside the committed baseline's envelope
rigor baseline drift # per-bucket movement against .rigor-baseline.yml
With baseline: wired, rigor check already hides what the baseline
covers, so what it prints is new relative to the baseline — that set
is what the upgrade changed. rigor baseline drift adds the bucket view:
buckets now over their recorded count, and buckets the new version
cleared or shrank.
Phase 3 — sort the new diagnostics
For each newly-surfaced diagnostic:
- A genuine new catch — the sharper inference found a real latent
issue. Fix it. (Check
evidence_tierinrigor check --format json:highis most likely a true positive.) - A sig-quality false positive — a known class (Struct
call.wrong-arity, an over-nilable RBS return, a regex-capture$1read).# rigor:disable <rule>the site with a reason, or address the RBS. Readrigor explain <rule>if unsure whether the rule should fire here. - Expected envelope growth — broadly acceptable in acknowledge mode.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 101 lines · 51 tokens per session scan A 7075bef4ef52
rigor-upgrade is a skill published in the GitHub repository rigortype/rigor (107 stars, last pushed today), licensed MPL-2.0. It adds 51 tokens to every session and 851 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-26.
rigor-upgrade compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| rigor-upgraderigortype/rigor | Skill | 107 | today | MPL-2.0 | A | 51 | Claude Code, Codex |
| systematic-debuggingopen-metadata/OpenMetadata | Skill | 16k | yesterday | Apache-2.0 | A | 37 | Claude Code |
| log-error-digestzebbern/claude-code-guide | Skill | 4.7k | 3d ago | MIT | A | 71 | Claude Code, Codex |
| cwv-optimizeradobe/skills | Skill | 319 | yesterday | Apache-2.0 | A | 112 | Claude Code |
| ci-fixersipyourdrink-ltd/bernstein | Skill | 1.2k | yesterday | Apache-2.0 | A | 15 | Claude Code, Codex |
| incident-response-incident-responsermyndharis/antigravity-skills | Skill | 1.9k | 23d ago | MIT | A | 36 | Claude Code |
| diagnosing-missing-recordingsPostHog/posthog | Skill | 41k | today | none | A | 76 | Claude Code, Codex |