Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rpraharaj/forward-deployed-engineer --skill git-archaeologygit clone --depth 1 https://github.com/rpraharaj/forward-deployed-engineerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rpraharaj/forward-deployed-engineer/git-archaeology)<a href="https://agentmods.dev/skills/rpraharaj/forward-deployed-engineer/git-archaeology"><img src="https://agentmods.dev/badge/skills/rpraharaj/forward-deployed-engineer/git-archaeology.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00120 | $0.01751 |
| Opus 5 | $0.00060 | $0.00875 |
| Sonnet 5 | $0.00024 | $0.00350 |
| Haiku 4.5 | $0.00012 | $0.00175 |
Grade A, and why
git-archaeology scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 152 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Git archaeology
Finding out why, before you change it.
Why this exists
An FDE reads a lot of code that looks wrong. Some of it is. Much of it is an incident fix, a regulatory requirement, a workaround for a downstream system's bug, or a special case for one customer worth more than the rest combined.
The odd-looking code is odd because something happened. Removing it re-creates whatever it was preventing — usually silently, usually in production, and usually with your name on the commit.
You are the person least equipped to tell the difference. The permanent team carries the scar tissue; you don't. History is how you acquire it in three minutes instead of three years.
When this applies
- Code looks unnecessary, bizarre, or over-complicated
- Before deleting anything you don't understand
- A magic number or special case with no explanation
- A comment that contradicts the code
- You're about to say "this can be simplified"
- A
[confirmed]claim you want to upgrade with the reasoning behind it
When it doesn't
- Code you already understand
- Genuinely new code with no history
- You need runtime behavior rather than intent — that's
trace-the-flow - Shallow clone with no history — say so and tag conclusions
[unverified]
Prerequisites
Git history you can read. If git rev-parse --is-shallow-repository is true, stop and tag any intent claim [unverified]. Locate the workspace so the write-up lands with the rest of the engagement.
Procedure
1. Blame the specific lines
git blame -L 88,120 path/to/File.java
# Follow through moves and reformatting, which otherwise hide the real author
git blame -w -C -C -L 88,120 path/to/File.java
-w ignores whitespace changes, -C -C follows code moved between files. Without them, blame frequently points at whoever last reformatted the file, which tells you nothing and wastes the step.
2. Read the whole commit, not just the line
git show <sha>
git show <sha> --stat
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 152 lines · 120 tokens per session scan A b5b9fd39f842
git-archaeology is a skill published in the GitHub repository rpraharaj/forward-deployed-engineer (6 stars, last pushed 21d ago), licensed MIT. It adds 120 tokens to every session and 1,751 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
git-workflow
This skill should be used when the user asks to "create git commit", "manage branches", "follow git workflow", "use Conventional Commits", "handle merge conflicts", or asks about git branching strategies, version control best practices, pull request workflows. Provides comprehensive Git workflow guidance for team…
git-workflow
A guide for handling Git repository work safely, including status checks, branches, commits, pushes, pull requests, and rebasing. Git is a version-control system that records code changes and coordinates work between developers.
artifact-metadata
Manage artifact metadata, versioning, ownership, and review history across the SDLC lifecycle.
ralph-abort
Abort a running agent loop and optionally revert changes.
gwm
Manage git worktrees across any repository with the gwm Rust binary (CLI + ratatui TUI). Use when the user asks to create / list / remove / bootstrap / switch / link worktrees, run a command across worktrees (gwm exec) or reclaim build artifacts (gwm clean), materialise a PR into a worktree (gwm review), drive a…
repo-harness-ship
Final repo-harness closeout workflow. Runs review/check gates, commits finished contract worktrees, pushes codex branches, and creates GitHub PRs by default.