Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add thkt/dotclaude --skill commitgit clone --depth 1 https://github.com/thkt/dotclaudeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/thkt/dotclaude/commit)<a href="https://agentmods.dev/skills/thkt/dotclaude/commit"><img src="https://agentmods.dev/badge/skills/thkt/dotclaude/commit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/thkt/dotclaude/commit"><img src="https://agentmods.dev/badge/skills/thkt/dotclaude/commit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 6 Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.Fix: Remove the model/provider override or disclose it prominently and require explicit operator approval before invoking an external coding CLI or billed model.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00027 | $0.00900 |
| Opus 5.5 | $0.00011 | $0.00360 |
| Sonnet 5.5 | $0.00005 | $0.00180 |
| Haiku 4.5 | $0.00003 | $0.00090 |
Grade A, and why
commit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/commit - Git コミット実行
build の Code 段が unit ごとに取るコミットを、手で 1 回行う版。subject の規則は同じ。
入力
$ARGUMENTS はコンテキストまたは Issue 参照を含み得る。空白を除去し、空文字列ならステージ済み変更のみで解析する。非空ならメッセージの scope やフッターのヒントとして扱う。
実行
git statusとgit diff --stagedを並列で実行し、ステージ済み変更を読む- 変更内容と
$ARGUMENTSから、メッセージを 1 つ生成する (§ 種別判定, § ルール) - sandbox 互換コミットでそのままコミットを実行する
種別判定
diff のコンテキストから type を推定する。判別できないときは chore とする。feat は semver の minor を上げる宣言になるので、根拠がないまま選ばない。
| Type | 用途 |
|---|---|
| feat | 新しい機能や能力 |
| fix | バグ修正やエラー訂正 |
| refactor | 振る舞いを変えないコード再構成 |
| docs | ドキュメントのみの変更 |
| test | テストの追加や更新 |
| chore | 設定、依存、メンテナンス |
| perf | パフォーマンス最適化 |
| style | フォーマット、空白、lint |
| ci | CI/CD 設定の変更 |
ルール
メッセージは <type>(<scope>): <subject> の形に組み立てる。破壊的変更は feat(api)!: のように type の後へ ! を付ける。部位ごとの規則は下表が定める。
| 部位 | 規則 |
|---|---|
| Subject | 72 文字以内、命令形、小文字、末尾のピリオドなし |
| Body | 動機や判断の理由など diff から読み取れない why を書く。自明なら省略する |
| Footer | BREAKING CHANGE:、Closes #123、Co-authored-by: を使う |
Sandbox 互換コミット
先頭の git rev-parse --show-toplevel で対象リポジトリを確かめる。
git rev-parse --show-toplevel
cat > "$TMPDIR/commit-msg.txt" << 'EOF'
<message>
EOF
git commit -F "$TMPDIR/commit-msg.txt"
エラー処理
| エラー | 扱い |
|---|---|
| ステージ済みなし | コミットせず、ステージが空であることを報告する |
| 空の diff | 最小限のメッセージでコミットする |
| git リポジトリでない | コミットせず、その旨を報告する |
| リポジトリが意図と違う | コミットせず、git rev-parse --show-toplevel の出力を報告する |
| pre-commit 失敗 | フックの出力をそのまま報告する。直して再実行するかはユーザーが決める |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 71 lines · 27 tokens per session scan A 72210d3ea071
commit is a skill published in the GitHub repository thkt/dotclaude (12 stars, last pushed 25d ago), licensed MIT. It adds 27 tokens to every session and 900 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
staleness-audit
Pre-commit audit. Invoke before every git commit. Diffs the staged change against the repo's "canaries" (README, decision log, roadmap, public API, doc comments, release notes, test discipline) and surfaces anything that's drifted out of sync. Updates the obvious drifts in place; flags judgement calls for the operator.
babysit
Watch a pull request or review cycle until it is ready to merge. Use when asked to babysit, monitor, or keep checking PR comments, reviews, and CI until all actionable issues are resolved.
code-review
Review the current diff, or a PR number/branch/path target, for correctness bugs (plus reuse/simplification/efficiency cleanups where the model's review recipe covers them) at the given effort level (low|medium|high|xhigh|max: from few high-confidence findings up to many, some of them uncertain; ultra: deep…
github
GitHub via gh CLI: PRs, issues, reviews, repos, auth.
merge-batch
Prepare and merge an owner-selected PR batch with contributor credit and exact-candidate admission. Use for a pasted PR list; combined focused validation is diagnostic, and every actual landing still requires its applicable checks and authorization.
babysit
Watch an open PR — fix failing CI, handle the straightforward review comments, and drive it to a mergeable state. Claude Code analog of Cursor's built-in /babysit. Use after opening a PR when the user wants the agent to shepherd it without re-prompting.