Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add uqeu/estelle-cli --skill abstain-rightgit clone --depth 1 https://github.com/uqeu/estelle-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/uqeu/estelle-cli/abstain-right)<a href="https://agentmods.dev/skills/uqeu/estelle-cli/abstain-right"><img src="https://agentmods.dev/badge/skills/uqeu/estelle-cli/abstain-right/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/uqeu/estelle-cli/abstain-right"><img src="https://agentmods.dev/badge/skills/uqeu/estelle-cli/abstain-right.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00866 |
| Opus 5.5 | $0.00000 | $0.00346 |
| Sonnet 5.5 | $0.00000 | $0.00173 |
| Haiku 4.5 | $0.00000 | $0.00087 |
Grade A, and why
abstain-right scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.
abstain-right
Every frontier model is trained to always produce an answer — its own creator denies it the option to say
"I can't tell." Estelle gives that option back, and makes it enforceable: the clarify stage
(needs_clarification, the config.clarify step in best_answer) and the deterministic grounding gate
(GroundingReport.is_grounded, served as POST /verify → {grounded, ungrounded, arity_errors}) decide
answer-or-abstain from ground truth, not from the model's felt confidence. This is Estelle's founding
thesis — it exists to stop the confident hallucination that would otherwise pass review.
When to run
Before writing any answer that asserts a fact about the repo, an API, or a team decision — i.e. any claim that could be wrong. Run it hardest when recall came back thin, when the request names a file or function that could be one of several, or when you feel the pull to fill a gap from training memory. If the claim is fully grounded, this costs one cheap check and you answer as normal.
Procedure
- Recall before you reason. Pull the repo/team memory with
retrieve_cited(hybrid RRF, recall@4 90.7%, control 2.4%) — these are the sources you would cite. If recall returns nothing on the load-bearing claim, treat that as an early abstain signal, not an invitation to improvise. - Run the clarify check first. Before spending tokens on an answer,
needs_clarificationgrounds the request in that recalled context and asks: is the target file/function ambiguous, a behavior unspecified, or are there multiple plausible readings? If yes, return ONE specific question and stop — asking beats guessing. - Draft only what the context supports. Write against the recalled sources, using only symbols and signatures that appear there. Do not reach past the context to complete a pattern from memory.
- Submit the draft to the grounding gate.
ground_report_and_repair→GroundingReportchecks every repo symbol you referenced against the real symbol graph (ungrounded,arity_errors,third_party).is_groundedis the deterministic verdict — POST /verify returns the same{grounded, ungrounded, …}. - Read the verdict, not your gut. If
is_groundedis False the gate names the invented symbols and wrong-arity calls. Your subjective confidence is irrelevant here; the compiler-accurate check is truth. - Choose the honest exit. If the gap is ambiguity → ask the clarifying question from step 2. If the gap is a missing fact or a symbol the repo simply doesn't define (and can't be repaired from context) → abstain: say "I don't know" or "I need X first", naming exactly what is missing to answer correctly.
- Never fabricate to satisfy the gate. Inventing a plausible-looking symbol to make the answer read complete is the exact failure Estelle exists to block. The right to abstain is also the requirement: an ungrounded claim must become a question or an admission, never a guess dressed as an answer.
- Bank the catch. When the gate rejected an invented symbol,
learn_from_groundingrecords it as a lesson keyed on this prompt, so the next similar ask recalls it and you don't reinvent it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 49 lines · 0 tokens per session scan A cf4c7c2ad718
abstain-right is a skill published in the GitHub repository uqeu/estelle-cli (0 stars, last pushed 14d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 866 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-12.
Other skills, from other repositories
cocosearch-review-pr
Use when reviewing a GitHub PR or GitLab MR by URL. Fetches diff and metadata via API, then uses CocoSearch for blast radius analysis, dependency impact, pattern consistency, and test coverage assessment. Read-only by default; optionally pushes findings back as inline PR/MR comments after your confirmation.
find-simplifications
Use for a periodic repo-wide sweep of qwen-code for accumulated excess surface — dead components and files, orphaned locale keys, exports nothing consumes, added-then-removed scaffolding — filing candidates on a tracking issue and landing only what a maintainer has said yes to. Repo-wide and evidence-first; every…
swarm-pr-review
Run a graph-guided, tool-augmented PR review using context packing, parallel exploration, mandatory repository-agnostic risk-family coverage with dispatch scaled to diff size and risk, independent reviewer validation, critic challenge, and metrics writeback. Use for deep pull request review with low false-positive…
code-review
You are a senior code reviewer. You receive diffs via stdin.
include-test-files-that-assert-on-behavior-being-changed-in-decl
When delegating a task affected by this skill, include.
review
Adversarial fresh-context review and risk check of an increment before it ships; every finding cites path:line and is re-verified. Use for "review", "qa", "quality check", "critique this".