Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add wardawgmalvicious/agent-config --skill commitgit clone --depth 1 https://github.com/wardawgmalvicious/agent-configWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wardawgmalvicious/agent-config/commit)<a href="https://agentmods.dev/skills/wardawgmalvicious/agent-config/commit"><img src="https://agentmods.dev/badge/skills/wardawgmalvicious/agent-config/commit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wardawgmalvicious/agent-config/commit"><img src="https://agentmods.dev/badge/skills/wardawgmalvicious/agent-config/commit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00162 | $0.05535 |
| Opus 5.5 | $0.00065 | $0.02214 |
| Sonnet 5.5 | $0.00032 | $0.01107 |
| Haiku 4.5 | $0.00016 | $0.00553 |
Grade A, and why
commit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 345 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Commit workflow
Turn the current working-tree changes into one or more well-formed commits. Committing only — pushing, amending, rebasing, and tagging happen only when explicitly requested, never as follow-through.
Survey first
git status --short— full picture of modified, renamed, untracked. Note anything already staged that you did not stage.git log --oneline -10— calibrate message style against this repo's actual history, not assumptions.- Read the diffs (
git diff,git diff --stat, plus untracked files) well enough to explain why each change exists, not just what it touches. Never commit content you haven't looked at. - On
main? Branch when the work is more than one commit, or an intermediate state would break while deployed — the trigger and the name are~/.claude/CLAUDE.md§ "Branch naming"'s — and from the first commit when it is bound forland, which refuses to start frommain. Work in a repo that lands by pull request is bound forland: a pull-request rule onmain(landstep 7 has the two reads), or(#<n>)andMerge pull requestsubjects in the log above; a fast-forward landing leaves none. A repo's own committed convention wins, in itsCONTRIBUTING.mdor agent instructions: one that commits straight tomainanswers no, and then you commit where you stand. Say which way you went. In a shared treegit switch -cmoves HEAD for everyone — see below.
An empty git status --short is the whole answer. Report that there
is nothing to commit and stop; don't work through the diffs to confirm
it. git diff --stat prints nothing on a clean tree, and reading that
silence as a failed command rather than as the answer is a real failure
mode — observed 2026-09-09, three tool calls spent re-asking the same
question.
Splitting into commits
- One logical unit per commit. A rename, a new feature, and a docs catch-up are three commits even when they touch the same file. Test: could each commit's subject line be written without "and"?
- Review grouping is not a commit boundary. Parts approved
together in one review are still separate commits when each stands
on its own in history — independently revertible, citable, worth
landing alone. Bundle only when the parts are mutually dependent
for meaning: a claim and the caveat qualifying it, a rename and its
call sites. Tiebreak for a docs batch — which shape would you
rather read in
git loga year from now? - Every commit must be self-consistent. No commit may reference a name, file, or skill that doesn't exist yet at that point in history, and none may leave the repo in a broken intermediate state. Order accordingly (e.g. a rename lands before anything citing the new name).
- When one file straddles commits, reach for interactive
git add -pwhere your harness offers it. Some do not: an agent shell with no interactive stdin cannot drive it, and the prompt either hangs or reads EOF. Where it is unavailable, stage through the index: scripts/stage-part.py builds the next commit's version of the file from the changed blocks a regex picks and writes it straight into the index, leaving the working tree at its final state. Read theTAKEandskipline it prints for each block, thengit diff --cached, before each commit; an emptygit status --shortafter the last commit proves the commits add up to the file on disk. Usage, limits, and the blob built by hand for changes no unchanged line separates: references/index-staging.md. Stepping the file through intermediate states on disk is the fallback — edit it down to the first commit's portion, commit, restore the next portion, commit again — and rewrites the working tree, so verify the final state matches the intended end state exactly. Stepping assumes you own the whole file. If another session has uncommitted work in it, stepping rewrites their in-flight text — commit only what is yours and leave the rest with a note. - Stage explicit paths only. No
git add -A/git add .— they silently sweep in untracked or unrelated files. - Verify the index before each commit.
git diff --cached -- <paths>must show your change and nothing else. The diff you read in the survey is not whatgit addstaged: the file can change in between, andgit add <path>takes every hunk in the file, not the hunk you meant.--statis not enough — a foreign hunk in a file you also edited has a stat line that looks exactly right. This is the last point at which a swept-in change is free to fix — and in a shared tree it has to gate the commit rather than precede it; see below. - Renames go through
git mv(or are staged so git detects the rename) so history follows the file.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +2 lines 8a3489e2fa43
- 2d ago Changed · +4 lines 5c797c6e8bc2
- 5d ago Changed · +24 lines 71bb3e88bb79
- 6d ago Changed · +14 lines 50fb963a77ae
- 9d ago Changed · +3 lines 0c9c530f9599
- 10d ago Changed · +38 lines 2eac1ad4559c
- 11d ago Changed · +8 lines f4d92fa47df9
- 13d ago Changed · +6 lines c7e2ef8597c7
- 16d ago Changed · +7 lines f582c9bbb8d4
- 18d ago First seen · 239 lines · 162 tokens per session scan A 3985f71e5c82
commit is a skill published in the GitHub repository wardawgmalvicious/agent-config (1 stars, last pushed 2d ago), licensed MIT. It adds 162 tokens to every session and 5,535 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
apex-host-git-commit
Stage scoped changes, commit, push, and offer a PR in Agent Host. Use /apex-host-git-commit only after selecting the built-in agent owner and MAI-Code-1.1-Flash.
setup-pre-commit
Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-commit hooks, set up Husky, configure lint-staged, or add commit-time formatting/typechecking/testing.
request-refactor-plan
Create a detailed refactor plan with tiny commits via user interview, then file it as a GitHub issue. Use when user wants to plan a refactor, create a refactoring RFC, or break a refactor into safe incremental steps.
create-pr
Creates a GitHub PR with a Linear-ticket-prefixed title and a decision-led, narrative description for Prisma 8. Use when the user wants to create a pull request, open a PR, or submit changes for review.
repo-sync
Manage automatic Git syncing on macOS with repo-sync. Use only when the user explicitly invokes /repo-sync.
mcore-split-pr
Split a PR into multiple PRs to reduce the number of required CODEOWNERS reviewer groups.