markdown-site: Skill for Claude Code

.claude/gitrules/SKILL.md

gitrules is a skill for Claude Code from waynesutton/markdown-site. It costs 33 tokens per session (434 once invoked), scanned A, original, MIT.

A set of safety rules for using Git, the version-control system that records changes to code. It focuses on examining changes before undoing them and avoiding commands that can erase work.

In plain words
What is it for?
Reviewing a diff before undoing edits, manually reverting selected sections, and handling commits, branches, or cleanup operations safely.
Why use it?
It reduces the risk of permanently losing uncommitted files, detailed implementations, or other valuable changes during cleanup or reversion.

Skill for Claude Code

Written for Claude Code: installed under .claude/.

This is waynesutton/markdown-site's own configuration. It tells Claude Code how to work on markdown-site itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything markdown-site configures →

Reuse

Borrowing it

Nothing to install: this file belongs to waynesutton/markdown-site. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/waynesutton/markdown-site/main/.claude/gitrules/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/waynesutton/markdown-site

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for gitrules

README.md
[![agentmods](https://agentmods.dev/badge/skills/waynesutton/markdown-site/gitrules/github.svg)](https://agentmods.dev/skills/waynesutton/markdown-site/gitrules)
Your own site
<a href="https://agentmods.dev/skills/waynesutton/markdown-site/gitrules"><img src="https://agentmods.dev/badge/skills/waynesutton/markdown-site/gitrules/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for gitrules

Your own site · 80×15
<a href="https://agentmods.dev/skills/waynesutton/markdown-site/gitrules"><img src="https://agentmods.dev/badge/skills/waynesutton/markdown-site/gitrules.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 33 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 434 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00033 $0.00434
Opus 5.5 $0.00013 $0.00174
Sonnet 5.5 $0.00007 $0.00087
Haiku 4.5 $0.00003 $0.00043

Measured 1mo ago against content hash 06e4dd86106c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

gitrules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/gitrules/SKILL.md · 44 lines

What it actually says

Critical Git Safety Protocol

NEVER USE git checkout TO REVERT CHANGES.

MANDATORY GIT SAFETY RULES:

  • NEVER run git checkout -- <file> without first examining what you're about to destroy
  • ALWAYS use git diff <file> to see exactly what changes will be lost
  • MANUALLY undo changes by editing files to revert specific problematic sections
  • Preserve valuable work: if user says changes are bad, ask which specific parts to revert
  • git checkout destroys ALL changes: this can eliminate hours of valuable progress
  • When user asks to "undo" changes: Read the current file, identify problematic sections, and manually edit to fix them

Why this matters: Using git checkout blindly can destroy sophisticated implementations, complex prompts, provider-specific logic, and other valuable work that took significant time to develop.

Git Safety Rules

NEVER run these commands without explicit user approval:

  • git reset --hard: Destroys uncommitted changes permanently
  • git checkout -- .: Discards all working directory changes
  • git clean -fd: Deletes untracked files permanently
  • git stash drop: Deletes stashed changes

ALWAYS before any git operation:

  1. Run git status first to check for uncommitted changes
  2. If there are uncommitted changes, STOP and ASK the user before proceeding
  3. Suggest git stash to preserve changes if needed
  4. Never create a commit unless the user explicitly asked for one

If user asks to "revert" something:

  1. First clarify: revert committed changes or uncommitted changes?
  2. Show what will be affected before doing anything
  3. Get explicit confirmation for destructive operations

This rule exists because careless git operations destroyed 2 days of work.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 44 lines · 33 tokens per session scan A 06e4dd86106c

Subscribe to this mod's changes

gitrules is a skill published in the GitHub repository waynesutton/markdown-site (627 stars, last pushed 5mo ago), licensed MIT. It adds 33 tokens to every session and 434 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

PR Review

Manage pull request workflow.

OpenLabor/openlabor · 7 tokens

re0-merge

Review and land an external contribution the way this suite does: gate it against the thesis, land it with the author's credit intact, complete a new skill rather than merging it raw, then approve, credit, and explain before closing. Use when reviewing a pull request, as any collaborator or maintainer, not only the…

LilMGenius/paperthin · 70 tokens

re0-git

Rewrite a finished commit's message into a clean, handoff-ready form in your own log style, so git log alone tells the story. User-invoked: run it after a commit.

LilMGenius/paperthin · 46 tokens

release

Prepare, verify, and publish Sutando engine releases. Use when asked to prepare a release proposal, determine a version bump, audit release documentation, validate release gates, create a release PR, tag a confirmed release, or publish GitHub release notes. Preparation is safe and non-publishing; tagging and…

sonichi/sutando · 68 tokens

review-preflight

Review tooling for a PR: review-preflight prints REVIEW.md's criteria and the PR's live gate state before a review; ci-triage maps a PR's failing checks to already-filed issues.

sonichi/sutando · 45 tokens

pr-explainer

Use when a developer asks to explain a pushed PR, walk through a PR stack, understand one stack member, or explain what an AI agent just pushed so they can connect code changes to end-to-end functionality and update domain knowledge. Not for defect review, merge approval, PR-body authoring, or full-repository…

Mathews-Tom/armory · 70 tokens