archguardian: Skill for Claude Code

.claude/skills/suppress/SKILL.md

suppress is a skill for Claude Code from ysfAskri/archguardian. It costs 13 tokens per session (403 once invoked), scanned A, original, MIT.

A skill for adding comments that tell Archguardian to ignore selected findings. It supports whole-line, next-line, block, and language-appropriate comments, including rule-specific suppressions.

In plain words
What is it for?
Use it to suppress a specific finding in a selected file or rule, then rescan the project to confirm the warning is gone.
Why use it?
It removes false-positive warnings while allowing other checks on the same code to remain active.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

This is ysfAskri/archguardian's own configuration. It tells Claude Code how to work on archguardian itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything archguardian configures →

Reuse

Borrowing it

Nothing to install: this file belongs to ysfAskri/archguardian. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/ysfAskri/archguardian/master/.claude/skills/suppress/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/ysfAskri/archguardian

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for suppress

README.md
[![agentmods](https://agentmods.dev/badge/skills/ysfaskri/archguardian/suppress.svg)](https://agentmods.dev/skills/ysfaskri/archguardian/suppress)
Your own site
<a href="https://agentmods.dev/skills/ysfaskri/archguardian/suppress"><img src="https://agentmods.dev/badge/skills/ysfaskri/archguardian/suppress.svg" alt="Measured on agentmods" height="20"></a>
Per session 13 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 403 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00013 $0.00403
Opus 5 $0.00006 $0.00201
Sonnet 5 $0.00003 $0.00081
Haiku 4.5 $0.00001 $0.00040

Measured 7d ago against content hash c8844ef7c02d, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

suppress scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/suppress/SKILL.md · 60 lines

What it actually says

archguardian suppress

Help the user add inline suppression comments to silence specific archguardian findings.

Instructions

  1. If $ARGUMENTS contains a file path or rule ID, scope to that. Otherwise, run a scan first:

    npx archguardian scan --format json
    
  2. For each finding the user wants to suppress, determine the best approach:

    • Same-line suppression (preferred for short lines):

      doSomething(); // archguard-ignore-line
      doSomething(); // archguard-ignore-line security/xss
      
    • Next-line suppression (preferred for long lines):

      // archguard-ignore
      doSomething();
      // archguard-ignore security/xss
      doSomething();
      
    • Python uses # instead of //:

      do_something()  # archguard-ignore-line
      
    • Block comments also work:

      /* archguard-ignore */
      doSomething();
      
  3. Always prefer rule-specific suppression (archguard-ignore-line security/xss) over blanket suppression (archguard-ignore-line) to keep other rules active on that line.

  4. Apply the edit using the Edit tool.

  5. After adding suppressions, run a quick scan to confirm the findings are gone:

    npx archguardian scan --format json
    

Tips

  • Only suppress genuine false positives. If the finding is valid, fix the code instead.
  • When suppressing, add a brief reason comment if it's not obvious why it's suppressed.
  • If many findings of the same type are false positives, consider disabling that rule in .archguard.yml instead.
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 60 lines · 13 tokens per session scan A c8844ef7c02d

Subscribe to this mod's changes

suppress is a skill published in the GitHub repository ysfAskri/archguardian (4 stars, last pushed 6mo ago), licensed MIT. It adds 13 tokens to every session and 403 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

roam

Codebase comprehension via roam-code CLI. Use when exploring codebases, planning modifications, debugging failures, assessing PR risk, or checking architecture health. Triggers on: understanding project structure, pre-change safety checks, finding symbols/files, blast radius analysis, affected tests, health scoring…

Cranot/roam-code · 86 tokens

truecourse-fix

Fix TrueCourse violations that have suggested fixes.

truecourse-ai/truecourse · 13 tokens

truecourse-list

List TrueCourse violations found in this repository.

truecourse-ai/truecourse · 12 tokens

argot-refresh

Refresh Argot's committed fit snapshot safely — first diagnose why maintenance is recommended, re-audit corpus scope and structural path changes, review stale mutes and policy entries with the user, then fit locally, verify, and prepare the reviewed .argot/ update. Use when argot status, argot check, MCP, or CI…

get-tmonier/argot · 136 tokens

module-federation

Add, review, or debug client-rendered Module Federation support in Rsbuild-first TypeScript applications. Covers host/remote roles, exposes, remotes, shared dependencies, generated types, runtime loading failures, and observability checks.

soulcodex/agentic · 51 tokens

static-code-analysis

Selects, configures, and integrates a static analysis tool for the project's language. Covers tool selection, rule configuration, CI integration, fixing existing violations, and pre-commit hook setup. Invoked when the user asks to add linting, set up static analysis, or configure a code quality tool.

soulcodex/agentic · 65 tokens