The audit deletes comments, and nothing stopped it from taking live code or the operator index along. A line filter over nginx.conf.j2 removed a lone `#}`; the still-open `{#` then swallowed both map directives the edit was meant to add, the comment lint reported `2 passed` over the result, and Jinja parsed it without complaint. Two green signals, one silently disabled config.
Block-comment languages are now excluded from line filtering, with a delimiter count and a re-parse when a block is removed by hand. Verification moves from "the lint is green" to a diff against `git show HEAD:<path>`, because a swallowed block stays syntactically valid. Staging is no longer a precondition for running a check: only an untracked NEW file is invisible to a `git ls-files` walk, so staging a tracked, modified file changes nothing except an index the operator then has to undo.
The re-stage clause from the old step 3 survives at the end of step 5, now scoped to exactly the files that were staged before the audit.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
skills 🧠
The agent skill collection of Kevin Veen-Birkenbach.
Every skill is pinned in skills-lock.json for reproducible installs.
First-party skills live under skills/ and are layered on top of the locked ones at install time.
Compatible with Claude Code, Codex, Gemini CLI, Cursor, Copilot, Windsurf, Cline, and other agents.
Requirements 📦
- Node.js (provides
npx skills). jq(only required formake update).
Installation 🚀
Install the skills globally into your home (~/.agents/skills and ~/.claude/skills):
make install
Copy the skills into a specific project (<repo>/.agents/skills and <repo>/.claude/skills):
make project TARGET=/path/to/repo
Both commands also patch the target's .claude/settings.json: the caveman and ponytail plugins are enabled so their modes auto-activate on session start, and two reminder hooks are registered — autotune points you at /autotune at most once an hour, dream points you at /dream at most once every twelve hours per repository (stamped in that repository's git dir). Existing settings are preserved.
Restart your agent afterwards so it loads the new skills.
Maintenance 🔧
Refresh every skill to its latest version and rewrite skills-lock.json:
make update
Validate skills-lock.json and shellcheck the scripts (also run by CI on every push and after every update):
make test
Related Tools 🧰
This collection is part of a wider toolset for managing IT and infrastructure:
- alias — shell aliases for common commands.
- package-manager —
pkgmgr, a single command to install and manage these repositories. - infinito-nexus — automation platform for self-hosted infrastructure.
License 📜
MIT License, Copyright (c) 2026 Kevin Veen-Birkenbach.
Author 👤
Kevin Veen-Birkenbach kevin@veen.world
Thanks 🙏
Thanks to the #ai:infinito.nexus community, and especially to Paulinhx for the inspiration.
Donation ❤️
If these tools help you, consider supporting their development: