Run any Skill in Manus with one click

cli-hygiene

Stars4

Forks1

UpdatedJuly 10, 2026 at 04:07

Scan source for Windows/cross-platform CLI hazards before shipping — non-ASCII in printed strings (the cp1252 console crash), hardcoded python3, heredoc backslash mangling, Node .cmd/.bat spawns, set -e in hooks. Use when the user asks to "check for encoding issues", "scan for Windows portability", "cli hygiene", is about to ship a CLI/script change, or wants the deterministic form of the ship-loop Windows discipline. Advisory (never blocks); wire it as a gate-router gate.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

fakoli

fakoli/fakoli-plugins

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software DevelopersComputer and Mathematical Occupations·SOC 15-1252

SKILL.md

readonly

name	cli-hygiene
description	Scan source for Windows/cross-platform CLI hazards before shipping — non-ASCII in printed strings (the cp1252 console crash), hardcoded python3, heredoc backslash mangling, Node .cmd/.bat spawns, set -e in hooks. Use when the user asks to "check for encoding issues", "scan for Windows portability", "cli hygiene", is about to ship a CLI/script change, or wants the deterministic form of the ship-loop Windows discipline. Advisory (never blocks); wire it as a gate-router gate.
user-invocable	true

CLI Hygiene

Deterministic scan for the Windows/cross-platform CLI hazards the retro corpus kept re-discovering by hand — the scanner form of ship-loop's "Windows/platform discipline" (step 3).

Scan

bash "${CLAUDE_PLUGIN_ROOT}/scripts/scan-cli-hygiene.sh"            # scan .
bash "${CLAUDE_PLUGIN_ROOT}/scripts/scan-cli-hygiene.sh" src bin   # scan paths
bash "${CLAUDE_PLUGIN_ROOT}/scripts/scan-cli-hygiene.sh" --json

Output is file:line: RULE message; the scan is advisory and always exits 0 — a wrapper (gate-router, CI) decides whether a finding blocks. Report the findings to the user and offer to fix them.

What it flags

Rule	Hazard	Fix
`NON_ASCII_OUTPUT`	non-ASCII byte in a string headed to stdout (em-dash, arrow, ✎)	crashes a cp1252 Windows console with `UnicodeEncodeError` — use ASCII, or `sys.stdout.reconfigure(encoding="utf-8")` at entry
`PYTHON3_HARDCODE`	literal `python3`	often a broken WindowsApps alias; resolve `python3`→`python`, run tooling with `PYTHONUTF8=1`
`HEREDOC_BACKSLASH`	`\n`/`\t` inside a bash heredoc	mangled across the shell boundary — write a patch file and run it, or use `printf`
`CMD_SPAWN`	spawning `.cmd`/`.bat` from Node	`EINVAL` (CVE-2024-27980) unless shelled; resolve the real binary and spawn that
`SET_E_HOOK`	`set -e` in a `hooks/` script	a probe's non-zero exit would abort the hook; use `set -uo pipefail`

Precision

Advisory line-based heuristics, tuned to under- rather than over-report:

Single-line matching — a print/spawn split across lines isn't seen.
PYTHON3_HARDCODE matches the literal python3 anywhere on a line (a comment or an error-message string counts). Treat findings as prompts to look, not as failures.
CRLF is handled (a trailing carriage return is stripped before matching).

Composition

ship-loop step 3/4: run before the review gate.
As a gate-router rule — the "CLI changed -> encoding smoke test" gate it advertises:
```
- "**/*.py" => bash <path>/scan-cli-hygiene.sh {files}
```
Runs on Windows (Git Bash) and Linux; Codex invokes the same script.

More from this repository

same repository

ship-task

fakoli/fakoli-plugins

This skill should be used AFTER code review and verification pass, when the user wants to "ship this", "ship the task", "open and merge the PR", "push, PR, wait for CI, and merge", or otherwise run the mechanical tail of a one-PR-per-task loop. It pushes the current branch, opens a PR, waits for CI to reach a terminal state, merges (squash + delete branch), syncs the base branch, and optionally runs a post-merge command (e.g. `anvil apply`). It makes NO review decisions — the human or agent gates that first.

2026-07-134

session-evals

fakoli/fakoli-plugins

Mine past coding-agent sessions (Claude Code, Codex, OpenClaw, Cursor CLI) into local-model eval suites executable via anvil-serving. Retro-first — consumes session-retro output dirs and cross-session findings themes, curates candidates into deterministic check-based evals sized for local models, emits anvil-serving-compatible eval-data suites, and runs them against any OpenAI-compatible endpoint. Use when the user asks to "create evals from my sessions", "build local-model evals", "turn this retro into evals", "which work classes can my local model handle", or wants evidence for anvil-serving routing decisions. Reads only local session logs; writes only to the eval-data root the user chooses.

2026-07-114

recall-mode-verifier

fakoli/fakoli-plugins

Generate spec-INDEPENDENT breakage probes for a change — attack it along fail-closed, malformed-input, resource-exhaustion, and state-drift axes, not by re-reading its own tests. Use before opening a PR, as anvil execute's verify-left stage, when the user asks to "recall-mode verify", "red-team this change", "what breaks this", "find failure modes", or wants an independent breakage pass that doesn't reuse the implementer's assumptions. Reports findings; does not fix.

2026-07-104

gate-check

fakoli/fakoli-plugins

Route changed file paths to the verify commands this repo requires before shipping — docs changed means docs strict build, shell changed means bash -n, CLI changed means the encoding smoke test. Use before committing/opening a PR, when the user asks "what checks do I need to run", "run the gates", "gate check", or after substantive edits in a repo with a .claude/gate-router.local.md rules file. Deterministic local gates instead of session memory; also helps AUTHOR the rules file for a new repo.

2026-07-104

handoff

fakoli/fakoli-plugins

Save or update this project's cross-session handoff note — the resume point for the next session, shared across checkouts of the same git remote and across linked worktrees. Use when the user types /handoff (optionally with a one-line summary), says "save a handoff", "note where we are for next time", "write a handoff before I clear context", or is wrapping up a session.

2026-07-104

recall

fakoli/fakoli-plugins

Show this project's saved cross-session handoff note (the resume point shared across checkouts of the same git remote and across linked worktrees). Use when the user types /recall, asks "where did we leave off?", "what's the handoff?", "what was I working on?", or "catch me up".

2026-07-104

name	cli-hygiene
description	Scan source for Windows/cross-platform CLI hazards before shipping — non-ASCII in printed strings (the cp1252 console crash), hardcoded python3, heredoc backslash mangling, Node .cmd/.bat spawns, set -e in hooks. Use when the user asks to "check for encoding issues", "scan for Windows portability", "cli hygiene", is about to ship a CLI/script change, or wants the deterministic form of the ship-loop Windows discipline. Advisory (never blocks); wire it as a gate-router gate.
user-invocable	true

CLI Hygiene

Deterministic scan for the Windows/cross-platform CLI hazards the retro corpus kept re-discovering by hand — the scanner form of ship-loop's "Windows/platform discipline" (step 3).

Scan

bash "${CLAUDE_PLUGIN_ROOT}/scripts/scan-cli-hygiene.sh"            # scan .
bash "${CLAUDE_PLUGIN_ROOT}/scripts/scan-cli-hygiene.sh" src bin   # scan paths
bash "${CLAUDE_PLUGIN_ROOT}/scripts/scan-cli-hygiene.sh" --json

What it flags

Rule	Hazard	Fix
`NON_ASCII_OUTPUT`	non-ASCII byte in a string headed to stdout (em-dash, arrow, ✎)	crashes a cp1252 Windows console with `UnicodeEncodeError` — use ASCII, or `sys.stdout.reconfigure(encoding="utf-8")` at entry
`PYTHON3_HARDCODE`	literal `python3`	often a broken WindowsApps alias; resolve `python3`→`python`, run tooling with `PYTHONUTF8=1`
`HEREDOC_BACKSLASH`	`\n`/`\t` inside a bash heredoc	mangled across the shell boundary — write a patch file and run it, or use `printf`
`CMD_SPAWN`	spawning `.cmd`/`.bat` from Node	`EINVAL` (CVE-2024-27980) unless shelled; resolve the real binary and spawn that
`SET_E_HOOK`	`set -e` in a `hooks/` script	a probe's non-zero exit would abort the hook; use `set -uo pipefail`

Precision

Advisory line-based heuristics, tuned to under- rather than over-report:

Single-line matching — a print/spawn split across lines isn't seen.
PYTHON3_HARDCODE matches the literal python3 anywhere on a line (a comment or an error-message string counts). Treat findings as prompts to look, not as failures.
CRLF is handled (a trailing carriage return is stripped before matching).

Composition

ship-loop step 3/4: run before the review gate.
As a gate-router rule — the "CLI changed -> encoding smoke test" gate it advertises:
```
- "**/*.py" => bash <path>/scan-cli-hygiene.sh {files}
```
Runs on Windows (Git Bash) and Linux; Codex invokes the same script.