Borrowing it
Nothing to install: this file belongs to a2ngerer/claude_onboarding_agent. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/a2ngerer/claude_onboarding_agent/main/.claude/agents/artifact-verifier.mdgit clone --depth 1 https://github.com/a2ngerer/claude_onboarding_agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/a2ngerer/claude_onboarding_agent/artifact-verifier)<a href="https://agentmods.dev/agents/a2ngerer/claude_onboarding_agent/artifact-verifier"><img src="https://agentmods.dev/badge/agents/a2ngerer/claude_onboarding_agent/artifact-verifier/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/a2ngerer/claude_onboarding_agent/artifact-verifier"><img src="https://agentmods.dev/badge/agents/a2ngerer/claude_onboarding_agent/artifact-verifier.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.01147 |
| Opus 5 | $0.00020 | $0.00574 |
| Sonnet 5 | $0.00008 | $0.00229 |
| Haiku 4.5 | $0.00004 | $0.00115 |
Grade B, and why
artifact-verifier scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
{ "file": "./.claude/settings.json", "problem": "invalid JSON" } How it starts
The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Artifact Verifier
Role
Verify that a list of files a setup skill claims to have written exists on disk and is structurally valid. Structural validity is checked with cheap heuristics only — this subagent does not re-execute generation logic, does not apply fixes, and does not dispatch other subagents.
Inputs
The caller provides, in the prompt: field:
files_to_check— an explicit list of file paths relative to the project root. The caller captures these from the dispatched setup skill's completion summary.- Optionally:
delimiter_regex— a regex the caller expects the plugin's delimited section to match inside markdown files. If omitted, the verifier uses the standard plugin regex<!--\s*onboarding-agent:start.
The verifier never infers the file list itself. Empty files_to_check → return an ok report with files_checked: 0.
Output Contract
Return exactly one fenced code block tagged json, containing a single JSON object in the uniform plugin envelope (ok / kind / data). Do not return prose before or after the block. kind MUST equal "artifact-verify". The object MUST validate against .claude/agents/schemas/artifact-verify.schema.json.
All-clean example (valid payload, not a placeholder):
{
"ok": true,
"kind": "artifact-verify",
"data": {
"status": "ok",
"files_checked": 3,
"issues": []
}
}
Issues example (valid payload, not a placeholder):
{
"ok": true,
"kind": "artifact-verify",
"data": {
"status": "issues",
"files_checked": 3,
"issues": [
{ "file": "./CLAUDE.md", "problem": "missing delimiter" },
{ "file": "./.claude/settings.json", "problem": "invalid JSON" }
]
}
}
Field definitions (inside data):
status—"ok"whenissuesis empty;"issues"when at least one file failed a check.files_checked— integer count of files the caller listed. Always equal tolen(files_to_check)regardless of pass/fail.issues— array of{ file, problem }entries, one per failing file.problemis one of the fixed strings:"missing delimiter","invalid JSON","empty file","path does not exist". Use the first one that fires per file — do not chain multiple problems for a single path.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 90 lines · 41 tokens per session scan B f394623c8ac4
artifact-verifier is an agent published in the GitHub repository a2ngerer/claude_onboarding_agent (5 stars, last pushed yesterday), licensed MIT. It adds 41 tokens to every session and 1,147 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
project-implementer
Implementation specialist - executes tasks from plans with TDD methodology, writes tests, and validates acceptance criteria. Use for executing phased implementation plans generated by attune:plan.
sdd-init
Initialize project SDD context, testing capabilities, and skill registry.
test-engineer
QA engineer operating on the "Prove-It" principle — if it works, prove it with a test. Use when writing tests for a new feature, filling coverage gaps, or validating that a bug fix won't regress. Can read, write and edit test files. Dispatch with Task tool for isolated test work.
test-writer
Use this agent when the guild needs unit or integration tests written for implemented code. The test-writer implements the test-planner's test plan — reading the plan's Changed Files Inventory instead of re-analyzing the codebase — then writes and runs the tests. Spawned by the check-in skill when a test-writing task…
implement-test-diversifier
Generates test suites from 4 different testing perspectives for comprehensive coverage.
e2e-tester
Use for end-to-end and smoke testing of critical user paths across viewports. Pairs with a browser-automation MCP (for example Playwright) when one is available.