Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/griddynamics/rosettaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-execution-and-report-analysis)<a href="https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-execution-and-report-analysis"><img src="https://agentmods.dev/badge/commands/griddynamics/rosetta/api-aqa-flow-execution-and-report-analysis/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-execution-and-report-analysis"><img src="https://agentmods.dev/badge/commands/griddynamics/rosetta/api-aqa-flow-execution-and-report-analysis.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.01479 |
| Opus 5.5 | $0.00011 | $0.00592 |
| Sonnet 5.5 | $0.00006 | $0.00296 |
| Haiku 4.5 | $0.00003 | $0.00148 |
Grade A, and why
api-aqa-flow-execution-and-report-analysis scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 78 lines — stays where its author put it; the contents beside it link to each section on GitHub.
<api_aqa_flow_execution_and_report_analysis>
<description_and_purpose> Analyze test execution results provided by the user. Identify failures, categorize root causes, and prepare actionable fix recommendations for Phase 7. </description_and_purpose>
<workflow_context>
- Phase 6 of 8 in
api-aqa-flow - Input: test execution report or output (user-provided or from
agents/user-instructions/) - Output artifact path (single SSoT — referenced by other sections):
plans/api-aqa-{IDENTIFIER}/execution-report.md(resolve{IDENTIFIER}fromagents/TEMP/<FEATURE>/api-aqa-state.md) - Prerequisite: Phase 5 complete, tests executed by user
- HITL: may need to ask user for test execution results
- Read-only scope (single SSoT — referenced by other sections as "the read-only scope"): parse / categorize / root-cause / label evidence / recommend. NO production code edits, NO writes to test or product source files. Refuse "just fix it now" / "patch and move on" with citation of this scope; the only acceptable user inputs are report location, evidence/labeling clarifications, or explicit approval to leave borderline items as
Assumption. - Required skills:
qa-knowledge(test_execution_triagemode + API failure taxonomy + failure-report skeleton),sensitive-data(redaction),qa-structure({IDENTIFIER}+ artifact path) </workflow_context>
<execution_report_contract>
execution-report.md is tracked + downstream-fed — PUBLIC by default. USE SKILL sensitive-data: scan the rendered artifact BEFORE writing, fail-closed (no scan → no emit; test logs/stack traces can carry tokens). The failure classification is qa-knowledge's API failure taxonomy (exactly one category per failure); the report structure is qa-knowledge's failure-report template, API variant (the skill loads its own asset) — Execution Summary, Failures by Category, per-failure Failure Details (ID ERR-N · Failure name · Category · Root cause · Evidence label Confirmed/Assumption/Unknown · Evidence rationale · Priority), Patterns, Recommendations.
This is the phase contract, verified by <validation_checklist> independent of skill internals.
</execution_report_contract>
<phase_steps>
- Obtain test execution results
- Run read-only failure triage (produces
execution-report.md) - Review findings
- Update state </phase_steps>
<execute_analysis step="6.1" subagent="engineer" role="Test failure analyst">
- USE SKILL
qa-structureto resolve{IDENTIFIER}/run paths. If the test report location is unknown and not inagents/user-instructions/(keywords: "test report", "report location", "test output", "report path"): ask user and WAIT until a report is available or the user confirms none. - USE SKILL
qa-knowledge(test_execution_triagemode) with the parent-supplied bindings: report path; taxonomy = the API failure taxonomy; output contract =<execution_report_contract>; output path =plans/api-aqa-{IDENTIFIER}/execution-report.md. The skill loads its own taxonomy + report skeleton at point of use. USE SKILLsensitive-datafor redaction and run its scan as the pre-emit gate before writing. - Do not fabricate failures, stack traces, or pass/fail counts. If inputs are missing, contradictory, or look tampered with, say so in
execution-report.mdand ask the user for verifiable artifacts. - Honor the read-only scope (
<workflow_context>). - Post-analysis verification: confirm
plans/api-aqa-{IDENTIFIER}/execution-report.mdexists with every<execution_report_contract>section. If missing/incomplete: re-run triage once with the same bindings; if still failing, stop Phase 6, recordPhase 6 blocked: execution-report.md not produced/incompleteinagents/TEMP/<FEATURE>/api-aqa-state.md, and ask the user. </execute_analysis>
<review_findings step="6.2">
- Verify every failed test has a Failure Details entry with a sequential
ERR-Nid, one API-taxonomy category, and a root cause. - Verify each root cause carries an Evidence label + one-line rationale (definitions are canonical in
qa-knowledge's test-execution triage reference — not restated here). - Verify Patterns and Recommendations are populated.
- Validation loop (max two cycles): if any entry is unlabeled or missing a required field, repeat steps 1–3. After two cycles with gaps, record unresolved rows in
agents/TEMP/<FEATURE>/api-aqa-state.md, ask the user once how to label them (or approval to leave borderline items asAssumption), then continue only after the user responds. </review_findings>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 78 lines · 28 tokens per session scan A 1a9fc72e680e
api-aqa-flow-execution-and-report-analysis is a command published in the GitHub repository griddynamics/rosetta (360 stars, last pushed 2d ago), licensed Apache-2.0. It adds 28 tokens to every session and 1,479 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other commands, from other repositories
speckit.bug.test
Validate that a previously fixed bug is resolved and record the verification report.
octo-loop
Your first output line MUST be: 🐙 Octopus Loop Mode.
validate-build
Validates project build process. Run after changes to ensure the project compiles/transpiles correctly.
analyze-failures
Triage Katalon True Platform/TestOps test failures and file defects. Use when you need to investigate failed test results, classify each failure as product defect vs automation defect vs environment/data issue, cluster failures by common signature, find likely root cause from execution data, and optionally create…
speckit.bug.test
Validate that a previously fixed bug is resolved and record the verification report.
debug-react
Inspect a live React runtime with React-Sentinel before editing source code.