Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/griddynamics/rosettaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-test-case-specification)<a href="https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-test-case-specification"><img src="https://agentmods.dev/badge/commands/griddynamics/rosetta/api-aqa-flow-test-case-specification/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-test-case-specification"><img src="https://agentmods.dev/badge/commands/griddynamics/rosetta/api-aqa-flow-test-case-specification.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.01446 |
| Opus 5.5 | $0.00012 | $0.00578 |
| Sonnet 5.5 | $0.00006 | $0.00289 |
| Haiku 4.5 | $0.00003 | $0.00145 |
Grade A, and why
api-aqa-flow-test-case-specification scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.
<api_aqa_flow_test_case_specification>
<description_and_purpose> Convert test cases into detailed, implementation-ready API test specifications using Given-When-Then format. User approval required before implementation. </description_and_purpose>
<workflow_context>
- Phase 4 of 8 in
api-aqa-flow - Input: all phase 1-3 outputs (raw data, API analysis, gap analysis)
- Output:
plans/api-aqa-{IDENTIFIER}/test-specs.mdwith Given-When-Then scenarios, file mapping, shared utilities - Prerequisite: Phase 3 complete, all user clarifications received
- HITL: explicit user approval required before Phase 5
- Required skills:
qa-knowledge(scenario_designmode + test-specs skeleton + ATC conventions),sensitive-data(redaction),qa-structure({IDENTIFIER}+ artifact path) - Recommended skills:
hitl(explicit approval) </workflow_context>
<phase_steps>
- Load all previous phase outputs
- Execute test specification authoring
- Produce test specs document
- Present for user approval
- Update state </phase_steps>
<load_inputs step="4.1">
Read completely:
plans/api-aqa-{IDENTIFIER}/raw-data.md— original test cases and patternsplans/api-aqa-{IDENTIFIER}/api-analysis.md— endpoint contractsplans/api-aqa-{IDENTIFIER}/analysis.md— clarifications and resolved gaps
</load_inputs>
<execute_authoring step="4.2" subagent="architect" role="Test specification author">
- USE SKILL
qa-knowledge(scenario_designmode) with all loaded inputs from step 4.1. This phase OWNS the output contract — the spec artifact shape isqa-knowledge's test-spec template (the skill loads its own asset) plus the file-mapping / shared-utilities / execution-order sections; the mode EMITS Given-When-Then ATC entries into them per its GWT-spec taxonomy and process. - Redact any captured credentials, tokens, PII, or credentialed URLs in the emitted spec → USE SKILL
sensitive-data. - The mode produces: test scenarios, GWT specs, file mapping, shared utilities, execution order.
</execute_authoring>
<produce_output step="4.3">
Before presenting: every item in <validation_checklist> below must be satisfied for the produced file. Items that are not yet verifiable at this step (e.g., user approval) are checked at step 4.5.
Create plans/api-aqa-{IDENTIFIER}/test-specs.md per qa-knowledge's test-spec template — it carries the full skeleton: Summary, Test Scenarios (per-endpoint ATC-NNN Given-When-Then with a worked example), Test File Mapping, Shared Utilities, Execution Order, Assumptions.
</produce_output>
<present_for_approval step="4.4">
- Present summary to user: total scenarios, priority breakdown, endpoints covered.
- Approval gate: USE SKILL
qa-knowledgeto run its shared approval gate; USE SKILLhitl. Approval = an exact token from the closed listapproved/approve/yes(case-insensitive), scoped to the presented specs — no"or equivalent"/"or similar"phrasing extends it. Comments, questions, suggestions, edits, and partial review are REVIEW, not approval. Bindings: re-present step = 4.3; full-reject revisit target = Phase 3. Treat partial approve as a change request that drops the rejected scenarios. - DO NOT PROCEED to Phase 5 without explicit approval. </present_for_approval>
<update_state step="4.5">
- GATE — before marking complete: re-run
<validation_checklist>and confirm every item is checked off — in particular that everyATC-NNNtraces to a Phase 3 source (test-specs.mdis Phase 5's contract; an untraceable ATC means Phase 5 implements unverifiable tests). ReportPhase 4 checklist: N/N items satisfiedin chat. Do NOT mark complete if any item fails. - Update
agents/TEMP/<FEATURE>/api-aqa-state.md:- Test Cases Specified: [count]
- Priority Breakdown: P0: [N], P1: [N], P2: [N], P3: [N]
- Endpoints Covered: [count]
- User Approval: [datetime + exact approval statement]
- Phase 4 completion timestamp
- Mark Phase 4 complete, Phase 5 current </update_state>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 96 lines · 29 tokens per session scan A 8ba5247b2dcc
api-aqa-flow-test-case-specification is a command published in the GitHub repository griddynamics/rosetta (360 stars, last pushed yesterday), licensed Apache-2.0. It adds 29 tokens to every session and 1,446 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other commands, from other repositories
execute-task
Execute a specific task and its sub-tasks systematically following a Test-Driven Development (TDD) workflow. This command reads task specifications from .code-captain/specs/ directories and implements features with comprehensive testing, following established code standards and best practices.
spec-impl
Execute spec tasks using TDD methodology.
implement-approved-slice
Implement only the approved slice with minimal changes, then persist execution evidence in slice notes and TASKSTATE.md. The official execution path. Opt-in test-first mode via --tdd. Use when the plan and slice are approved, ambiguity is resolved and files in scope are known. Do not use during discovery or planning…
tdd
Test-driven development with observed red and green evidence.
tdd
Guide a Test-Driven Development workflow for the current task.
tdd
Canon TDD (specify, encode, fulfill) with one test at a time, approval gates, and kitchen-cleaning refactor when needed.