Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/griddynamics/rosetta/api-aqa-flow-test-case-specificationgit clone --depth 1 https://github.com/griddynamics/rosettaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-test-case-specification)<a href="https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-test-case-specification"><img src="https://agentmods.dev/badge/commands/griddynamics/rosetta/api-aqa-flow-test-case-specification.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00029 | $0.01446 |
| Opus 5 | $0.00015 | $0.00723 |
| Sonnet 5 | $0.00006 | $0.00289 |
| Haiku 4.5 | $0.00003 | $0.00145 |
Grade A, and why
api-aqa-flow-test-case-specification scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.
<api_aqa_flow_test_case_specification>
<description_and_purpose> Convert test cases into detailed, implementation-ready API test specifications using Given-When-Then format. User approval required before implementation. </description_and_purpose>
<workflow_context>
- Phase 4 of 8 in
api-aqa-flow - Input: all phase 1-3 outputs (raw data, API analysis, gap analysis)
- Output:
plans/api-aqa-{IDENTIFIER}/test-specs.mdwith Given-When-Then scenarios, file mapping, shared utilities - Prerequisite: Phase 3 complete, all user clarifications received
- HITL: explicit user approval required before Phase 5
- Required skills:
qa-knowledge(scenario_designmode + test-specs skeleton + ATC conventions),sensitive-data(redaction),qa-structure({IDENTIFIER}+ artifact path) - Recommended skills:
hitl(explicit approval) </workflow_context>
<phase_steps>
- Load all previous phase outputs
- Execute test specification authoring
- Produce test specs document
- Present for user approval
- Update state </phase_steps>
<load_inputs step="4.1">
Read completely:
plans/api-aqa-{IDENTIFIER}/raw-data.md— original test cases and patternsplans/api-aqa-{IDENTIFIER}/api-analysis.md— endpoint contractsplans/api-aqa-{IDENTIFIER}/analysis.md— clarifications and resolved gaps
</load_inputs>
<execute_authoring step="4.2" subagent="architect" role="Test specification author">
- USE SKILL
qa-knowledge(scenario_designmode) with all loaded inputs from step 4.1. This phase OWNS the output contract — the spec artifact shape isqa-knowledge's test-spec template (the skill loads its own asset) plus the file-mapping / shared-utilities / execution-order sections; the mode EMITS Given-When-Then ATC entries into them per its GWT-spec taxonomy and process. - Redact any captured credentials, tokens, PII, or credentialed URLs in the emitted spec → USE SKILL
sensitive-data. - The mode produces: test scenarios, GWT specs, file mapping, shared utilities, execution order.
</execute_authoring>
<produce_output step="4.3">
Before presenting: every item in <validation_checklist> below must be satisfied for the produced file. Items that are not yet verifiable at this step (e.g., user approval) are checked at step 4.5.
Create plans/api-aqa-{IDENTIFIER}/test-specs.md per qa-knowledge's test-spec template — it carries the full skeleton: Summary, Test Scenarios (per-endpoint ATC-NNN Given-When-Then with a worked example), Test File Mapping, Shared Utilities, Execution Order, Assumptions.
</produce_output>
<present_for_approval step="4.4">
- Present summary to user: total scenarios, priority breakdown, endpoints covered.
- Approval gate: USE SKILL
qa-knowledgeto run its shared approval gate; USE SKILLhitl. Approval = an exact token from the closed listapproved/approve/yes(case-insensitive), scoped to the presented specs — no"or equivalent"/"or similar"phrasing extends it. Comments, questions, suggestions, edits, and partial review are REVIEW, not approval. Bindings: re-present step = 4.3; full-reject revisit target = Phase 3. Treat partial approve as a change request that drops the rejected scenarios. - DO NOT PROCEED to Phase 5 without explicit approval. </present_for_approval>
<update_state step="4.5">
- GATE — before marking complete: re-run
<validation_checklist>and confirm every item is checked off — in particular that everyATC-NNNtraces to a Phase 3 source (test-specs.mdis Phase 5's contract; an untraceable ATC means Phase 5 implements unverifiable tests). ReportPhase 4 checklist: N/N items satisfiedin chat. Do NOT mark complete if any item fails. - Update
agents/TEMP/<FEATURE>/api-aqa-state.md:- Test Cases Specified: [count]
- Priority Breakdown: P0: [N], P1: [N], P2: [N], P3: [N]
- Endpoints Covered: [count]
- User Approval: [datetime + exact approval statement]
- Phase 4 completion timestamp
- Mark Phase 4 complete, Phase 5 current </update_state>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 96 lines · 29 tokens per session scan A 8ba5247b2dcc
api-aqa-flow-test-case-specification is a command published in the GitHub repository griddynamics/rosetta (342 stars, last pushed today), licensed Apache-2.0. It adds 29 tokens to every session and 1,446 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other commands, from other repositories
resolve-conflicts
Resolve merge conflicts on a GitHub PR by merging the base branch into the PR branch in an isolated git worktree, with JSON/markdown-aware conflict resolution.
react-router-client-loader
Do this in a clientLoader and use loaderData to render the component. DO NOT create mock data, new interfaces, or mock data loader functions. Instead, assume loaderData has all of the data you need to render the component.
rclone_archive_extract
Extract archives from source to destination.
rclone_completion
Output completion script for a given shell.
rclone_config_encryption_check
Check that the config file is encrypted.
rclone_config_file
Show path of configuration file in use.