Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/griddynamics/rosetta/api-aqa-flow-test-correctiongit clone --depth 1 https://github.com/griddynamics/rosettaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-test-correction)<a href="https://agentmods.dev/commands/griddynamics/rosetta/api-aqa-flow-test-correction"><img src="https://agentmods.dev/badge/commands/griddynamics/rosetta/api-aqa-flow-test-correction.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00025 | $0.01825 |
| Opus 5 | $0.00013 | $0.00912 |
| Sonnet 5 | $0.00005 | $0.00365 |
| Haiku 4.5 | $0.00003 | $0.00183 |
Grade A, and why
api-aqa-flow-test-correction scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.
<api_aqa_flow_test_correction>
<description_and_purpose> Fix identified API test failures based on the Phase 6 execution report. Prepares proposed changes, requires explicit user approval before applying, then applies them incrementally with lint checks and hands re-testing back to the user. </description_and_purpose>
<workflow_context>
- Phase 7 of 8 in
api-aqa-flow - Input: execution report from Phase 6 (
plans/api-aqa-{IDENTIFIER}/execution-report.md; resolve{IDENTIFIER}fromagents/TEMP/<FEATURE>/api-aqa-state.md) - Output: corrected test code, ready for re-testing
- Prerequisite: Phase 6 complete
- HITL: explicit user approval required before applying any change (a domain-specific specialization of
hitl) - In-scope file set (single SSoT): test files + shared test-utility files only. Writes outside this set are refused and escalated.
- Required skills:
qa-knowledge(correctionmode — proposed-change block + approval gate + correction discipline),qa-structure(run paths +api-aqa-state.md) - Recommended skills:
coding(authors the proposed/applied edits),debugging(root-cause alignment),hitl(explicit approval) </workflow_context>
<correction_contract>
The phase OWNS the iteration cap and the escalation contract. The proposed-change approval block is qa-knowledge's shared proposed-change template (the skill loads its own asset at step 7.1) — present one block per change BEFORE any write. Flow parameters for the template: change-type enum = assertion-fix | auth-fix | data-setup | request-shape | wait-strategy | other; root-cause reference = execution-report entry id (e.g. ERR-3); state file = agents/TEMP/<FEATURE>/api-aqa-state.md; on retry-cap, loop back to Phase 6. Verified by <validation_checklist> independent of skill internals.
</correction_contract>
<phase_steps>
- Prepare proposed corrections (step 7.1 — preparation-only)
- Present changes for approval (step 7.2)
- Apply approved changes (step 7.3)
- Update state (step 7.4) </phase_steps>
<execute_corrections step="7.1" subagent="engineer" role="Test correction engineer"> Preparation-only: nothing in this block modifies workspace files until step 7.3 after explicit approval in 7.2. "Preparation-only" means proposed edits paired with before/after evidence — no writes to test or product source files.
- USE SKILL
qa-structureto resolve run paths/api-aqa-state.md. USE SKILLdebuggingto align each proposed edit with a confirmed Phase 6 root cause (no symptom-only fixes). - USE SKILL
qa-knowledge(correctionmode) and USE SKILLcodingto author each proposed edit (preparation-only — before/after evidence, no writes). The present → approve → apply discipline is owned by this phase:<present_for_approval>(7.2) +<apply_changes>(7.3). Bindings grouped by owner: proposed-change source =plans/api-aqa-{IDENTIFIER}/execution-report.md; proposed-change template + state file + iteration cap + loop target =<correction_contract>; in-scope file set =<workflow_context>; approval-token set = step 7.2. - Produce one Proposed Change record per fix per the
<correction_contract>template, citing the matching execution-report entry id (e.g.ERR-3). Do NOT apply anything yet. </execute_corrections>
<present_for_approval step="7.2">
- Present all proposed changes with before/after code per the template.
- Approval gate: USE SKILL
qa-knowledgeto run its shared approval gate; USE SKILLhitl. Approval = an exact token from the closed listapproved/approve/yes(case-insensitive), scoped to the named changes — no"or equivalent"/"or similar"phrasing extends it. Comments, questions, suggestions, edits, and partial review are REVIEW, not approval. Partial approval applies only to named changes/hunks; re-present changed proposals (re-present step = 7.2); full rejection returns to Phase 6. </present_for_approval>
<apply_changes step="7.3">
- Apply approved changes one at a time (or in named approved batches).
- Validate linting/format after each change. On lint failure: revert that change (never leave the file broken), re-prepare a corrected version, and re-present that single change via
<present_for_approval>. - Verify each applied change addresses its root cause by cross-referencing it to the matching entry in
plans/api-aqa-{IDENTIFIER}/execution-report.md(cite the entry id, e.g.ERR-3). On root-cause mismatch: return to step 7.1 with a note inagents/TEMP/<FEATURE>/api-aqa-state.md; do not leave unmapped changes applied. - Max retries: apply the
<correction_contract>iteration cap — on the 3rd failed cycle for the same change, stop, recordPhase 7 blocked: in-phase apply retry cap reachedinapi-aqa-state.md, escalate to the user. </apply_changes>
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 88 lines · 25 tokens per session scan A 5775bd89636a
api-aqa-flow-test-correction is a command published in the GitHub repository griddynamics/rosetta (342 stars, last pushed today), licensed Apache-2.0. It adds 25 tokens to every session and 1,825 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other commands, from other repositories
resolve-conflicts
Resolve merge conflicts on a GitHub PR by merging the base branch into the PR branch in an isolated git worktree, with JSON/markdown-aware conflict resolution.
xpoz-best-practices
Reference docs for Xpoz query syntax, pagination, field selection, platform tools, and authentication. Usage: /xpoz-best-practices.
align
Verify spec-vs-spec alignment and brevity across the intent tree. This is NOT QA — QA checks code against a spec; alignment checks whether specs are consistent with their ancestors and internally tight against the Brevity Contract. The aligner runs three passes per walk.
deploy-check
Pre-flight verification before pushing to main. Reproduces the CI gates locally so the push doesn't fail in production.
validate-fix
Validate a proposed React fix with React-Sentinel assertions or replay checks.
rclone_mkdir
Make the path if it doesn't already exist.