Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/jzl-maker/EA-SKILLWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/jzl-maker/ea-skill/verify)<a href="https://agentmods.dev/commands/jzl-maker/ea-skill/verify"><img src="https://agentmods.dev/badge/commands/jzl-maker/ea-skill/verify/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/jzl-maker/ea-skill/verify"><img src="https://agentmods.dev/badge/commands/jzl-maker/ea-skill/verify.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01264 |
| Opus 5.5 | $0.00000 | $0.00506 |
| Sonnet 5.5 | $0.00000 | $0.00253 |
| Haiku 4.5 | $0.00000 | $0.00126 |
Grade A, and why
verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 82 lines — stays where its author put it; the contents beside it link to each section on GitHub.
命令: /ea verify (步骤验证)
功能
对某个开发步骤做验证:编译 → 烧录 → J-Link 运行验证 → 串口日志 四连 + HVR 记录 + 保护区/增量审计 + commit 提议。
触发
/ea verify s<编号> # 如 /ea verify s7
步骤参数使用 /ea new 分配的 S 编号。
执行流程
-
【状态目录】
get_state_dir()→<STATE_DIR> -
【读 context】 读取
<STATE_DIR>/context.md(芯片/外设/构建入口/保护区基线) -
【更新状态】
state.md: 当前步骤 →S<N>🔄 验证中;project-spec.md步骤表同步 -
【四连执行】 加载
workflows/verify-flow.md:- 编译
build-keil→ 成功自动进烧录;失败分析编译日志请求修复 - 烧录 后端可插拔:ST-Link/CMSIS-DAP →
openocd;J-Link →--backend jlink-native(Windows 装了 SEGGER 驱动时 OpenOCD 用不了 J-Link,判据LIBUSB_ERROR_NOT_SUPPORTED) → 成功自动进 J-Link 验证 - J-Link 运行验证
jlink-debug:--regs读 PC/SP 确认固件进入 main;--rtt抓启动日志;必要时--mem读固件区内存 - 串口
serial-monitor抓业务启动日志;无串口时降级为 RTT 并在 HVR 标注 - 结果记入 HVR 的「执行记录」区段
⚠️ 任一环因环境不可达时,先走降级路径,不要直接判"验证失败" —— 那报的是 "环境没配好",却看起来像"代码有问题"。降级事实与未被覆盖的验证项都要写进 HVR。
- 编译
-
【保护区/增量审计】
python <SKILL>/tools/shared/project_guard.py --check- 与 context.md 基线比对:保护区文件有改动且无 approve 记录 → 告警并阻塞验证
- 输出改动清单 + 保护区 diff(供用户确认;关键源文件的 diff 加
--diff)
-
【git 可用性前置检查】(要用 git 出 diff 时必须先跑)
python <SKILL>/tools/shared/git_state.py --root <工程目录>- 退出 0 →
git diff可用,继续按 git 流程 - 退出 1/2 → 不要再拿
git diff --stat当改动清单:它会返回空输出, 看起来像"没有改动"。改用上一步的project_guard --check --diff基线比对
⚠️ 两种静默失效要认得:① 仓库还没有任何提交 →
git diff恒空; ② 仓库根不是工程目录(工程是某仓库的子目录)→ 在仓库根git add .会把同级工程一起提交。git_state.py会把这两种情况直接说破。 - 退出 0 →
-
【生成 HVR】
<STATE_DIR>/checkpoints/HVR-<步骤>-<序号>.md(模板templates/hvr-template.md,嵌入式四连字段内嵌) -
【输出验证清单】 待用户口述物理现象的检查点(LED/按键/波形等)
-
【提议 commit】 见下
commit 提议
━━━━━━━━━━━━━━━━━━━━━━━━━━
💡 提议 commit
建议 commit message:
[S<step>] feat: verify <步骤描述> with HVR-<序号>
待提交文件:
M <STATE_DIR>/checkpoints/HVR-<步骤>-<序号>.md
M <STATE_DIR>/state.md
M <STATE_DIR>/project-spec.md
M <本次实际改动的源文件,来自 diff>
确认提交?[y/n/edit]
━━━━━━━━━━━━━━━━━━━━━━━━━━
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed ae53b4e87d4a
- 1mo ago Changed · +16 lines 82850d0831a7
- 1mo ago Changed a70faa12deb7
- 1mo ago First seen · 66 lines · 0 tokens per session scan A ada7132980ed
verify is a command published in the GitHub repository jzl-maker/EA-SKILL (9 stars, last pushed 1mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,264 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
cortex-m
Generate Cortex-M startup code or a linker script, configure a core subsystem, decode a fault, or add DWT timing.
debug-embedded
Attach a debugger, halt and inspect a target, decode fault registers, or configure ITM, SWO, or ETM trace.
esp-debug
Help debug ESP32 crashes, hangs, and peripheral issues.
hw-bringup
Drive the hardware bring-up checkpoint ladder when something won't come up.
debug
Start GDB debug session with OpenOCD or probe-rs.
fix
Command "fix" from mantacron/manta, covering usage, instructions, step 1: choose the report, step 2: extract findings and step 3: run remediation-agent.