Borrowing it
Nothing to install: this file belongs to NaanyaBiz/haggle. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/NaanyaBiz/haggle/main/.claude/commands/hassfest.mdgit clone --depth 1 https://github.com/NaanyaBiz/haggleWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/naanyabiz/haggle/hassfest)<a href="https://agentmods.dev/commands/naanyabiz/haggle/hassfest"><img src="https://agentmods.dev/badge/commands/naanyabiz/haggle/hassfest/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/naanyabiz/haggle/hassfest"><img src="https://agentmods.dev/badge/commands/naanyabiz/haggle/hassfest.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00304 |
| Opus 5.5 | $0.00000 | $0.00122 |
| Sonnet 5.5 | $0.00000 | $0.00061 |
| Haiku 4.5 | $0.00000 | $0.00030 |
Grade A, and why
hassfest scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/hassfest
Validate the integration against Home Assistant's hassfest rules.
What this does
hassfest is the Home Assistant tool that validates custom integrations. It runs in CI via the official home-assistant/actions/hassfest@master GitHub Action. There are two ways to run it locally:
Option 1: Docker (recommended for ad-hoc checks)
docker run --rm \
-v "$(pwd)/custom_components:/github/workspace/custom_components:ro" \
ghcr.io/home-assistant/home-assistant:dev \
python -m script.hassfest --action validate \
--integration-path /github/workspace/custom_components/haggle
Option 2: Check CI instead
gh run list --branch $(git rev-parse --abbrev-ref HEAD) --workflow hassfest.yml --limit 5
Then follow the link to the failing check for details.
Common hassfest failures
manifest.jsonmissing a required field (check docs at developers.home-assistant.io)strings.jsonkeys not matchingtranslations/en.jsonconfig_flowkey true but noconfig_flow.pyclass- Version not semver
codeownersnot a list of GitHub handles starting with@
When to run
Run after any change to manifest.json, strings.json, translations/en.json, or config_flow.py.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 38 lines · 0 tokens per session scan A baad7dec6438
hassfest is a command published in the GitHub repository NaanyaBiz/haggle (14 stars, last pushed yesterday), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 304 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other commands, from other repositories
manufacturing-readiness
Sign off a routed board for fabrication — run kct check, the mandatory kicad-cli pcb drc --refill-zones cross-gate, and a kct export bundle at the board's fab tier — and refuse sign-off if any gate is skipped.
scan
Discover Reolink devices on the local network (UDP broadcast, 2s).
aurora
Aurora - independent community smart home orchestrator. Routes any smart home request to the right specialist skill and recommends the correct Claude model. Use this as your starting point for Home Assistant, ESPHome, Node-RED, or any IoT automation task.
embedded-test
Generate Unity tests, CMock mocks, a hardware-in-the-loop scaffold, or a coverage report.
bb-generate-testcases
A command that turns test points into executable SystemVerilog test cases, a test registry, and a script for running them. SystemVerilog is a language commonly used to describe and test digital hardware.
bb-extract-test-points
A command that extracts structured test points from MAS, verifplanseed, or verificationplan files into JSON and Markdown. The output describes checks that later tools can turn into hardware tests.