Borrowing it
Nothing to install: this file belongs to pymc-labs/decision-hub. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/pymc-labs/decision-hub/main/.claude/commands/test-login-and-upload.mdgit clone --depth 1 https://github.com/pymc-labs/decision-hubWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/pymc-labs/decision-hub/test-login-and-upload)<a href="https://agentmods.dev/commands/pymc-labs/decision-hub/test-login-and-upload"><img src="https://agentmods.dev/badge/commands/pymc-labs/decision-hub/test-login-and-upload/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/pymc-labs/decision-hub/test-login-and-upload"><img src="https://agentmods.dev/badge/commands/pymc-labs/decision-hub/test-login-and-upload.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00767 |
| Opus 5 | $0.00000 | $0.00383 |
| Sonnet 5 | $0.00000 | $0.00153 |
| Haiku 4.5 | $0.00000 | $0.00077 |
Grade B, and why
test-login-and-upload scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Enumerates other installed skillsmediumAgent snooping
Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.
Verify the symlink exists: `ls -la ~/.codex/skills/e2e-test-skill` How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
End-to-end test of the CLI on the dev environment. Run each step sequentially — stop and report if any step fails.
All CLI commands use: DHUB_ENV=dev uv run --package dhub-cli dhub <command>
Test Skill
Create this skill in the scratchpad directory before publishing:
Directory: <scratchpad>/e2e-test-skill/
SKILL.md:
---
name: e2e-test-skill
description: A simple test skill for end-to-end testing
---
# E2E Test Skill
This skill prints "Hello from e2e-test-skill!" and exits.
src/main.py:
print("Hello from e2e-test-skill!")
Steps
1. Logout
DHUB_ENV=dev uv run --package dhub-cli dhub logout
Expected: Logged out.
2. Login
DHUB_ENV=dev uv run --package dhub-cli dhub login
This triggers the GitHub device flow. Print the code and URL, then wait for the user to complete authentication (timeout 5 min). Expected: Authenticated as @<username>
3. Publish test skill
DHUB_ENV=dev uv run --package dhub-cli dhub publish pymc-labs/e2e-test-skill <scratchpad>/e2e-test-skill
Expected: Published: pymc-labs/[email protected] (Grade A)
4. List skills
DHUB_ENV=dev uv run --package dhub-cli dhub list
Expected: Table includes pymc-labs/e2e-test-skill at version 0.1.0
5. Search for the skill
DHUB_ENV=dev uv run --package dhub-cli dhub ask "I am looking for a simple test skill"
Expected: Output mentions pymc-labs/e2e-test-skill or its description. If the skill is not found in the results, stop and report failure.
6. Install for codex
DHUB_ENV=dev uv run --package dhub-cli dhub install pymc-labs/e2e-test-skill --agent codex
Expected output mentions:
- Installed to
~/.dhub/skills/pymc-labs/e2e-test-skill - Linked to codex at
~/.codex/skills/e2e-test-skill
Verify the symlink exists: ls -la ~/.codex/skills/e2e-test-skill
7. Uninstall
DHUB_ENV=dev uv run --package dhub-cli dhub uninstall pymc-labs/e2e-test-skill
Expected: Uninstalled pymc-labs/e2e-test-skill and Removed symlinks from: codex
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 85 lines · 0 tokens per session scan B 8a41cb5a98cf
test-login-and-upload is a command published in the GitHub repository pymc-labs/decision-hub (100 stars, last pushed 28d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 767 tokens. A static security scan graded it B with 1 finding (enumerates other installed skills). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
playwright-test-heal
Run all my tests and fix the failing ones.
paul:verify
Guide manual user acceptance testing of recently built features.
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
ui-snapshot.template
This prompt was authored for Claude-style slash workflows. In Codex runtime, adapt tool calls as follows.
laravel-playwright
E2E Playwright patterns; use the laravel:e2e-playwright skill exactly as written.
qa
Smoke or browser-walk a running app. Report only. Do not implement. Do not merge.