Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/TestAny-io/testany-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/testany-io/testany-agent-skills/test-reviewer)<a href="https://agentmods.dev/commands/testany-io/testany-agent-skills/test-reviewer"><img src="https://agentmods.dev/badge/commands/testany-io/testany-agent-skills/test-reviewer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/testany-io/testany-agent-skills/test-reviewer"><img src="https://agentmods.dev/badge/commands/testany-io/testany-agent-skills/test-reviewer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.00741 |
| Opus 5.5 | $0.00012 | $0.00296 |
| Sonnet 5.5 | $0.00006 | $0.00148 |
| Haiku 4.5 | $0.00003 | $0.00074 |
Grade A, and why
test-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Test Reviewer
执行前读取 工作流执行约定:先取证再提问、按实际工具能力回退,并从本次安装位置定位资源。
启动测试门禁评审流程。检查独立测试包是否完整、可执行、与上游基线一致;在发布前模式下,同时检查执行证据与残余风险,并在通过时给出文档下游与 Testany 自动化下游建议。 评审先读取 证据、准出与复审规则。P2 不按数量阻断;缺证据不等于产品缺陷;提前门禁失败不取消独立安全检查;完成本轮评审不等于批准工件。
先区分 formal_design 与 bounded_change/amendment;有限增量使用既有有效基线及 Owner 批准,只处理受影响范围,不回补全生命周期文档。详见 ../references/document-amendments.md;完整流程只适用于正式新功能/全量准出。
使用方式
提供测试规格、测试策略,以及可选的执行摘要/缺陷清单:
$ARGUMENTS
在研发流程中的位置
Test Spec → [Test Reviewer] → 测试准出 → Runbook / Testany automation landing
审查框架
采用四道门审查:
- Gate 1 - 基线与追溯:版本、范围、覆盖映射
- Gate 2 - 覆盖与漂移:覆盖率口径、主流程、异常、边界、系统集成/兼容、非功能
- Gate 3 - 可执行性与证据设计:数据、环境、依赖、断言、分组
- Gate 4 - 执行证据与残余风险:执行结果、缺陷、豁免、发布前证据
准出门槛
- P0 = 0
- P1 = 0
- 必要证据充分;P2 不按数量阻断
必需产出
- 审查报告
- 准出证书(通过时)
- 下游 handoff 建议(通过时)
强制脚本校验
优先实际执行必要脚本;不可用时记 evidence_gap,不得冒充通过,独立人工检查继续:
python3 "$TESTANY_ENG_ROOT/scripts/trace_lint.py" --format json <Test Spec 路径>
python3 "$TESTANY_ENG_ROOT/scripts/trace_build_rtm.py" --format json <PRD 路径> <Test Strategy 路径> <Test Spec 路径>
trace-build-rtm 的 Requirement / Risk / Must-not-regress / External Behavior 矩阵,是 Gate 1 / Gate 2 的主证据来源。
请提供 Test Spec 路径开始评审。若是发布前门禁,务必同时提供执行摘要或缺陷清单。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +6 lines c34a210d745f
- 1mo ago First seen · 55 lines · 29 tokens per session scan A b4db494a7814
test-reviewer is a command published in the GitHub repository TestAny-io/testany-agent-skills (82 stars, last pushed 4d ago), licensed MIT. It adds 29 tokens to every session and 741 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
csharp-exercise-check
A command that checks a solution and returns only “Correct” or “Incorrect.”
js-exercise-check
A command that checks a JavaScript exercise solution and returns only “Correct” or “Incorrect.”
kotlin-exercise-check
A Kotlin exercise checker that reports whether a solution is correct or incorrect.
python-exercise-check
A command that checks a submitted Python exercise and reports only whether it is correct or incorrect.
swift-exercise-check
A command that checks a Swift exercise solution and reports only whether it is correct or incorrect.
modernize-transform
Transform one legacy module to the target stack — idiomatic rewrite with behavior-equivalence tests.