Borrowing it
Nothing to install: this file belongs to arcasilesgroup/ai-engineering. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/arcasilesgroup/ai-engineering/main/.agents/skills/ai-challenge/SKILL.mdgit clone --depth 1 https://github.com/arcasilesgroup/ai-engineeringWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/arcasilesgroup/ai-engineering/ai-challenge)<a href="https://agentmods.dev/skills/arcasilesgroup/ai-engineering/ai-challenge"><img src="https://agentmods.dev/badge/skills/arcasilesgroup/ai-engineering/ai-challenge.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00141 | $0.00989 |
| Opus 5 | $0.00071 | $0.00495 |
| Sonnet 5 | $0.00028 | $0.00198 |
| Haiku 4.5 | $0.00014 | $0.00099 |
Grade A, and why
ai-challenge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 84 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Ask the tree, not the author
What it produces
At most ten questions per round, returned to the session, each carrying the sentence
it attacks, the command that tested it, what the command printed, and its verdict.
The author folds the round into the specification's ## Grill section, so the
verdicts land in the document they attack; no file is written beside it.
Why it is not the section inside the spec
ai-spec requires the author to challenge their own recommendation once, and that
section is worth keeping — but the questioner and the answerer are the same reader,
and a reader can only reason about what they already wrote. Measured on this repository: four of twenty
specs carry that section, and not one of the four contains a command or a file
reference. Three claims in one of them were false, and executing them is what found
it.
Steps
- Read only the specification and the tree. Not the plan, not the pull request, not the conversation that produced it — a challenger who reads the author's reasoning inherits it.
- Choose what to attack: the sentences whose truth changes a decision — a count, a path, a behaviour, a claim about another file, a "no code reads this". Do not sweep every sentence: an exhaustive pass spends the round on sentences no decision turns on, so the selection is the work.
- Run the command before asking the question. The sentence gets executed, not re-read: a count gets counted, a path gets opened, a behaviour gets run. Paste what came back, including when it agrees.
- Return at most ten findings, worst first, one question at a time.
WRONGwhen the tree says otherwise,UNPROVENwhen nothing in the tree can decide it and say which — those are different problems for the author. - The author folds each finding into
## Grilland revises the attacked sentences in place. A round that found nothing checkable to attack returns that as the answernothing checkable failed, and the section carries it.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 84 lines · 141 tokens per session scan A 342c602eee8d
ai-challenge is a skill published in the GitHub repository arcasilesgroup/ai-engineering (54 stars, last pushed 6d ago), licensed Apache-2.0. It adds 141 tokens to every session and 989 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
implementation-standards
Reference material with coding standards (defensive coding, error handling, testing patterns). Loaded on demand by the Developer sub-agent (.github/agents/developer.md); not directly invokable.
hotfix
Fixes an observed defect with reproducible evidence in one call: writes a short trace doc before touching code, implements the fix, and backs it with a regression test written before the fix. Production incidents are the motivating case, not a gate. When blocked, it halts by name and saves the doc for a later call to…
clarification-strategies
Reference material with ambiguity-audit patterns and critique strategies for requirements. Loaded on demand by clarify-spec; not directly invokable.
phoenix-goal
Turn ONE high-level, possibly-vague goal into a runnable, objective acceptance check and a verifiable backlog, then drive it to completion. The critical step is FORMALIZE — deriving an executable done-check before any code, because a goal with no objective acceptance criterion has no honest termination. This is the…
phoenix-ship
The final gate before declaring a task done — run the acceptance check one last time, verify the tamper-evident trace is intact, and report success only on green evidence with the proof attached. Use as the last step of any task, before merging or telling the user it's complete, or when the user says /phoenix-ship…
phoenix-test
Drive development and bug-fixing with tests where the test IS the objective phoenixsense gate. Write a failing test before the code, reproduce a bug with a test before fixing it, and let phoenixsense decide pass/fail — never "looks right". Use when implementing logic, fixing a bug, changing behavior, or when the user…