ai-engineering: Skill for Claude Code

.agents/skills/ai-challenge/SKILL.md

ai-challenge is a skill for Claude Code from arcasilesgroup/ai-engineering. It costs 141 tokens per session (989 once invoked), scanned A, original, Apache-2.0.

A questioning tool that tests important claims in a written specification by checking the project files and running the commands behind those claims. It asks up to ten questions in each round.

In plain words
What is it for?
Use it to challenge technical decisions and verify claims in a specification using evidence from the repository.
Why use it?
It can expose false assumptions about file paths, behaviour, counts or code usage before the specification is approved. Each question is tied to the sentence it challenges and includes the test result.

Skill for Claude Code

Written for Claude Code: disable-model-invocation in frontmatter. Also seen: installed under .agents/ (shared by several agents).

This is arcasilesgroup/ai-engineering's own configuration. It tells Claude Code how to work on ai-engineering itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything ai-engineering configures →

Reuse

Borrowing it

Nothing to install: this file belongs to arcasilesgroup/ai-engineering. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/arcasilesgroup/ai-engineering/main/.agents/skills/ai-challenge/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/arcasilesgroup/ai-engineering

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ai-challenge

README.md
[![agentmods](https://agentmods.dev/badge/skills/arcasilesgroup/ai-engineering/ai-challenge.svg)](https://agentmods.dev/skills/arcasilesgroup/ai-engineering/ai-challenge)
Your own site
<a href="https://agentmods.dev/skills/arcasilesgroup/ai-engineering/ai-challenge"><img src="https://agentmods.dev/badge/skills/arcasilesgroup/ai-engineering/ai-challenge.svg" alt="Measured on agentmods" height="20"></a>
Per session 141 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 989 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00141 $0.00989
Opus 5 $0.00071 $0.00495
Sonnet 5 $0.00028 $0.00198
Haiku 4.5 $0.00014 $0.00099

Measured 8d ago against content hash 342c602eee8d, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

ai-challenge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/ai-challenge/SKILL.md · 84 lines

How it starts

The opening of the file, as written. The whole thing — 84 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Ask the tree, not the author

What it produces

At most ten questions per round, returned to the session, each carrying the sentence it attacks, the command that tested it, what the command printed, and its verdict. The author folds the round into the specification's ## Grill section, so the verdicts land in the document they attack; no file is written beside it.

Why it is not the section inside the spec

ai-spec requires the author to challenge their own recommendation once, and that section is worth keeping — but the questioner and the answerer are the same reader, and a reader can only reason about what they already wrote. Measured on this repository: four of twenty specs carry that section, and not one of the four contains a command or a file reference. Three claims in one of them were false, and executing them is what found it.

Steps

  1. Read only the specification and the tree. Not the plan, not the pull request, not the conversation that produced it — a challenger who reads the author's reasoning inherits it.
  2. Choose what to attack: the sentences whose truth changes a decision — a count, a path, a behaviour, a claim about another file, a "no code reads this". Do not sweep every sentence: an exhaustive pass spends the round on sentences no decision turns on, so the selection is the work.
  3. Run the command before asking the question. The sentence gets executed, not re-read: a count gets counted, a path gets opened, a behaviour gets run. Paste what came back, including when it agrees.
  4. Return at most ten findings, worst first, one question at a time. WRONG when the tree says otherwise, UNPROVEN when nothing in the tree can decide it and say which — those are different problems for the author.
  5. The author folds each finding into ## Grill and revises the attacked sentences in place. A round that found nothing checkable to attack returns that as the answer nothing checkable failed, and the section carries it.

Read the full file on GitHub · 84 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 84 lines · 141 tokens per session scan A 342c602eee8d

Subscribe to this mod's changes

ai-challenge is a skill published in the GitHub repository arcasilesgroup/ai-engineering (54 stars, last pushed 6d ago), licensed Apache-2.0. It adds 141 tokens to every session and 989 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

implementation-standards

Reference material with coding standards (defensive coding, error handling, testing patterns). Loaded on demand by the Developer sub-agent (.github/agents/developer.md); not directly invokable.

attilaszasz/sdd-pilot · 44 tokens

hotfix

Fixes an observed defect with reproducible evidence in one call: writes a short trace doc before touching code, implements the fix, and backs it with a regression test written before the fix. Production incidents are the motivating case, not a gate. When blocked, it halts by name and saves the doc for a later call to…

pe-menezes/vibeflow · 102 tokens

clarification-strategies

Reference material with ambiguity-audit patterns and critique strategies for requirements. Loaded on demand by clarify-spec; not directly invokable.

attilaszasz/sdd-pilot · 33 tokens

phoenix-goal

Turn ONE high-level, possibly-vague goal into a runnable, objective acceptance check and a verifiable backlog, then drive it to completion. The critical step is FORMALIZE — deriving an executable done-check before any code, because a goal with no objective acceptance criterion has no honest termination. This is the…

All-The-Vibes/ATV-Phoenix · 183 tokens

phoenix-ship

The final gate before declaring a task done — run the acceptance check one last time, verify the tamper-evident trace is intact, and report success only on green evidence with the proof attached. Use as the last step of any task, before merging or telling the user it's complete, or when the user says /phoenix-ship…

All-The-Vibes/ATV-Phoenix · 84 tokens

phoenix-test

Drive development and bug-fixing with tests where the test IS the objective phoenixsense gate. Write a failing test before the code, reproduce a bug with a test before fixing it, and let phoenixsense decide pass/fail — never "looks right". Use when implementing logic, fixing a bug, changing behavior, or when the user…

All-The-Vibes/ATV-Phoenix · 87 tokens