fomo-qa

A fixed procedure for testing fomo-kernel as a real user in a clean, isolated environment. It walks through the product’s review and refresh routes and records evidence for the result.

In plain words
What is it for?
For preparing a fomo-kernel QA run, checking the current origin/main version, verifying required checks, preserving a replayable record, and classifying findings.
Why use it?
It prevents inconsistent test setups and makes each dogfooding run—the team using its own product for testing—repeatable and reviewable.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/atomchung/fomo-kernel/qa
Any agent
npx skills add atomchung/fomo-kernel --skill qa
Clone the repo
git clone --depth 1 https://github.com/atomchung/fomo-kernel

Made for: Claude Code, Codex.

Per session 238 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 15,866 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00238 $0.15866
Opus 5 $0.00119 $0.07933
Sonnet 5 $0.00048 $0.03173
Haiku 4.5 $0.00024 $0.01587

Measured 2d ago against content hash 81e6d93f8596, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

fomo-qa scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 10 executable files (candidate_builder.py, qa_env.sh, receipts.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

`qa_env.sh` lives in this skill's directory. Every `qa_env.sh` path below is written for Claude (`~/.claude/skills/fomo-qa/qa_env.sh`); on Codex use `~/.agents/skills/fomo-qa/qa_env.sh`, and on Antigravity `~/.gemini/con
qa/SKILL.md · 662 lines

How it starts

The opening of the file, as written. The whole thing — 662 lines — stays where its author put it; the contents beside it link to each section on GitHub.

fomo-qa

This makes "prepare a clean, consistent fomo-kernel dogfood environment" a procedure. It is a QA tool for development and maintenance, answering "I changed the engine — walking through as a real user would, is the experience right?", and it guarantees every run tests the same thing: the latest origin/main.

This is the mandatory standard path for every fomo-kernel dogfood (v1, fixed 2026-07-20) — every dogfood starts here. Do not improvise an environment on the spot.

Cross-client contract source (since 2026-07-21): docs/qa-runbook.md in the kol_collector/fomo-kernel repository (PR #275) defines what counts as a compliant QA run — seven gates (version gate / isolated root / receipt throughout / verdict+verify / archived manifest / privacy lint / findings disposition). A session missing any of them is not a QA run and its conclusions may not be cited. The seventh was added on 2026-07-27 (#417): a session passing the first six while leaving behind no replayable asset is exactly what this loop actually looked like for a year. That docs/qa-runbook.md, together with the repo-root AGENTS.md, must stay independent of this skill and of any personal registry — fomo-kernel is a public product a stranger clones on any machine, and cannot assume they have this skill. When the two disagree, the runbook wins.

What this skill is: the runbook's seven gates automated into a repeatable procedure plus the qa_env.sh tool, for ting's own maintenance of fomo-kernel. Since 2026-07-21 it is reachable through ai-harness's discovery registry, so Claude, Codex and Antigravity all call the same canonical content under the same name fomo-qa (see ai-harness/inventory/fomo-qa.json). It is not for anyone else — an external user has no such skill and needs none; they follow the public docs/qa-runbook.md above.

Why it exists: a 2026-07-19 audit found 17 of 18 worktrees behind main (the worst by 28 commits). Dogfood had been running on development worktrees each pinned to its own base — testing some past slice of the product, with no way to learn afterwards which slice. "It runs" is not "it tested the latest version". This skill blocks that mechanically (issue #250).

Its place in the eval system: this is also the execution procedure that docs/eval-design.md's evidence level 4 (human review) and observation surface 1 (content-free interaction receipts) had always lacked. A walkthrough ends by producing a ux_receipt owner verdict, turning the layer eval currently marks "pending owner dogfood" into a machine-readable annotation that accumulates. Since 2026-07-27 it produces one more thing: step 6 converts every miss into a replayable episode under evals/episodes/, so a dogfood produces a permanent regression asset rather than a one-off observation — that is what "what we get is stable enough to keep" means.

Read the full file on GitHub · 662 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 662 lines · 0 tokens per session scan B 81e6d93f8596

Subscribe to this mod's changes

fomo-qa is a skill published in the GitHub repository atomchung/fomo-kernel (9 stars, last pushed 3d ago), licensed MIT. It adds 238 tokens to every session and 15,866 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

better-accessibility

Accessibility engineering for product interfaces, from focus states and keyboard support to ARIA, forms, and screen readers. Use when building or reviewing UI components, modals, menus, forms, custom widgets, or when the user says "make this accessible" or reports keyboard or screen-reader issues. Triggers on…

hugodemenez/deltalytix · 141 tokens

better-typography

Web typography from choosing fonts to spacing, wrapping and accessibility. Use when picking or pairing typefaces, configuring variable fonts or OpenType features, setting up a type scale, checking heading hierarchy, styling text in components, truncating text, styling underlines, selection, placeholders or carets, or…

hugodemenez/deltalytix · 159 tokens

better-ui

Design engineering principles for making interfaces feel polished. Use when building UI components, reviewing frontend code, implementing animations, hover states, shadows, borders, micro-interactions, enter/exit animations, choosing or reviewing icons, or any visual detail work. Triggers on UI polish, design details…

hugodemenez/deltalytix · 99 tokens

better-writing

UX writing and interface copy, from voice and button labels to error messages and empty states. Use when writing or reviewing any user-facing text: button and link labels, form errors, placeholders, settings labels, onboarding flows, notifications, or empty states. Triggers on UX writing, microcopy, interface copy…

hugodemenez/deltalytix · 101 tokens

better-colors

OKLCH color space and color usage for web projects. Convert hex/rgb/hsl to oklch, generate palettes, check contrast, handle gamut boundaries, theme with Tailwind v4, and apply color with meaning. Triggers on oklch, color conversion, palette generation, contrast ratio, gamut, display p3, design tokens, semantic color…

hugodemenez/deltalytix · 103 tokens

better-interface

User-invoked, cross-discipline interface review that coordinates better-accessibility, better-layout, better-writing, better-typography, better-colors, and better-ui. Use when explicitly invoked for a holistic review of a screen, flow, feature, or product interface. Supports quick and full review modes. Triggers on…

hugodemenez/deltalytix · 90 tokens