Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add chipi/agentic-ai-homelab --skill deploy-verifygit clone --depth 1 https://github.com/chipi/agentic-ai-homelabWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/chipi/agentic-ai-homelab/deploy-verify)<a href="https://agentmods.dev/skills/chipi/agentic-ai-homelab/deploy-verify"><img src="https://agentmods.dev/badge/skills/chipi/agentic-ai-homelab/deploy-verify/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/chipi/agentic-ai-homelab/deploy-verify"><img src="https://agentmods.dev/badge/skills/chipi/agentic-ai-homelab/deploy-verify.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00136 | $0.01386 |
| Opus 5.5 | $0.00054 | $0.00554 |
| Sonnet 5.5 | $0.00027 | $0.00277 |
| Haiku 4.5 | $0.00014 | $0.00139 |
Grade A, and why
deploy-verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
deploy-verify
After every deploy on 2026-10-16/17, someone wrote a fresh verify script per service by hand.
This is that script, once, for both projects. It is a gate: expected against live,
PASS/FAIL. o11y-review is a review: patterns and counts over a window. Use both:
- the gate first;
- then
o11y-reviewfor anything the gate flags.
Run (on the mini, through host-run)
V=~/.claude/skills/deploy-verify/scripts/verify.py
R=~/.claude/skills/host-run/scripts/run.sh
$R homelab $V snapshot --project closelistening --out /tmp/cl-base.json # before the deploy
# ...deploy, then let it serve traffic for a while (10+ minutes)...
$R homelab $V compare --project closelistening --baseline /tmp/cl-base.json --release sha-ded80e0
$R homelab $V compare --project orrery --since 2026-10-17T08:21:00Z --sourcemaps
- Projects:
closelisteningandorrery. ThePROFILEStable in the script lists each one's services, scrape jobs, counters, GlitchTip projects, Langfuse key file, Umami sites and live URL. Add a project there. --since: use it when there is no baseline, i.e. the time the new version went live.--release: the image tag the deploy shipped (sha-<7>, ADR-0010).- For podcast, run from the deploy's image tag, not the workflow commit. On 2026-10-16
deploy-all ran from b0edbb9 and deployed
sha-ded80e0. - orrery's web release is
gha-<short sha>and isn't checked by this flag.
- For podcast, run from the deploy's image tag, not the workflow commit. On 2026-10-16
deploy-all ran from b0edbb9 and deployed
| Check | PASS means |
|---|---|
| logs | each service has prod lines since the deploy. Non-prod lines (dev runs) are INFO; lines with no environment label FAIL. |
| traces | each traced service has traces since the deploy, and service.version includes --release |
| metrics | every scrape job up=1; every listed counter has series over 2 days (count_over_time, not an instant query) |
| errors | no GlitchTip issue first seen since the deploy. Each new one FAILs the gate on purpose: someone has to look. Its status is shown. |
| langfuse | app traces since the deploy all carry --release. LiteLLM's own litellm-* traces are ignored. |
| umami | each site got events since the deploy, with the latest event's time. Zero events is INCONCLUSIVE while the time since the deploy is shorter than the quiet gap before it, from the site's last event to the deploy (sparse traffic: re-run compare later), and WARN once it is older. A failed Umami query is a FAIL, not "0 events" |
| sourcemaps | every live _app/immutable JS with a debugId has a stored GlitchTip bundle. Unmatched stubs under 1 KB are INFO. |
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +9 lines f55e455515f8
- 7d ago Changed e6bdb43b1ed2
- 17d ago First seen · 71 lines · 136 tokens per session scan A bbdf01737d01
deploy-verify is a skill published in the GitHub repository chipi/agentic-ai-homelab (3 stars, last pushed today), licensed MIT. It adds 136 tokens to every session and 1,386 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-18.
Other skills, from other repositories
flow-nexus-platform
Comprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challenges.
agent-resource-allocator
Agent skill for resource-allocator - invoke with $agent-resource-allocator.
cost-optimization
Optimize cloud costs across AWS, Azure, GCP, and OCI through resource rightsizing, tagging strategies, reserved instances, and spending analysis. Use when reducing cloud expenses, analyzing infrastructure costs, or implementing cost governance policies.
istio-traffic-management
Configure Istio traffic management including routing, load balancing, circuit breakers, and canary deployments. Use when implementing service mesh traffic policies, progressive delivery, or resilience patterns.
linkerd-patterns
Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, or implementing zero-trust networking with minimal overhead.
tcapi
A helper for managing Tencent Cloud resources through Tencent Cloud's command-line API tool. Tencent Cloud is a cloud-services provider offering products such as virtual servers, storage, networks, and containers.