Borrowing it
Nothing to install: this file belongs to fitlab-ai/agent-infra. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/fitlab-ai/agent-infra/main/.agents/skills/entropy-check/SKILL.mdgit clone --depth 1 https://github.com/fitlab-ai/agent-infraWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/fitlab-ai/agent-infra/entropy-check)<a href="https://agentmods.dev/skills/fitlab-ai/agent-infra/entropy-check"><img src="https://agentmods.dev/badge/skills/fitlab-ai/agent-infra/entropy-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/fitlab-ai/agent-infra/entropy-check"><img src="https://agentmods.dev/badge/skills/fitlab-ai/agent-infra/entropy-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.00843 |
| Opus 5 | $0.00032 | $0.00421 |
| Sonnet 5 | $0.00013 | $0.00169 |
| Haiku 4.5 | $0.00006 | $0.00084 |
Grade A, and why
entropy-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
熵减审查
行为边界 / 关键规则
- 本技能是 agent-infra 仓库本地维护技能，不属于
update-agent-infra分发模板。 - 本技能不修改业务代码、规则、skill 或文档；只创建一份审查报告。
- 报告写入
.agents/workspace/logs/entropy-check/entropy-check-YYYYMMDD-HHMMSS.md。 - 发现项只给出证据与建议，不自动创建任务、不自动改文件。
- 不确定的边界选择写入报告的
## 人工裁决待办，不中途向用户提问。
执行步骤
1. 创建报告目录并做状态核对
创建输出目录：
mkdir -p .agents/workspace/logs/entropy-check
运行并记录以下命令，原文写入报告 ## 状态核对：
git status -s
git branch --show-current
date "+%Y-%m-%d %H:%M:%S%z" | sed 's/\([+-][0-9][0-9]\)\([0-9][0-9]\)$/\1:\2/'
2. 读取审查参考
执行审查前先读取：
reference/checklist.mdreference/report-template.md
3. 收集证据
按 checklist 收集证据，至少覆盖：
.agents/rules/issue-sync.md.agents/rules/issue-pr-commands.md.agents/rules/issue-fields.md.agents/rules/pr-sync.md.agents/rules/pr-checks-commands.md.agents/rules/create-issue.md.agents/skills/*/SKILL.mdtemplates/.agents/skills/**- 仓库源码、规则、Skill 与模板中的
TODO(compat) package.json.agents/.airc.json- 版本发布相关文档与脚本
使用 rg、find、wc -l、git status 等可复现命令收集证据，并把关键命令原文写入报告。
4. 执行语义审查
根据 reference/checklist.md 逐项判断是否存在软熵增：
- 规则职责重叠或边界漂移
SKILL.md膨胀且应拆分到reference/- over-design、死约定或重复规则
- 临时兼容 TODO 缺少删除对象、可验证条件，或删除条件已经满足
- bilingual 命名约定混用且缺少边界说明
- version 号散落导致漂移风险
每条发现必须包含证据、影响、建议和严重度。只有发版前必须处理的问题才标记为 release-blocking。
5. 写入报告
按 reference/report-template.md 创建报告：
report=".agents/workspace/logs/entropy-check/entropy-check-$(date "+%Y%m%d-%H%M%S").md"
报告必须保留结构化章节，便于发版流程引用报告路径并让维护者裁定后续任务。
6. 输出结论
输出报告路径和发现统计。若存在 release-blocking 发现，明确提示当前发版流程应先处理或由维护者裁定后继续。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 89 lines · 65 tokens per session scan A 49831de8feda
entropy-check is a skill published in the GitHub repository fitlab-ai/agent-infra (83 stars, last pushed today), licensed MIT. It adds 65 tokens to every session and 843 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cn-check
Install and run the Continue CLI (cn) to execute AI agent checks on local code changes. Use when asked to "run checks", "lint with AI", "review my changes with cn", or set up Continue CI locally.
rework-rate
Measure and interpret PR rework rate — the emerging 5th DORA metric.
review
Validate plans, execution, or PRs against wish criteria — returns SHIP / FIX-FIRST / BLOCKED with severity-tagged gaps.
review
Adversarial fresh-context review of an increment before it ships. Every finding cites path:line and is re-verified. Use when saying "review", "grill this", or "critique the implementation".
genie-orca-review
Independent, read-only review of a group, a wish, or a PR on Orca — SHIP / FIX-FIRST / BLOCKED with severity-tagged findings. Council and retro are this skill with a different input.
code-review
You are a senior code reviewer. You receive diffs via stdin.