Borrowing it
Nothing to install: this file belongs to fitlab-ai/agent-infra. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/fitlab-ai/agent-infra/main/.agents/skills/entropy-check/SKILL.mdgit clone --depth 1 https://github.com/fitlab-ai/agent-infraWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/fitlab-ai/agent-infra/entropy-check)<a href="https://agentmods.dev/skills/fitlab-ai/agent-infra/entropy-check"><img src="https://agentmods.dev/badge/skills/fitlab-ai/agent-infra/entropy-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/fitlab-ai/agent-infra/entropy-check"><img src="https://agentmods.dev/badge/skills/fitlab-ai/agent-infra/entropy-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.00861 |
| Opus 5.5 | $0.00026 | $0.00344 |
| Sonnet 5.5 | $0.00013 | $0.00172 |
| Haiku 4.5 | $0.00006 | $0.00086 |
Grade A, and why
entropy-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
熵减审查
行为边界 / 关键规则
- 本技能是 agent-infra 仓库本地维护技能，不属于
update-agent-infra分发模板。 - 本技能不修改业务代码、规则、skill 或文档；只创建一份审查报告。
- 报告写入
~/.agent-infra/reports/agent-infra/entropy-check/entropy-check-YYYYMMDD-HHMMSS.md。 - 发现项只给出证据与建议，不自动创建任务、不自动改文件。
- 不确定的边界选择写入报告的
## 人工裁决待办，不中途向用户提问。
执行步骤
1. 创建报告目录并做状态核对
创建输出目录：
mkdir -p "$HOME/.agent-infra/reports/agent-infra/entropy-check"
运行并记录以下命令，原文写入报告 ## 状态核对：
git status -s
git branch --show-current
date "+%Y-%m-%d %H:%M:%S%z" | sed 's/\([+-][0-9][0-9]\)\([0-9][0-9]\)$/\1:\2/'
2. 读取审查参考
执行审查前先读取：
reference/checklist.mdreference/report-template.md
3. 收集证据
按 checklist 收集证据，至少覆盖：
.agents/rules/issue-sync.md.agents/rules/issue-pr-commands.md.agents/rules/issue-fields.md.agents/rules/pr-sync.md.agents/rules/pr-checks-commands.md.agents/rules/create-issue.md.agents/skills/*/SKILL.mdtemplates/.agents/skills/**- 仓库源码、规则、Skill 与模板中的
TODO(compat) package.json.agents/.airc.json- 版本发布相关文档与脚本
使用 rg、find、wc -l、git status 等可复现命令收集证据，并把关键命令原文写入报告。
4. 执行语义审查
根据 reference/checklist.md 逐项判断是否存在软熵增：
- 规则职责重叠或边界漂移
SKILL.md膨胀且应拆分到reference/- over-design、死约定或重复规则
- 临时兼容 TODO 缺少删除对象、可验证条件，或删除条件已经满足
- bilingual 命名约定混用且缺少边界说明
- version 号散落导致漂移风险
每条发现必须包含证据、影响、建议和严重度。只有发版前必须处理的问题才标记为 release-blocking。
5. 写入报告
按 reference/report-template.md 创建报告：
report="$HOME/.agent-infra/reports/agent-infra/entropy-check/entropy-check-$(date "+%Y%m%d-%H%M%S").md"
报告必须保留结构化章节，便于发版流程引用报告路径并让维护者裁定后续任务。
6. 输出结论
输出报告路径和发现统计。若存在 release-blocking 发现，明确提示当前发版流程应先处理或由维护者裁定后继续。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago Changed 5148e67f708a
- 1mo ago First seen · 89 lines · 65 tokens per session scan A 49831de8feda
entropy-check is a skill published in the GitHub repository fitlab-ai/agent-infra (86 stars, last pushed yesterday), licensed MIT. It adds 65 tokens to every session and 861 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
assigned-review-chain
Submit one node result to the assigned Reviewer and finish only after a bounded pass/rework chain.
find-simplifications
Use for a periodic repo-wide sweep of qwen-code for accumulated excess surface — dead components and files, orphaned locale keys, exports nothing consumes, added-then-removed scaffolding — filing candidates on a tracking issue and landing only what a maintainer has said yes to. Repo-wide and evidence-first; every…
swarm-pr-review
Run a graph-guided, tool-augmented PR review using context packing, parallel exploration, mandatory repository-agnostic risk-family coverage with dispatch scaled to diff size and risk, independent reviewer validation, critic challenge, and metrics writeback. Use for deep pull request review with low false-positive…
agent-debug-ci
Investigate failed scheduled or nightly GitHub Actions runs on the default branch, determine whether the failure is reproducible and repository-owned, implement the smallest evidence-backed fix, validate it, and open a pull request. Use when a failed nightly CI event starts an agent, or when the standard CI or…
audit-ci
Run and analyze Elements cold CI performance profiles and propose evidence-backed build, test, lint, and dependency-graph improvements. Use whenever asked to profile or benchmark pnpm run ci, rerun ci:profile, create a CI performance audit, compare CI timings, find bottlenecks or the completion path, investigate a CI…
review
Adversarial review of an increment before it ships, by a fresh context or another model family; every finding cites path:line and is re-verified. Use for "review", "qa", "critique this".