fold: Skill for Claude Code

.claude/skills/conformance/SKILL.md

conformance is a skill for Claude Code from fold-run/fold. It costs 52 tokens per session (581 once invoked), scanned A, original, Apache-2.0.

A guide for running and maintaining a pinned conformance test suite. Conformance tests check whether a system follows a defined protocol or standard; here, the suite checks the fold gateway against the official MCP tests.

In plain words
What is it for?
Use it to run the 40-check suite, compare gateway behavior with the upstream service, investigate failures such as streaming or error handling, and update the pinned versions when needed.
Why use it?
It helps distinguish a gateway defect from a changed upstream test or fixture when a check fails. It also keeps the locally tested versions deliberately fixed until they are intentionally updated.

Skill for Claude Code

Written for Claude Code: installed under .claude/. Also seen: mentions CLAUDE.md.

This is fold-run/fold's own configuration. It tells Claude Code how to work on fold itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything fold configures →

Reuse

Borrowing it

Nothing to install: this file belongs to fold-run/fold. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/fold-run/fold/main/.claude/skills/conformance/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/fold-run/fold

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for conformance

README.md
[![agentmods](https://agentmods.dev/badge/skills/fold-run/fold/conformance/github.svg)](https://agentmods.dev/skills/fold-run/fold/conformance)
Your own site
<a href="https://agentmods.dev/skills/fold-run/fold/conformance"><img src="https://agentmods.dev/badge/skills/fold-run/fold/conformance/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for conformance

Your own site · 80×15
<a href="https://agentmods.dev/skills/fold-run/fold/conformance"><img src="https://agentmods.dev/badge/skills/fold-run/fold/conformance.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 52 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 581 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00052 $0.00581
Opus 5.5 $0.00021 $0.00232
Sonnet 5.5 $0.00010 $0.00116
Haiku 4.5 $0.00005 $0.00058

Measured 2mo ago against content hash eb2aec452c26, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

conformance scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/conformance/SKILL.md · 47 lines

How it starts

The opening of the file, as written. The whole thing — 47 lines — stays where its author put it; the contents beside it link to each section on GitHub.

fold conformance suite

make conformance runs the official MCP conformance suite through the gateway fronting the conformance repo's everything-server in passthrough mode. CI gates merges on 40/40 checks. Requires go, node/npm/npx, git.

The pin lives in scripts/conformance.sh:

  • CONFORMANCE_COMMIT — conformance repo commit (server fixture)
  • CONFORMANCE_PKG — npm package version (the checker)

The scheduled drift workflow overrides these to main/@latest to catch upstream movement early; the pin itself is bumped deliberately.

Debugging a failure

  1. Reproduce locally: make conformance. Note which check fails.
  2. First question: did the gateway stop being invisible? Run the same scenario against the upstream directly (the script starts it on UPSTREAM_PORT, default 3901; gateway on 3902) and diff the behavior.
    • Differs through the gateway only → a fold bug. Usual suspects: response buffering/rewriting that federation doesn't require, namespacing applied in passthrough mode (it must not be), SSE stream handling, or a minted error replacing a pass-through error.
    • Same failure hitting the upstream directly → the suite or fixture moved; this is a pin/drift issue, not a fold bug.
  3. Environment failures (ports busy, npx cache, node missing) look like hangs — check wait_for timeouts in the script output before suspecting the gateway.

Bumping the pin (deliberate, never drive-by)

  1. Test the target first without editing anything: CONFORMANCE_COMMIT=<sha> CONFORMANCE_PKG=@modelcontextprotocol/conformance@<ver> make conformance
  2. If the check count changed (e.g. new checks beyond 40), read the new checks and decide: does fold pass them, or does a gap need closing first? A gap that stays open belongs in README "Not implemented".
  3. Edit both pin variables in scripts/conformance.sh together, update the 40/40 count in CLAUDE.md/CI docs if it changed, and run the full suite once more on the edited script.
  4. The bump gets its own commit with the reason (drift workflow finding, new spec feature, etc.) — per-step approval before committing.

Read the full file on GitHub · 47 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 47 lines · 52 tokens per session scan A eb2aec452c26

Subscribe to this mod's changes

conformance is a skill published in the GitHub repository fold-run/fold (1 stars, last pushed 12d ago), licensed Apache-2.0. It adds 52 tokens to every session and 581 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

conformance compared with skills from other repositories

conformance next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
conformancefold-run/foldSkill112d agoApache-2.0A52Claude Code
pi-loop-forensicsdimetron/pi-goSkill2223d agoMITA65Claude Code, Codex
nightly-session-watchdimetron/pi-goSkill2223d agoMITA78Claude Code, Codex
tui-render-debugdimetron/pi-goSkill2223d agoMITA33Claude Code, Codex
extension-uploadagenvoy/AgenvoySkill52615d agoAGPL-3.0A63Claude Code, Codex
kessoku-dimazrean/kessokuSkill1433d agoMITA52Claude Code, Codex
config-loader-helperpilinux/gorestSkill50616d agoMITA25Claude Code, Codex