Borrowing it
Nothing to install: this file belongs to frostney/GocciaScript. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/frostney/GocciaScript/main/.agents/skills/gocciascript-issue-validation/SKILL.mdgit clone --depth 1 https://github.com/frostney/GocciaScriptWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/frostney/gocciascript/gocciascript-issue-validation)<a href="https://agentmods.dev/skills/frostney/gocciascript/gocciascript-issue-validation"><img src="https://agentmods.dev/badge/skills/frostney/gocciascript/gocciascript-issue-validation/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/frostney/gocciascript/gocciascript-issue-validation"><img src="https://agentmods.dev/badge/skills/frostney/gocciascript/gocciascript-issue-validation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.00814 |
| Opus 5.5 | $0.00022 | $0.00326 |
| Sonnet 5.5 | $0.00011 | $0.00163 |
| Haiku 4.5 | $0.00006 | $0.00081 |
Grade A, and why
gocciascript-issue-validation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 57 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GocciaScript Issue Validation
Project-specific validation rules for GocciaScript issues. Use this skill with the generic implement workflow when the issue references test262, ECMAScript/ECMA-402 behavior, or compatibility flags.
Spec Lookup
For ECMA-262 or ECMA-402 semantics, use the pinned [email protected] server from the project MCP config under .agents/mcp/ when it is available. tc39-mcp spec-reading tools default to ECMA-262, so pass the spec explicitly for the standard you are checking:
- ECMA-262 language/core built-ins:
spec: "262" - ECMA-402 Intl behavior:
spec: "402"
- Use
spec.searchwhen the exact clause id is unknown, for examplespec.search({ spec: "402", query: "Intl.DateTimeFormat" })for Intl work. - Use
clause.getfor the relevant clause before deciding expected behavior, for exampleclause.get({ spec: "402", id: "sec-intl.datetimeformat" }). - Use
spec.crossrefswhen behavior depends on abstract operations or cross-spec references. For ECMA-402 algorithms that call ECMA-262 operations, start fromspec: "402"and setinclude_cross_spec: true. - Use
spec.difforspec.historywith the same explicitspecwhen the issue may involve recent prose drift. - Use
test262.searchto map a clause id or feature area to conformance tests. - Use
test262.getto inspect a specific conformance test when the MCP server returns one. - Use
proposal.listorproposal.getfor proposal-stage features.
Record the spec, edition, clause id, section number, and snapshot SHA when the MCP response provides one. If tc39-mcp is not available, fall back to the official TC39 sources (tc39.es/ecma262, tc39.es/ecma402) rather than guessing.
Test262 Validation
When an issue references test262 files, patterns, or categories:
- Read
docs/test262.mdbefore running the reproduction. - Use
scripts/run_test262_suite.tswithGocciaScriptLoaderBare; do not run stock test262 files directly throughGocciaRunner,GocciaTestRunner, or hand-built wrappers. - Use the pinned test262 SHA from
.github/workflows/pr.ymlor.github/workflows/ci.ymlunless the issue explicitly targets another SHA. - Build the bare loader from a clean artifact state first:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · -1 lines 3a6de0a99b95
- 11d ago Changed c9ce963b8785
- 26d ago Changed fa8e5b9fc74f
- 29d ago Changed · -2 tokens per session 62c1a7ba9df9
- 1mo ago Changed da0b05ac1916
- 1mo ago First seen · 58 lines · 58 tokens per session scan A 36cef952c81c
gocciascript-issue-validation is a skill published in the GitHub repository frostney/GocciaScript (20 stars, last pushed yesterday), licensed MIT. It adds 56 tokens to every session and 814 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
compiler-port
Port a compiler pass from TypeScript to Rust. Gathers context, plans the port, implements in a subagent with test-fix loop, then reviews.
compiler-verify
Use when you need to run all compiler checks (tests, lint, format) before committing. Detects whether TS or Rust code changed and runs the appropriate checks.
extending-personhog-test-harness
When and how to add scenarios, chaos events, and invariants to the personhog e2e test harness (rust/personhog-test-harness). Use after fixing a bug or regression in the personhog leader path (leader, router, writer, replica, coordination protocol) so the fix gets a permanent regression scenario; when adding a new…
Jasmine Testing
BDD-style JavaScript testing with Jasmine covering spies, async patterns, custom matchers, clock manipulation, and comprehensive test organization for frontend and Node.js applications.
JavaScript Testing Patterns
Modern JavaScript testing strategies with Jest, Mocha, and testing best practices covering unit testing, integration testing, mocking, async patterns, and DOM testing.
setup-web-tests
Set up Python test environment in Claude Code for web where flox is unavailable. Use when you need to run backend tests and uv sync fails due to Python version mismatch.