Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/Generous-Corp/pulpnpx agentmods add skills/generous-corp/pulp/video-proofWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/generous-corp/pulp/video-proof)<a href="https://agentmods.dev/skills/generous-corp/pulp/video-proof"><img src="https://agentmods.dev/badge/skills/generous-corp/pulp/video-proof.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00097 | $0.11157 |
| Opus 5 | $0.00048 | $0.05579 |
| Sonnet 5 | $0.00019 | $0.02231 |
| Haiku 4.5 | $0.00010 | $0.01116 |
Grade C, and why
video-proof scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf "$tmp_home" How it starts
The opening of the file, as written. The whole thing — 1,046 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Validation video proofs
Use this skill when a screenshot is not enough to prove a UX interaction: clicking a control, opening an inspector, checking a standalone/plugin host flow, or showing an implementation next to source material. Default to still captures for static assertions; record video only when motion, timing, audio/visual state, or reviewer comprehension matters.
Rules of engagement
- Work on a feature branch or dedicated worktree until humans have reviewed the proof workflow. Do not merge generated videos or local config.
- Treat video proof capture as optional developer tooling, not a core runtime
dependency and not a normal
pulp addproject package. Prefer thepulp tool install video-proofadd-on for user-facing setup; it owns the ffmpeg/Remotion bootstrap and large or license-sensitive dependencies. Keep direct source-tree setup (npm --prefix tools/local-ci install) as the feature-branch iteration fallback. - Use
pulp tool info video-proof --jsonwhen an agent or setup script needs the machine-readable install policy. It should report a machine-scopedtool_addon,package_format: not_pulp_add, and, on this feature branch,artifact_status: source_tree_iteration. It should also reportartifact_pack_command,artifact_pack_npm_script,artifact_verify_command, andartifact_manifest_schemaso the artifact-review step is discoverable from the registry. - Use
python3 tools/local-ci/pack_video_proof_tool.py --jsonwhen the branch needs a reviewable source add-on artifact. The packer recordssha256, size, included files, npm pins, and policy flags, and it excludesnode_modules, Remotion caches, and generated videos. Follow it withpython3 tools/local-ci/pack_video_proof_tool.py --verify <manifest> --jsonbefore treating the artifact as reviewable. - Prefer short clips: 5-12 seconds is the normal range. Keep the recording focused on the window or component under test.
- Prefer
video/proof-composed.mp4for review. Keepvideo/proof.mp4as the raw debugging artifact. - Treat size as a test result. Use
--video-attachment-budget-mb 100for paid/pro GitHub issue attachment planning only when the uploader is eligible for videos above 10 MB. Otherwise use a 10 MB budget or publish a local report and link the served report instead of attaching the MP4. - For review issues that may be handled by a non-pro uploader, pass
--small-video --small-video-budget-mb 10todesktop video, or rerender withdesktop compose-video --small-video --small-video-budget-mb 10, sovideo/proof.small.mp4is available as a convenience attachment. - Never commit
tools/local-ci/config.json,tools/local-ci/node_modules/,.remotion/, or generated desktop artifact bundles.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 1,046 lines · 97 tokens per session scan C 54bc1319fce3
video-proof is a skill published in the GitHub repository Generous-Corp/pulp (16 stars, last pushed yesterday), licensed MIT. It adds 97 tokens to every session and 11,157 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
qa-test-planner
Generate comprehensive test plans, manual test cases, regression test suites, and bug reports for QA engineers. Includes Figma MCP integration for design validation.
visual-validation
Every UI change should be visually verified before it ships. Peekaboo captures pixel-accurate screenshots. The system compares before/after and flags visual regressions. No manual "looks good to me" — the machine verifies what the machine built.
design-ship
One-shot pipeline turning a claude.ai/design link into a pull request: scaffold via /ork:design-import, stories and specs via /ork:cover, browser verification via /ork:expect, then open the PR. Use when a design link should come back as a PR with no intermediate steps; if all you need is the components written to…
shaft-accessibility-testing
Use when testing web or mobile accessibility for WCAG conformance, keyboard and focus behavior, semantics, errors, or user impact.
visual-playtest
Visually inspect a local or deployed site/app in a real browser and report concrete layout, responsive, or design regressions. Use when asked to visually check UI changes, reproduce a screenshot issue, compare a page with a reference, or playtest representative visual states. Do not use for code-only review or…
argos-cli
Operate Argos visual testing from the terminal with the argos CLI — inspect builds and snapshot diffs, submit reviews, request reviewers, post comments, inspect a test's flakiness and its recurring changes, ignore flaky test changes, configure a project and its contributors, manage a team's members, invites and email…