Borrowing it
Nothing to install: this file belongs to greenpau/go-authcrunch. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/greenpau/go-authcrunch/main/.codex/skills/testing-and-ci/SKILL.mdgit clone --depth 1 https://github.com/greenpau/go-authcrunchWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/greenpau/go-authcrunch/testing-and-ci)<a href="https://agentmods.dev/skills/greenpau/go-authcrunch/testing-and-ci"><img src="https://agentmods.dev/badge/skills/greenpau/go-authcrunch/testing-and-ci/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/greenpau/go-authcrunch/testing-and-ci"><img src="https://agentmods.dev/badge/skills/greenpau/go-authcrunch/testing-and-ci.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00037 | $0.06790 |
| Opus 5.5 | $0.00015 | $0.02716 |
| Sonnet 5.5 | $0.00007 | $0.01358 |
| Haiku 4.5 | $0.00004 | $0.00679 |
Grade A, and why
testing-and-ci scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 559 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Testing and CI
Use openapi-generation to validate YAML/examples, generator/server units, native HTTP contracts and real Scalar browser journeys after API changes.
Scope Validation to the Change
Choose the smallest set of checks that covers the changed behavior, its
meaningful boundaries, and affected consumers. Identify that scope from the
diff and package/workflow ownership before executing validation. Keep local
feedback proportional to the change; a focused passing run does not require
an automatic full-suite or make ci-check follow-up.
- For a contained Go change, select the owning package and affected unit and
E2E cases with
make test TEST_DIR=... TEST=.... In a large package such aspkg/authn, use explicit test-name prefixes when their coverage is known. Shared APIs, helpers, configuration, and wiring also need their affected caller journeys. Prefer package-wide selection when test-level impact is uncertain. - For changes spanning packages, use
make change-test CHANGE_DRY_RUN=1to inspect impact andmake change-testwhen its package selection is suitable. Check runtime assets and indirect consumers that import analysis cannot see. - For automation, select the affected Python fixture file or test case; workflow edits also need syntax validation. For UI changes, select the affected Node tests and browser journeys. Guidance-only edits need metadata, link, and content checks, not application tests.
- Broaden only for a concrete reason: shared/global impact, unknown ownership,
a failure suggesting wider effects, a release/full reproduction, or an
explicit request. Use the full suite or
make ci-checkwhen that scope is justified, rather than as a routine completion ritual.
Preserve race detection, coverage reporting, resource guards, and relevant E2E coverage within the selected scope. Reuse passing evidence for unchanged code; rerun after further edits or unresolved failures, not merely to repeat a result. Inspect bounded summaries and failure details first; retain complete reports without dumping unrelated logs into the conversation.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago Changed · +42 lines · -19 tokens per session 0960814cdd47
- 12d ago Changed · +12 lines 0f26be674b8a
- 26d ago Changed · +11 lines a83e8688c0b0
- 28d ago Changed · +3 lines 6355614fe83f
- 29d ago Changed · +45 lines 183eb7fd6cae
- 1mo ago Changed · +9 lines 2fb20a6cbf8f
- 1mo ago Changed · +18 lines 18b4e30d6020
- 1mo ago Changed · +7 lines 26207fcc05c4
- 1mo ago Changed · -73 lines 6a26339fdb46
- 1mo ago First seen · 485 lines · 56 tokens per session scan A 9edf0845b17b
testing-and-ci is a skill published in the GitHub repository greenpau/go-authcrunch (60 stars, last pushed 10d ago), licensed Apache-2.0. It adds 37 tokens to every session and 6,790 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-13.
testing-and-ci compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| testing-and-cigreenpau/go-authcrunch | Skill | 60 | 10d ago | Apache-2.0 | A | 37 | Codex |
| e2e-testingthedaviddias/Front-End-Checklist | Skill | 75k | 6d ago | MIT | A | 38 | Claude Code, Codex |
| azure-microsoft-playwright-testing-tsmicrosoft/skills | Skill | 3.2k | yesterday | MIT | A | 53 | Claude Code |
| mirrord-chaosmetalbear-co/mirrord | Skill | 5.4k | yesterday | MIT | A | 119 | Claude Code, Codex |
| testing-and-cigreenpau/caddy-security | Skill | 2.3k | 10d ago | Apache-2.0 | A | 50 | Codex |
| playwright-cizebbern/claude-code-guide | Skill | 4.7k | 3d ago | MIT | A | 48 | Claude Code, Codex |
| azure-microsoft-playwright-testing-tsbenjaminasterA/antigravity-awesome-skills | Skill | 461 | yesterday | MIT | A | 44 | Claude Code, Codex |