Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add iampantherr/SecureContext --skill developer-skill-execution-outcome-reporting-v0-18-1git clone --depth 1 https://github.com/iampantherr/SecureContextWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/iampantherr/securecontext/developer-skill-execution-outcome-reporting-v0-18-1)<a href="https://agentmods.dev/skills/iampantherr/securecontext/developer-skill-execution-outcome-reporting-v0-18-1"><img src="https://agentmods.dev/badge/skills/iampantherr/securecontext/developer-skill-execution-outcome-reporting-v0-18-1/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/iampantherr/securecontext/developer-skill-execution-outcome-reporting-v0-18-1"><img src="https://agentmods.dev/badge/skills/iampantherr/securecontext/developer-skill-execution-outcome-reporting-v0-18-1.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.00668 |
| Opus 5 | $0.00021 | $0.00334 |
| Sonnet 5 | $0.00008 | $0.00134 |
| Haiku 4.5 | $0.00004 | $0.00067 |
Grade A, and why
developer-skill-execution-outcome-reporting-v0-18-1 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
SKILL EXECUTION + OUTCOME REPORTING (v0.18.1)
(Extracted from roles.json deepPrompt for the developer role during the v0.19.0 role/skill split. Original content preserved verbatim. Edit freely; the mutator will propose improvements based on skill_runs telemetry once this skill is invoked by an agent.)
When you're assigned to validate or exercise a skill, follow this protocol:
-
Read the skill body: call zc_skill_show({skill_id}) (or look up via zc_search if you only have the name). The body is markdown — treat it as a procedural plan.
-
Run each fixture: skills declare fixtures in frontmatter, each with input and expected. For each fixture, mentally evaluate what the skill body would produce given the input, and compare to expected.
-
Report each result via zc_record_skill_outcome:
zc_record_skill_outcome({
skill_id: "<full id>",
fixture_id: "<from frontmatter>",
inputs: { /* the fixture input */ },
status: "succeeded" | "failed" | "timeout",
outcome_score: 0.0, // 0.0..1.0, optional but recommended
failure_trace: "<reason>", // REQUIRED when status==='failed'
duration_ms: 42 // optional
})
This atomically writes a skill_run row AND, on failure, an outcome row. Failures auto-trigger the L1 mutation hook — if the same skill fails ≥3 times within the failure window, the mutator agent will automatically receive a task to propose improvements. You do not need to do anything else to surface the failure; the framework handles the rest.
-
Broadcast a summary via zc_broadcast({type:'STATUS', state:'skill-run-complete', summary:''}) so the orchestrator sees the outcome.
-
DO NOT patch the skill yourself. The mutator agent is responsible for proposing new versions; you only report what happened. If you have a strong opinion, include it in the broadcast summary — the operator reads broadcasts when reviewing pending promotions.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 50 lines · 42 tokens per session scan A c080b44b4fb9
developer-skill-execution-outcome-reporting-v0-18-1 is a skill published in the GitHub repository iampantherr/SecureContext (8 stars, last pushed 4d ago), licensed MIT. It adds 42 tokens to every session and 668 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-08.
Other skills, from other repositories
rehearsal
Test a deliverable on a zero-context reader before it ships. Use before shipping any document, guide, kit, or handoff meant to work without you, and before calling a deliverable done in goal Phase 5.
tdd
Test-Driven Development methodology and patterns. Triggers on: "tdd", "test first", "write tests", "failing test", "red green refactor", "test driven", "test before", "coverage", "unit test", "feature test", "widget test". Provides TDD patterns for Laravel (PHPUnit/Pest), Flutter, and Vue (Vitest/Jest).
live-preview
Mid-build visual verification loop. Takes screenshots of components during construction, not just after. Catches visual regressions and invisible features before they compound. Requires Playwright or similar screenshot tool.
brooks-sweep
Full-sweep mode: runs a unified analysis across all quality dimensions — code decay, architecture, tech debt, and test quality — then applies fixes directly to the codebase. Safe changes are auto-applied; risky changes are confirmed before execution. Drawing on twelve classic engineering books. Triggers when: user…
api-testing
HTTP API testing for TypeScript (Supertest) and Python (httpx, pytest). Test REST APIs, GraphQL, request/response validation, authentication, and error handling.
bun-test-mocking
Use for mock functions in Bun tests, spyOn, mock.module, implementations, and test doubles.