Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add inflexa-ai/inflexa --skill verifygit clone --depth 1 https://github.com/inflexa-ai/inflexaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/inflexa-ai/inflexa/verify)<a href="https://agentmods.dev/skills/inflexa-ai/inflexa/verify"><img src="https://agentmods.dev/badge/skills/inflexa-ai/inflexa/verify/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/inflexa-ai/inflexa/verify"><img src="https://agentmods.dev/badge/skills/inflexa-ai/inflexa/verify.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00057 | $0.00644 |
| Opus 5 | $0.00028 | $0.00322 |
| Sonnet 5 | $0.00011 | $0.00129 |
| Haiku 4.5 | $0.00006 | $0.00064 |
Grade A, and why
verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 45 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Verifying @inflexa-ai/harness at the package boundary
The harness is a library: its surface is the npm package export, not a CLI or server. The embedding CLI consumes the published harness, so an uncommitted harness change is only observable by importing the freshly built package.
Recipe that works
- Build:
cd harness && npm run build(tsc →dist/), thenbun link. - Postgres (this machine uses podman, not Docker Desktop):
podman run -d --name verify-pg -e POSTGRES_USER=cortex -e POSTGRES_PASSWORD=dev \ -e POSTGRES_DB=cortex -p 127.0.0.1:5599:5432 pgvector/pgvector:pg18 podman exec verify-pg pg_isready -U cortex # poll until ready (~3s) - Scratch consumer in the session scratchpad:
package.jsonwith"type": "module"and depsneverthrow+zod(match harness majors), thenbun link @inflexa-ai/harness && bun install. Run scripts with node (harness runtime is Node; bun is test-only). - Import ONLY from
@inflexa-ai/harness(the barrel). Useful exports:createPool,initCortexState(pool),runAgent,defineTool,passthroughStep,makeLocalAuth, plus whatever seam is under test.
Gotchas
createPooltakesportas a string and requiressslMode: "disable"for a local container — default config path expects SSL.- A fake
AgentChatmust return neverthrowokAsync({message, finishReason})and SHOULD honor thesignalargument (if (signal?.aborted) throw signal.reason) — the real AI SDK provider does, and abort-path behavior is wrong without it (chat wires noisFatalLoopError; cancellation exits via the provider call). - Session shape:
{identity:{user}, scope:{kind:"analysis", analysisId, threadId}, provenance:{agentId, callPath:[agentId]}, auth: makeLocalAuth()}. - Spawned helper processes exit fast — guard
child.exitCode !== nullbefore awaiting itsexitevent, or the await never settles (Node exit code 13). TRUNCATE cortex_*tables between runs for idempotent assertions.- Cross-process claims (polling gateways, ledgers) deserve a real second process: spawn a sibling node script with its own pool.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 45 lines · 57 tokens per session scan A 12eead8cfc83
verify is a skill published in the GitHub repository inflexa-ai/inflexa (33 stars, last pushed yesterday), licensed Apache-2.0. It adds 57 tokens to every session and 644 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-09.
Other skills, from other repositories
methylkit-database-mode-configuration
Use when when analyzing DNA methylation data from bisulfite sequencing (RRBS, target-capture, or whole-genome) and the dataset is too large to fit comfortably in memory, or when you need to process multiple large samples sequentially without reloading data.
dna-methylation-file-format-handling
Use when you have CpG methylation call files (from Bismark or MethylDackel) and need to load them into R for differential methylation analysis, but anticipate memory constraints or want to avoid loading the entire dataset into memory.
biosymphony-structure-factory
Use when planning structural biology campaigns, binder-design triage, model comparison, structure mapping, RunPod or cloud GPU stage contracts, or Symphony or Linear task packs for long-running biological agent work.
binder-lane-round
Plan and run study-shaped protein-binder rounds with interchangeable toolchains, execution profiles, license gates, output checks, and result boundaries.
alphafold
Skill for protein structure prediction and analysis with AlphaFold. Use this skill whenever a user wants to predict or fetch a protein 3D structure, download structures from the AlphaFold Database (AFDB), run ColabFold for novel proteins, parse pLDDT confidence scores or PAE (predicted aligned error) from AlphaFold…
esm2
Skill for working with ESM2 protein language models from Meta FAIR. Use this skill whenever the user wants to generate protein embeddings or representations, score variant effects or predict mutation fitness, run contact prediction, or use ESMFold for structure prediction. Also trigger when the user mentions ESM2…