Borrowing it
Nothing to install: this file belongs to liuyingxuvka/FlowGuard. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/liuyingxuvka/FlowGuard/main/.agents/skills/flowguard-contract-exhaustion-mesh/SKILL.mdgit clone --depth 1 https://github.com/liuyingxuvka/FlowGuardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/liuyingxuvka/flowguard/flowguard-contract-exhaustion-mesh)<a href="https://agentmods.dev/skills/liuyingxuvka/flowguard/flowguard-contract-exhaustion-mesh"><img src="https://agentmods.dev/badge/skills/liuyingxuvka/flowguard/flowguard-contract-exhaustion-mesh/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/liuyingxuvka/flowguard/flowguard-contract-exhaustion-mesh"><img src="https://agentmods.dev/badge/skills/liuyingxuvka/flowguard/flowguard-contract-exhaustion-mesh.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00053 | $0.00670 |
| Opus 5 | $0.00026 | $0.00335 |
| Sonnet 5 | $0.00011 | $0.00134 |
| Haiku 4.5 | $0.00005 | $0.00067 |
Grade A, and why
flowguard-contract-exhaustion-mesh scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 44 lines — stays where its author put it; the contents beside it link to each section on GitHub.
FlowGuard Contract Exhaustion Mesh
Purpose
Turn an owner-declared finite boundary into canonical cases and typed evidence handoffs; never act as a global bug oracle.
Entrypoint Scope
Route id: contract_exhaustion_mesh; role: public_owner; native owner: contract_exhaustion_mesh. This standalone FlowGuard satellite skill owns canonical finite-case generation.
Local Material Routing
After positive admission, read references/contract_exhaustion_mesh_protocol.md for feeders, finite universes, oracles, receipts, and consumers.
Entrypoint Acceptance Map
Accept finite dimensions/seeds; generate cases with oracles; block unbounded claims, missing feedback, stale receipts, or missing universe items; hand evidence to its owners.
Use When
- Use for same-class, payload, transition, state-closure, PPA, BCL, product-language, expected member/candidate inventory, facade delegation, parent/child closure, no-delta, or model-scoped Cartesian coverage.
Do Not Use When
- Do not invent a boundary from prose, run tests, replace sibling routes, or claim all bugs are covered; return unclear ownership to
flowguard.
Required Workflow
- Identify the declaring owner, finite dimensions/seeds, model scope, universe, exclusions, and required consumers.
- Build a
ContractExhaustionPlan, runreview_contract_exhaustion(), and repair oracle, feedback, matrix, receipt, and backfeed gaps. - For bounded system composition, generate only owner-declared artifact/delivery variants, initial environments, finite fault profiles, malformed boundaries, and benchmark/test shards; do not regenerate joint-step schedules already explored by the canonical checker.
- Project stable case ids to Model-Test Alignment, TestMesh, ModelMesh, DevelopmentProcessFlow, and Risk Evidence Ledger.
Hard Gates
- Model-purpose gate: pre-build/change freeze task-specific failure(s)/boundary; bind candidate to native good/bad-per-failure/oracle/current evidence. Reusable types are not fixed-purpose: no mode/fallback; only FlowGuard-declared checks may support completion claims.
- Require the real FlowGuard check engine and AGENTS.md managed record; forbid fake mini-frameworks.
- Broad/full claims require a complete
ContractCoverageUniverse; reject/block/repair cases require actionable oracle feedback. - Matrix ready is not chain ready; composite acceptance remains required.
- Only explicit reuse/publication or proven cross-project use
triggers strict
risk_template_libraryclosure. - When behavior authority is finite, generate missing/mismatched intent/commitment/path, wrong-path, parallel-success, stale-proof, omitted member/candidate, opaque-relation, facade, and invalid UI-exception cases. Expected inventories come from their owners, never from the smaller observed set.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 44 lines · 53 tokens per session scan A b934b307a9fc
flowguard-contract-exhaustion-mesh is a skill published in the GitHub repository liuyingxuvka/FlowGuard (2 stars, last pushed 17d ago), licensed MIT. It adds 53 tokens to every session and 670 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
voice-agent-test-harness
Drive a fixed suite of spoken tests against a voice agent ("subject") from a co-located machine ("prober"), measure response latency / clarity / accuracy, diff against baseline, and report to the owner over Telegram.
test-harness
Generates pytest test suites with happy path, edge cases, error conditions, fixture scaffolding, mocks, async patterns. Triggers on: "generate tests", "write tests for", "test this function", "create test suite", "pytest for", "unit tests for", "mock strategy for".
surrogate-verifier
Generates structured test assertions and failure diagnostics for skill packages from a definition and task prompt. Triggers on: "verify this skill", "generate assertions", "surrogate verification", "diagnose skill failure". NOT for code review, use pr-review.
ship-workflow
Automated release pipeline: merges main, runs tests, pre-landing review, version bump, changelog, bisectable commits, and PR creation. Triggers on: "ship it", "release this", "prepare for release", "open a PR", "push and PR", "land this", "/ship-workflow".
Kafka Event-Driven Testing
Test Kafka-based event-driven systems, producer and consumer integration tests with Testcontainers, schema compatibility gates, idempotency and ordering verification, dead-letter handling, and end-to-end event flow assertions.
qa-systematic
Systematic web application QA testing with issue taxonomy, health scoring, and regression tracking. Triggers on: "QA this", "test the app", "smoke test", "run QA", "systematic test", "regression test", "full QA", "/qa-systematic".