Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/medy-gribkov/arcana/api-testingnpx skills add medy-gribkov/arcana --skill api-testinggit clone --depth 1 https://github.com/medy-gribkov/arcanaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/medy-gribkov/arcana/api-testing)<a href="https://agentmods.dev/skills/medy-gribkov/arcana/api-testing"><img src="https://agentmods.dev/badge/skills/medy-gribkov/arcana/api-testing.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00047 | $0.02418 |
| Opus 5 | $0.00023 | $0.01209 |
| Sonnet 5 | $0.00009 | $0.00484 |
| Haiku 4.5 | $0.00005 | $0.00242 |
Grade A, and why
api-testing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 384 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Contract Testing with Pact
Consumer Side: Define the Contract
import { PactV3 } from '@pact-foundation/pact';
const provider = new PactV3({
consumer: 'frontend',
provider: 'user-api',
});
describe('User API', () => {
it('returns user by id', async () => {
await provider
.given('user 1 exists')
.uponReceiving('a request for user 1')
.withRequest({ method: 'GET', path: '/users/1' })
.willRespondWith({
status: 200,
headers: { 'Content-Type': 'application/json' },
body: { id: 1, name: 'Alice', email: '[email protected]' },
})
.executeTest(async (mockServer) => {
const res = await fetch(`${mockServer.url}/users/1`);
const data = await res.json();
expect(data.name).toBe('Alice');
});
});
});
Provider Side: Verify Against Published Pacts
import { Verifier } from '@pact-foundation/pact';
new Verifier({
providerBaseUrl: 'http://localhost:3000',
pactBrokerUrl: 'https://pact-broker.company.com',
provider: 'user-api',
providerVersion: process.env.GIT_SHA,
stateHandlers: {
'user 1 exists': async () => {
await db.users.create({ id: 1, name: 'Alice' });
},
},
}).verifyProvider();
BAD: Testing the provider implementation in isolation without consumer contracts. Changes break consumers silently.
GOOD: Consumers define expected request/response pairs. Provider CI verifies against all published pacts. Breaking changes fail the build.
Pact Broker Workflow
- Consumer runs tests, publishes pact to broker with
pact-broker publish. - Provider CI pulls latest pacts with
pact-broker can-i-deploy --to=production. - If verification passes, deploy. If it fails, coordinate with consumer team before fixing.
API Mocking Strategies
MSW for Network-Level Mocking
BAD: Mocking fetch at the module level. Tests diverge from production behavior.
jest.mock('node-fetch');
fetch.mockResolvedValue({ json: () => ({ id: 1 }) });
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 384 lines · 47 tokens per session scan A 44fbbc8399a5
api-testing is a skill published in the GitHub repository medy-gribkov/arcana (1 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 47 tokens to every session and 2,418 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
bailian-train-deploy
用百炼 CLI (bl) 走完"数据→微调训练→导出→部署→调用"的完整闭环,或跳过训练直接部署基座模型。支持文本模型(SFT/DPO/CPT)、音频 TTS 模型(CosyVoice)、图像生成模型(Wan2.7)和视频生成模型(Wan i2v/kf2v)微调。涵盖数据集校验/上传、创建微调任务、等待训练、导出最佳 checkpoint、创建推理部署、等待就绪、给出调用示例。当用户提到在百炼 / DashScope / 阿里云模型工作室上"训练模型""微调""fine-tune""finetune""部署模型""模型上线""把微调模型跑起来/调用""训练一个推理模型""继续预训练""LoRA/SFT/DPO…
cre-asset-management
CRE Asset Management analysis suite — 9 specialist skills for post-acquisition multifamily operations including annual budgeting, monthly variance analysis, rent collection, renewal decisions, lease-up tracking, capex execution, NOI improvement, hold/sell/refi scenario analysis, and quarterly asset review memos.
cre-retail
CRE Retail analysis suite - 8 specialist skills for U.S. retail trade-area studies, rent roll and tenant mix, lease abstraction, co-tenancy and anchor risk, CAM recovery, underwriting, financing fit, and investment committee memo writing.
cre-financing
CRE Financing analysis suite — 3 specialist skills for lender identification, quote comparison, and term sheet assembly for multifamily acquisition debt sourcing.
cre-closing
CRE Closing management suite — 2 specialist skills for closing checklist coordination and funds flow preparation for multifamily acquisitions.
aspireify
../../../../../skills/aspireify/SKILL.md.