Borrowing it
Nothing to install: this file belongs to minhoyoo-iotrust/WAIaaS. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/minhoyoo-iotrust/WAIaaS/dev/.claude/skills/agent-uat/SKILL.mdgit clone --depth 1 https://github.com/minhoyoo-iotrust/WAIaaSWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/minhoyoo-iotrust/waiaas/agent-uat)<a href="https://agentmods.dev/skills/minhoyoo-iotrust/waiaas/agent-uat"><img src="https://agentmods.dev/badge/skills/minhoyoo-iotrust/waiaas/agent-uat/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/minhoyoo-iotrust/waiaas/agent-uat"><img src="https://agentmods.dev/badge/skills/minhoyoo-iotrust/waiaas/agent-uat.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.04806 |
| Opus 5 | $0.00000 | $0.02403 |
| Sonnet 5 | $0.00000 | $0.00961 |
| Haiku 4.5 | $0.00000 | $0.00481 |
Grade A, and why
agent-uat scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s -X PUT http://localhost:3100/v1/admin/settings \ This is a copy
100% identical to agent-uat — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 384 lines — stays where its author put it; the contents beside it link to each section on GitHub.
WAIaaS Agent UAT
AI 에이전트가 마크다운 시나리오를 읽고 사용자와 인터랙티브하게 실행하여 WAIaaS 기능을 메인넷/테스트넷에서 검증하는 시스템이다.
AI agents must NEVER request the master password. Use only your session token.
masterAuth가 필요한 시나리오(지갑 CRUD 등)는 사용자에게 마스터 패스워드 직접 입력을 안내한다. 에이전트가 마스터 패스워드를 요청하거나 저장해서는 안 된다.
서브커맨드
| Command | Action |
|---|---|
/agent-uat help |
이 skill 파일의 사용법 표시 |
/agent-uat run |
모든 시나리오 목록 표시 후 선택 실행 |
/agent-uat run testnet |
testnet 카테고리 시나리오만 실행 |
/agent-uat run mainnet |
mainnet 카테고리 시나리오만 실행 |
/agent-uat run defi |
defi 카테고리 시나리오만 실행 |
/agent-uat run admin |
admin 카테고리 시나리오만 실행 |
/agent-uat run advanced |
advanced 카테고리 시나리오만 실행 |
/agent-uat run transfer |
transfer 태그가 있는 시나리오만 실행 |
/agent-uat run --network {id} |
특정 네트워크 시나리오만 실행 |
/agent-uat run --env offchain |
offchain 시나리오만 실행 (블록체인 상호작용 없음) |
/agent-uat run --env testnet |
testnet 시나리오만 실행 |
/agent-uat run --env mainnet |
mainnet 시나리오만 실행 |
/agent-uat run {scenario-id} |
특정 시나리오 ID로 실행 (예: testnet-01) |
네트워크 ID 목록
--network 옵션에 사용 가능한 네트워크 식별자:
| Network ID | 환경 | 유형 |
|---|---|---|
ethereum-mainnet |
EVM | Mainnet |
ethereum-sepolia |
EVM | Testnet |
polygon-mainnet |
EVM | Mainnet |
arbitrum-mainnet |
EVM | Mainnet |
base-mainnet |
EVM | Mainnet |
solana-mainnet |
Solana | Mainnet |
solana-devnet |
Solana | Testnet |
hyperliquid-mainnet |
Hyperliquid | Mainnet |
hyperliquid-testnet |
Hyperliquid | Testnet |
실행 프로토콜
에이전트는 아래 9단계 프로토콜을 순서대로 따른다.
Phase 0: 세션 관리 (Session Reuse & Limit)
병렬 UAT 실행 시 max_sessions_per_wallet 한도 초과를 방지하기 위해 세션을 재사용하고 한도를 임시 상향한다.
Step 0-1: 세션 한도 임시 상향
masterAuth 인증 후 max_sessions_per_wallet을 병렬 에이전트 수에 맞게 임시 상향한다:
curl -s -X PUT http://localhost:3100/v1/admin/settings \
-H 'Authorization: Bearer <master-token>' \
-H 'Content-Type: application/json' \
-d '{"max_sessions_per_wallet": 20}'
- 기존 값을 응답에서 기록해 둔다 (Phase 7에서 원복 필요)
- 병렬 에이전트 수 x 2 + 여유분을 권장 (예: 에이전트 5개 → 한도 20)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 384 lines · 0 tokens per session scan A 24fe45f29200
agent-uat is a skill published in the GitHub repository minhoyoo-iotrust/WAIaaS (0 stars, last pushed 4mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 4,806 tokens. A static security scan graded it A with 1 finding (makes network calls). It is 100% identical to agent-uat, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
web3-testing
Test smart contracts comprehensively using Hardhat and Foundry with unit tests, integration tests, and mainnet forking. Use when testing Solidity contracts, setting up blockchain test suites, or validating DeFi protocols.
building-pydantic-ai-agents
Build AI agents with Pydantic AI — tools, capabilities (including on-demand loading), structured output, streaming, testing, and multi-agent patterns. Use when the user mentions Pydantic AI, imports pydanticai, or asks to build an AI agent, add tools/capabilities, defer capability loading, stream output, define agents…
prompt-proximity-architecture
Turn an approved measurement charter, ICPs, and buyer jobs into a budget-aware prompt coverage blueprint across proximity bands, aided status, information acts, journey states, roles, locales, evidence grades, partitions, and measurement lanes. Use before prompt wording to define required, optional, and prohibited…
tevm
Build, simulate, test, fork, and debug EVM transactions in TypeScript with tevm 1.0.0-rc.151. Use for in-process EVM scripts, typed Solidity imports, lazy mainnet or OP-stack forks, direct account and storage setup, viem-compatible contract actions, Vitest EVM tests, traces, and transaction simulation.
software-test-creation
Write failing tests for a TDD slice based on acceptance criteria and codebase conventions. Use when the "red" phase of red-green-refactor requires tests that define expected behavior before implementation exists. Discovers codebase test conventions first, writes test files that compile or parse but fail because the…
verification-protocol
How to prove a hypothesis is TRUE or FALSE using Move unit tests.