MockServer is a testing server and proxy that imitates APIs, records and changes network traffic, and deliberately introduces failures. It is for developers testing applications against unavailable dependencies, debugging requests, and checking how systems handle degraded services across several network protocols. The catalogue add-ons help operate, configure, and test MockServer.
Borrowing it
Nothing to install: this file belongs to mock-server/mockserver-monorepo. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/mock-server/mockserver-monorepo/master/.opencode/skills/terraform-tfvars/SKILL.mdgit clone --depth 1 https://github.com/mock-server/mockserver-monorepoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mock-server/mockserver-monorepo/terraform-tfvars)<a href="https://agentmods.dev/skills/mock-server/mockserver-monorepo/terraform-tfvars"><img src="https://agentmods.dev/badge/skills/mock-server/mockserver-monorepo/terraform-tfvars/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mock-server/mockserver-monorepo/terraform-tfvars"><img src="https://agentmods.dev/badge/skills/mock-server/mockserver-monorepo/terraform-tfvars.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00097 | $0.01387 |
| Opus 5.5 | $0.00039 | $0.00555 |
| Sonnet 5.5 | $0.00019 | $0.00277 |
| Haiku 4.5 | $0.00010 | $0.00139 |
Grade A, and why
terraform-tfvars scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 158 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Create terraform.tfvars for Buildkite Agents
The Terraform stack at terraform/buildkite-agents/ deploys Buildkite build
agents to AWS. It requires a terraform.tfvars file containing the Buildkite
agent registration token. This file is gitignored and must NEVER be
committed.
Prerequisites
- AWS CLI installed and SSO session active (
aws sso login --profile mockserver-build) - Chrome DevTools MCP configured with
--autoConnect(for Buildkite UI retrieval) - Buildkite org admin access (to view agent tokens)
Token Retrieval
The Buildkite agent token can be retrieved from two sources. Always retrieve from both and compare to ensure consistency.
Source 1: AWS SSM Parameter Store (Authoritative)
The token is stored as a SecureString in the legacy us-east-1 region:
export DYLD_LIBRARY_PATH="/opt/homebrew/opt/expat/lib${DYLD_LIBRARY_PATH:+:$DYLD_LIBRARY_PATH}"
export AWS_CA_BUNDLE="${NODE_EXTRA_CA_CERTS:-}"
aws ssm get-parameter \
--name /buildkite/buildkite/agent-token \
--region us-east-1 \
--profile mockserver-build \
--with-decryption \
--query 'Parameter.Value' \
--output text
This is the authoritative source — it's the same token the legacy CloudFormation stack uses and has been validated in production.
Source 2: Buildkite UI (via Chrome DevTools MCP)
Navigate to the Buildkite agents page and extract the token:
- Ensure the user is logged into Buildkite in Chrome
- Navigate:
navigate_page(url="https://buildkite.com/organizations/mockserver/agents") - Take a snapshot:
take_snapshot() - Look for the "Agent Token" section
- Click "Reveal Agent Token" if the token is hidden
- Extract the token value from the snapshot or via
evaluate_script()
See the browser-auth skill for detailed Chrome MCP patterns.
Token Validation
Compare both values:
- If they match: Use the token — it's verified correct
- If they differ: The SSM token is authoritative (it's what agents
currently use in production). The Buildkite UI may show a different token
if the org has multiple tokens. Verify which token is associated with the
defaultqueue. - If SSM retrieval fails: Use the Buildkite UI token, but verify with
the user that it's the correct one for the
defaultqueue.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 158 lines · 97 tokens per session scan A 945a92afe819
terraform-tfvars is a skill published in the GitHub repository mock-server/mockserver-monorepo (4,999 stars, last pushed today), licensed Apache-2.0. It adds 97 tokens to every session and 1,387 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
plano-agent-skills
Best practices for building agents and agentic applications with Plano, including configuration, routing, orchestration, guardrails, observability, and deployment.
proxy6
Skill "proxy6" from VKirill/claude-lane-stack, covering 🎯 version requirements (august 2026), usage, use this skill when, do not use this skill when and purpose.
10router-dev
A development and troubleshooting guide for 10Router, a local AI routing gateway that sends client requests to models. It covers its Next.js deployment on a network-attached storage device (NAS).
cloudflare-dns
Manage Cloudflare DNS with correct proxy (orange/grey) mode, TTL cutovers, zone backups, and scoped API tokens—avoid mail/ACME breakage and mixed proxied-record traps.
Xrayebator: your own VPN on a VPS (Xray Reality)
Use when the user needs their own VPN/proxy on a VPS to bypass regional blocks or DPI so research APIs and browsers work through a clean exit. One-script Xray VLESS+REALITY installer and client manager.
proxy-aiops
Use this skill whenever the user needs to operate a Traefik, Caddy or HAProxy reverse proxy / load balancer — a one-shot overview, routes (routers / caddy routes / frontends) with host/path matching, services and server-level upstream health, middlewares, TLS certificate inventory with an expiry sweep, traffic and 5xx…