Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add NITISH-R-G/hackerrank-orchestrate-skills --skill orchestrate-security-auditorgit clone --depth 1 https://github.com/NITISH-R-G/hackerrank-orchestrate-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nitish-r-g/hackerrank-orchestrate-skills/orchestrate-security-auditor)<a href="https://agentmods.dev/skills/nitish-r-g/hackerrank-orchestrate-skills/orchestrate-security-auditor"><img src="https://agentmods.dev/badge/skills/nitish-r-g/hackerrank-orchestrate-skills/orchestrate-security-auditor/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nitish-r-g/hackerrank-orchestrate-skills/orchestrate-security-auditor"><img src="https://agentmods.dev/badge/skills/nitish-r-g/hackerrank-orchestrate-skills/orchestrate-security-auditor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.00707 |
| Opus 5 | $0.00024 | $0.00353 |
| Sonnet 5 | $0.00010 | $0.00141 |
| Haiku 4.5 | $0.00005 | $0.00071 |
Grade A, and why
orchestrate-security-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 61 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Orchestrate: Security Auditor
Evidence tier: first-hand build (August 2026). Grounded in a completed Orchestrate submission that was audited to destruction — 48 logged defects, 9 measured-and-rejected optimisations, 17 certification scripts. Every number below was measured on that system. Nothing here claims access to HackerRank's internal scoring.
The rule
Every hostile input must produce a valid output row. A crash is a lost row; a swallowed exception is a silent wrong answer.
The attack surface, with what each one found
Regex denial of service. An unbounded quantifier on a domain-label pattern took 40.3 seconds on a single 40 KB message. Bounded to the RFC 1035 limit of 63 octets: 0.29s, a 139× improvement, output hash unchanged. Bound every quantifier with a real standard, not a guess.
Prompt injection. A rule engine is structurally immune when message text never enters a decision-making prompt. If any component does put user text in a prompt — an arbitration step, a re-ranker — that component is your injection surface, and you should be able to name it.
Unicode evasion. Homoglyph, fullwidth, zero-width, RTL override, combining marks, punycode, emoji-splitting, leetspeak, letter-spacing. Each must be neutralised for lexicon matching only — never let de-obfuscation corrupt user-visible output.
A real trap: a de-obfuscation fix that collapsed "Share the O T P now" into
"SharetheOTPnow" destroyed the word boundaries the credential pattern needed.
The fix disabled the match it existed to enable.
CSV/formula injection. If attacker text can reach an output cell beginning =,
+, -, or @, a spreadsheet will execute it. Templated reason strings avoid this
by construction.
Path traversal. A media id of ../../../etc/passwd must not resolve outside the
dataset directory.
Malformed media. Missing, empty, corrupt, unsupported format, wrong MIME, wrong extension — all must yield a valid row.
The checklist
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 61 lines · 48 tokens per session scan A 9399f305a298
orchestrate-security-auditor is a skill published in the GitHub repository NITISH-R-G/hackerrank-orchestrate-skills (3 stars, last pushed 29d ago), licensed MIT. It adds 48 tokens to every session and 707 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
test-router
A testing skill that chooses which checks to run based on the type, scope, and risk of a change.
dev-testing
A testing guide that defines when to use unit, integration, API, and end-to-end tests. Unit tests check small pieces of code, while end-to-end tests check a full user flow.
release-verification
A release-verification checklist for software versions and packages. It covers changelogs, tests, packaging, installation smoke checks, version-control actions, publishing, and checks after release.
host-contract-verification
A verification procedure for the rules between a host system and its hooks, command-line tools, startup scripts, workspace checks, visible responses, and fallback connections to MCP servers.
api-verification
An API verification workflow that creates both an .http request file and a .cjs JavaScript file, then runs an automation script to test them. An API is an interface through which software exchanges requests and responses.
consumer-validation-engineering
A validation workflow for checking a software package across separate repositories. It covers SDKs, command-line tools, frameworks, and shared packages using both linked source code and the packaged artifact users install.