Borrowing it
Nothing to install: this file belongs to nozomi-koborinai/terradart. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/nozomi-koborinai/terradart/main/.agents/skills/terradart-agent-verify/SKILL.mdgit clone --depth 1 https://github.com/nozomi-koborinai/terradartWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nozomi-koborinai/terradart/terradart-agent-verify)<a href="https://agentmods.dev/skills/nozomi-koborinai/terradart/terradart-agent-verify"><img src="https://agentmods.dev/badge/skills/nozomi-koborinai/terradart/terradart-agent-verify/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nozomi-koborinai/terradart/terradart-agent-verify"><img src="https://agentmods.dev/badge/skills/nozomi-koborinai/terradart/terradart-agent-verify.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.00870 |
| Opus 5.5 | $0.00017 | $0.00348 |
| Sonnet 5.5 | $0.00008 | $0.00174 |
| Haiku 4.5 | $0.00004 | $0.00087 |
Grade A, and why
terradart-agent-verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 25d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 51 lines — stays where its author put it; the contents beside it link to each section on GitHub.
TerraDart agent verification
Policy and pitfalls live in AGENTS.md at the repo root. This skill is the repeatable done workflow.
Contents
When to use
- Before opening or updating a PR.
- After editing wrapper overrides, generated wrappers, examples, or agent docs.
- After a cloud-agent session claims work is finished.
Workflow
Task progress:
- 1. From the repository root, run
dart pub getif dependencies changed. - 2. Run
tool/agent_verify.shand confirm it exits 0 (agent_verify: OK). This includescheck_example_topology(strict quickstarts only) andrender_coverage_page --check(the website coverage pages must match a fresh render; on a stale page rundart tool/render_coverage_page.dartand commit it). - 3.
example_synth_gates(inside step 2) already synths all quickstarts and runsvalidateper example with the managed OpenTofuterradart engine --engine tofuresolves (terraformonPATHfor a provider the OpenTofu registry lacks —tool/validate_engine.dart— or when OpenTofu cannot be resolved);check_docs_consistencyis the text-only docs check. The full gate then runs the three migrator gates on the sametf-out(migrate_roundtrip_gatesover every quickstart,migrate_fixture_gates,migrate_moved_gates);--quickskips them, so a change to a curated factory or a quickstart needs the full gate before pushing. - 4. Report which commands ran in the PR or task summary.
Optional flags
tool/agent_verify.sh --maintainer # add wrap-init / wrap-promote e2e tests
Use --maintainer when changing wrap-init, wrap-promote, or their tests.
Ad-hoc verification pitfalls
- Never trust
cmd | tail -1 && next. A pipeline's exit status is the last command's, sotail/grep/headswallow a failingdart testand the&&chain continues. Run the command bare and check$?directly, or useagent_verify.sh(it setspipefail). - Golden refresh is a copy, not an edit. When
wrapoutput legitimately changes: Level A factory goldens (test/golden/*.factory.expected.dart.golden) take the regenerated wrapper with the 3-line banner stripped (tail -n +4); wrap fixture goldens (test/fixtures/wrap/expected_output/**) take the file verbatim, banner included. Never hand-edit golden contents to make a diff pass. - Migration manifests are generator output.
packages/terradart_migrate/lib/src/manifest/*.g.dartare written by the fivewrap --migrate-manifestlanes (agent_verify.shand CIwrap_checkfail on a stale one) — regenerate with the lane, never edit. A shape the generator cannot derive is alint-overridefinding (migrate-shape-underivable) to resolve in the override YAML or the debt ledger, not a manifest edit.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 25d ago Changed fe44f55c0801
- 27d ago Changed · -1 lines 4ccdf83464f5
- 28d ago Changed 380a28739a81
- 1mo ago Changed · -1 lines 43d016c94d4f
- 1mo ago Changed 890a0d4a55b7
- 1mo ago Changed · +1 lines da440221a6f5
- 1mo ago Changed · -2 lines 2f8e49e82ffd
- 2mo ago First seen · 54 lines · 42 tokens per session scan A e725c002ed1c
terradart-agent-verify is a skill published in the GitHub repository nozomi-koborinai/terradart (52 stars, last pushed today), licensed Apache-2.0. It adds 42 tokens to every session and 870 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
patrol-e2e-testing
Use when writing E2E/integration tests, testing native interactions like permissions or system dialogs, capturing UI regressions, or validating cross-platform behavior (Patrol 4.x).
testing
Use when writing or reviewing Flutter/Dart tests (unit, widget, golden), fixing flaky tests, adding coverage, or choosing between unit and widget tests.
flutter-mcp-toolkit-control
Drive a running Flutter app — tap, scroll, type, fill forms, hot-reload, navigate. Use when you need to interact with the UI.
mockito
Use when generating mocks, stubbing methods, verifying interactions, capturing arguments, or choosing between mocks, fakes, and real objects (Mockito).
mocktail
Use when creating mocks, stubbing methods, verifying interactions, registering fallback values, or choosing between mocks, fakes, and real objects (Mocktail).
flutter-mcp-e2e-harness
Use this skill when writing or running repeatable E2E scenarios for Flutter apps as checked-in Dart with the fluttermcpharness package (packages/harness) — build/launch the app, attach to its VM service, drive widgets (snapshot/tap/enter text) and assert without MCP; also covers the repo showcase launcher (make…