Borrowing it
Nothing to install: this file belongs to objectstack-ai/objectstack. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/objectstack-ai/objectstack/main/.claude/skills/checklist-author/SKILL.mdgit clone --depth 1 https://github.com/objectstack-ai/objectstackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/objectstack-ai/objectstack/checklist-author)<a href="https://agentmods.dev/skills/objectstack-ai/objectstack/checklist-author"><img src="https://agentmods.dev/badge/skills/objectstack-ai/objectstack/checklist-author/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/objectstack-ai/objectstack/checklist-author"><img src="https://agentmods.dev/badge/skills/objectstack-ai/objectstack/checklist-author.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 13 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00135 | $0.01005 |
| Opus 5.5 | $0.00054 | $0.00402 |
| Sonnet 5.5 | $0.00027 | $0.00201 |
| Haiku 4.5 | $0.00014 | $0.00101 |
Grade A, and why
checklist-author scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Checklist author —— 让测试清单保持诚实的 coverage sweep
规范方法住在 docs/qa/platform-checklist/SWEEP.md —— 先读它、照它执行;本技能
只是触发器与编排契约,不是流程的第二份拷贝。
你要产出什么
一份对 docs/qa/platform-checklist/ 的增量:areas/*.json 里新增/扩充的测试项、
对账后的 coverage.json、追加进 FOLLOW-UPS.md 的缺陷/文档漂移 —— 全部在
node scripts/check-platform-checklist.mjs 下校验为绿,并按 AGENTS.md
(worktree-first,PD#11)落在任务分支上。
编排契约 —— 只写 SWEEP 没有的
六步流程照 SWEEP.md「How to run it」执行,⛔ 这里不复述。它没有、而这一轮必须成
立的三条:
- Worktree 先行(PD#11):
git fetch origin main && git worktree add --no-track ../objectstack-<task> -b <branch> origin/main。全部编辑落在那里;派发任何 agent 之前先读清单现状。 - 只有编排者碰
coverage.json与scripts/。 hunter 一个文件都不写,writer 一 个区文件一人 —— 这是并行 agent 之间唯一的串行化依据。 - 本技能的简报是假设,源码才是真相 —— 每个测试项按 README.md「Item anatomy」
的契约写;缺 fixture 记
blocked/knownGaps,永不伪造覆盖。
缺项写成 planned 项,不写成注释
sweep 发现「定义要求、平台还没有」的能力,写成该区的 status: "planned" 项(title ·
priority · personas,since: null 或目标 release,⛔ 无 steps);注释没有 id,派发时指
不到。它是 coverage.json 的合法映射目标但⛔ 不算覆盖:只映射到它的种类仍报 UNMAPPED。
planned → active 只由一次判 pass 的运行记录兑现 —— steps/acceptance 随实现 PR 落
地,跑过才翻状态(bump revision、追 history);⛔ 代码落地就翻 = 账本开始虚报覆盖。
规模指引
一轮全量 sweep ≈ 6 个 hunter + 8 个 writer agent。范围化的问题(「X 有测试吗?」) 只在相关角度跑一个 hunter,对清单核验后只补缺的 —— 契约相同,舰队更小。
没有子代理工具时,按角度顺序跑 —— 并在交付里声明这一轮是顺序执行的。 会话里不 存在 Task/子代理工具是允许的退化路径,不是阻塞;六个角度仍要逐个走完,一个都不省。 但 SWEEP.md 的全部主张是「不同角度捕获不同的遗漏类,因为读者彼此独立」:塌缩成 一个读者后,补上的测试项依然成立,「没有别的遗漏」这个结论不再成立 —— 不声明,就 没人分得清一轮降级的 sweep 和一轮完整的 sweep。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 17d ago Changed 580d5bd8bca9
- 1mo ago Changed · +9 lines 7aac615e2d53
- 1mo ago Changed · -9 lines 6af6d5ebe3b3
- 1mo ago First seen · 63 lines · 135 tokens per session scan A 83426e7467fb
checklist-author is a skill published in the GitHub repository objectstack-ai/objectstack (75 stars, last pushed today), licensed Apache-2.0. It adds 135 tokens to every session and 1,005 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ontotect
Systematic ontology engineering for designing, constructing, reviewing, repairing, optimizing, refactoring, validating, documenting, and governing ontologies, vocabularies, taxonomies, knowledge graphs, semantic models, and mappings. Use for RDF/RDFS, OWL 2, SKOS, SHACL, SPARQL, OBO, Turtle, JSON-LD, RDF/XML…
ontology-shacl-validator
Validate ontology outputs through SHACL-oriented checks, structural issue reporting, and release-readiness notes tied to competency questions, evidence quality, and unresolved modeling risks.
qa
Exercise the delivered customer journey using real runtime or browser evidence. Use for functional acceptance testing after implementation, including failure paths.
mykg
Run mykg knowledge-graph commands inside Claude Code from one slash command /mykg. The user describes intent in natural language (extract, append, sync, resume, approve, walkthrough, parse-docs, fetch-web, query); the skill parses intent, builds the right mykg CLI command from the live --help output, confirms, runs…
exchange-recovery
A recovery workflow for Exchange servers, which are systems used for organisational email and calendars. It covers planning a restoration from backups, creating a recovery job, and checking whether the service works afterward.
demand-deliverability-assessment
Use when a user asks whether a product demand (an existing forecast or a new order) can be delivered on knowledge network supply942verify: locate the forecast, read the inventory metric, run the kitting / net-demand function, and, only after explicit user confirmation, raise the simulated replenishment action.