Borrowing it
Nothing to install: this file belongs to objectstack-ai/objectstack. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/objectstack-ai/objectstack/main/.claude/skills/checklist-test/SKILL.mdgit clone --depth 1 https://github.com/objectstack-ai/objectstackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/objectstack-ai/objectstack/checklist-test)<a href="https://agentmods.dev/skills/objectstack-ai/objectstack/checklist-test"><img src="https://agentmods.dev/badge/skills/objectstack-ai/objectstack/checklist-test/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/objectstack-ai/objectstack/checklist-test"><img src="https://agentmods.dev/badge/skills/objectstack-ai/objectstack/checklist-test.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 14 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00165 | $0.04747 |
| Opus 5.5 | $0.00066 | $0.01899 |
| Sonnet 5.5 | $0.00033 | $0.00949 |
| Haiku 4.5 | $0.00016 | $0.00475 |
Grade A, and why
checklist-test scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 239 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Checklist test —— 对着活的应用执行选中的测试项
你把一个选择器解析成一组清单测试项,在隔离环境把应用拉起来,在浏览器 / API 上驱
动每一项的步骤,并产出一份运行记录。逐条款判定的方法(判定词、oracle 层级、证
据、防误报自查)是 docs/qa/platform-checklist/RUNNER.md —— 先读它、服从它;本
技能只是触发器、选择契约与隔离/并行方案,不是 runner 协议的第二份拷贝。
环境知识(启动、dist 构建模型、vendored-console 陷阱、浏览器逃生舱)在
dogfood-verification 技能 —— 也要读。你不是在重新发明怎么启动;你是在对着一次
启动执行一份具体清单。
0. 解析选择器 —— 确定性的,不许猜
永不肉眼挑测试项。问解析器:
node scripts/checklist-select.mjs <selector> --json
选择器(每次运行一个):
| selector | 跑什么 |
|---|---|
platform-core.console-login(裸 id) |
那一项 |
area:records-forms(或裸 records-forms) |
该区全部测试项 |
records-forms.json(或完整 …/areas/records-forms.json 路径) |
该区全部测试项 —— 列目录看到的文件名不带前缀也能用 |
capability:hook |
coverage.json 里映射到某个元数据种类的项 |
priority:P0 |
常备冒烟 |
surface:api |
全部 API 面测试项(便宜 —— 不需要浏览器构建) |
since:v17 |
某个 release 引入的全部项(release-sweep 过滤器) |
file:packages/plugins/plugin-approvals/src/approval-service.ts |
source[] 引用该文件的项 ——「测覆盖这个文件的一切」(带 / 或代码扩展名的裸路径也自动按 file: 解析) |
all |
整份清单 |
--json 给出可运行清单(id · priority · surface · revision)。Blocked 项默认排
除 —— 它们在现成 fixture 上跑不起来;只有要把它们带着 fixture 理由记录成
blocked 时才传 --include-blocked。把解析器报出的 revision 钉进运行记录:
判定只对它运行时所对的那个 revision 有效。
planned 项任何选择器都不返回,也没有开关让它返回:能力不存在,无 steps 可驱动、
无 oracle 可查,解析器单独列出命中项。运行记录逐项记 planned,⛔ 永不 pass / fail /
blocked / not-run,⛔ 不进标题计数;与 blocked 的分界是 fixture 债 vs 平台债。
1. 规划这一轮 —— 只构建需要的,钉住的先跑
读命中项的 surface:
- 全是
api/build/cli→ 不需要 console 构建。把框架拉起来 (objectstack dev),驱动 REST/CLI。快(分钟级)。 - 有任何
browser/mixed→ 需要 vendored console dist。它与 showcase 工作区 闭包分开构建(pnpm objectui:build,从钉住的.objectui-sha构建);它存在 之前,第一次启动对/_console/是 404(dogfood §2 —— 真实前置条件,记录它,不要 伪造 block)。给构建留预算(冷 monorepo 上 ~10–30 分钟);它占掉大头,浏览器驱动 只是分钟级。
整轮只构建一次,提前建好。
复用一棵已配好的树 —— 整轮最大的开销是环境,不是测试项。 实测同一份清单、同一 个 subject sha:复用现成树的一轮跑完了它的区;三个冷容器在给出第一条判定之前就各自 烧掉了大半预算(install、console 构建顺序、缺失的 CLI dist),合计留下约三分之二的 区没跑。默认复用已配好的树;每轮开一个冷容器,只在这一轮必须活得比派发会话 久时才值(长时间浏览器运行、dogfood)。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed 21c639f8a9cf
- 1mo ago Changed · +4 lines 5836baada1db
- 1mo ago Changed 41ba1a0aca93
- 1mo ago Changed 60d9c3a9aec0
- 1mo ago Changed ba5c26f3f930
- 1mo ago Changed · -4 lines 27abd311e4f0
- 1mo ago First seen · 239 lines · 165 tokens per session scan A 530c054ab24c
checklist-test is a skill published in the GitHub repository objectstack-ai/objectstack (75 stars, last pushed today), licensed Apache-2.0. It adds 165 tokens to every session and 4,747 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ontotect
Systematic ontology engineering for designing, constructing, reviewing, repairing, optimizing, refactoring, validating, documenting, and governing ontologies, vocabularies, taxonomies, knowledge graphs, semantic models, and mappings. Use for RDF/RDFS, OWL 2, SKOS, SHACL, SPARQL, OBO, Turtle, JSON-LD, RDF/XML…
ontology-shacl-validator
Validate ontology outputs through SHACL-oriented checks, structural issue reporting, and release-readiness notes tied to competency questions, evidence quality, and unresolved modeling risks.
qa
Exercise the delivered customer journey using real runtime or browser evidence. Use for functional acceptance testing after implementation, including failure paths.
mykg
Run mykg knowledge-graph commands inside Claude Code from one slash command /mykg. The user describes intent in natural language (extract, append, sync, resume, approve, walkthrough, parse-docs, fetch-web, query); the skill parses intent, builds the right mykg CLI command from the live --help output, confirms, runs…
exchange-recovery
A recovery workflow for Exchange servers, which are systems used for organisational email and calendars. It covers planning a restoration from backups, creating a recovery job, and checking whether the service works afterward.
demand-deliverability-assessment
Use when a user asks whether a product demand (an existing forecast or a new order) can be delivered on knowledge network supply942verify: locate the forecast, read the inventory metric, run the kitting / net-demand function, and, only after explicit user confirmation, raise the simulated replenishment action.