Borrowing it
Nothing to install: this file belongs to paultyng/testagent. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/paultyng/testagent/main/.claude/skills/update-compatibility/SKILL.mdgit clone --depth 1 https://github.com/paultyng/testagentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/paultyng/testagent/update-compatibility)<a href="https://agentmods.dev/skills/paultyng/testagent/update-compatibility"><img src="https://agentmods.dev/badge/skills/paultyng/testagent/update-compatibility/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/paultyng/testagent/update-compatibility"><img src="https://agentmods.dev/badge/skills/paultyng/testagent/update-compatibility.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00122 | $0.01597 |
| Opus 5.5 | $0.00049 | $0.00639 |
| Sonnet 5.5 | $0.00024 | $0.00319 |
| Haiku 4.5 | $0.00012 | $0.00160 |
Grade A, and why
update-compatibility scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 103 lines — stays where its author put it; the contents beside it link to each section on GitHub.
update-compatibility
Refreshes one vendor's section of COMPATIBILITY.md. Replaces the per-vendor research-{claude,codex,cursor}-coverage skills that came before — shared conventions live here once; per-vendor source URLs, probing recipes, and matrix templates live under vendors/<name>/.
Vendor dispatch
The trigger phrase names the vendor. Examples:
| Phrase | Vendor arg |
|---|---|
| "research codex" / "update codex compat" / "codex drift" | codex |
| "research claude" / "sync claude compatibility" | claude |
| "research cursor" / "update cursor compat" | cursor |
| "compat drift" (vendor unclear) | ask the user |
When the vendor is unambiguous, proceed without asking. When ambiguous, ask: "Which vendor — claude, codex, or cursor?"
When to invoke
- A new upstream version is released.
task dumpcli:<vendor>exits non-zero (flag drift detected). Today:dumpcli:claudeanddumpcli:codexexist;dumpcli:cursorlands with the cursor adapter wiring.- A contributor adds a new flag or command to the vendor stub and the matrix row is missing.
- Periodic coverage check (recommended: after each upstream minor-release series).
Workflow
- Resolve the vendor argument from the trigger (or ask).
- Read
vendors/<vendor>/sources.mdfor the authoritative source URLs and local probing recipes. - Run the local probes (subcommand
--helpdumps,dumpcli:<vendor>tasks). - Fetch each documented page in
sources.md. Tolerate one retry per JS-rendered page; markTODO: sourceon a stubborn fetch and continue rather than guess. - Cross-reference against the current
## <Vendor>section inCOMPATIBILITY.md— keep unchanged rows; add new rows for new features; mark removed rows as removed (or delete if no orchestrator likely depends on them). - Emit the updated section using
vendors/<vendor>/template.mdas the skeleton. Keep the other vendors' sections inCOMPATIBILITY.mduntouched. - Run
task dumpcli:<vendor>(where available) to regenerate the contract artifact; commit both COMPATIBILITY.md and the regeneratedcompat/<vendor>.cli.txt.
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 103 lines · 122 tokens per session scan A 3e4aa9fa5f9c
update-compatibility is a skill published in the GitHub repository paultyng/testagent (7 stars, last pushed 1mo ago), licensed MIT. It adds 122 tokens to every session and 1,597 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
verification-loop
Evidence-before-assertions workflow. Use before claiming work is done, before release, and after any behavior change in scripts/skills/MCP.
vision-verifier
Use when verifying Computer Vision imports, fixtures, models, schemas, cameras, artifacts, cleanup, latency, and stated limitations with reproducible evidence.
orchestrating-adversarial-reviews
Multi-agent adversarial-verification orchestration for high-confidence conclusions. Fan-out finders, then verify every finding through a three-prism panel (exploitability / correctness / refutation) that defaults to disbelief, gate fixes behind load-bearing proof tests that catch agents who falsely claim "done/fixed"…
aitask-qa
Run QA analysis on any task — analyze changes, discover test gaps, run tests, and create follow-up test tasks.
aitask-resume
Resume an in-flight task from its gate-ledger checkpoint (programmatic re-entry surface for testing / TUI / board ops).
aitask-audit-wrappers
Audit and port aitask skill wrappers across code-agent trees, plus helper-script whitelist coverage.