Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/phj128/autoworker/testnpx skills add phj128/autoworker --skill testgit clone --depth 1 https://github.com/phj128/autoworkerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/phj128/autoworker/test)<a href="https://agentmods.dev/skills/phj128/autoworker/test"><img src="https://agentmods.dev/badge/skills/phj128/autoworker/test.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00053 | $0.00774 |
| Opus 5 | $0.00026 | $0.00387 |
| Sonnet 5 | $0.00011 | $0.00155 |
| Haiku 4.5 | $0.00005 | $0.00077 |
Grade B, and why
test scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Unrestricted tool accessmediumExcessive agency
A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.
4. **Do not ask the user to manually execute any command** — complete all verification autonomously How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
autoworker:test — Execute One Test Layer
Called by autoworker:dispatch with a target level argument. Does one thing: execute all test items for that layer from the subtask verification plan.
Execution Flow
1. Determine Target Level
- Has argument (e.g.,
autoworker:test L2) → use that level - No argument → read subtask verification plan, infer the first incomplete level
2. Read Verification Plan
Glob `subtask_*.md` (exclude subtask_template.md) →
0 found → stop, prompt to create subtask
1 found → use directly (backward compatible)
multiple → grep `status:` to filter:
- Files without status field treated as active (backward compatible)
- Exactly 1 active → use it
- 0 active → list all files + status, prompt user to choose
- >1 active → report anomaly
→ Read → extract all verification items for the target level
Each item contains:
- Specific command
- Expected output
3. Execute Verification Items One by One
For each verification item in the layer:
- Execute the verification command (long-running commands like training use
run_in_background=true, thenTaskOutputto wait for results) - Record actual output
- Compare against expected, determine pass/fail
- Do not ask the user to manually execute any command — complete all verification autonomously
Pass determination hard standard:
- Function completes expected task and returns meaningful results
- Returning empty array/empty string without error ≠ pass
- "No exception thrown" ≠ pass
4. Handle Failures
When a test fails:
- Analyze error cause, autonomously fix the bug → re-run all tests for the current layer
- Same approach fails consecutively twice → enter diagnostic mode
- After fixing code, record the fix in autoworker:checkpoint (don't just record test results — also record what code was changed)
5. Output Summary
When all pass:
L<N> tests passed:
- <item 1>: <actual output summary> PASS
- <item 2>: <actual output summary> PASS
→ Invoking autoworker:checkpoint
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 86 lines · 53 tokens per session scan B 00251892b81e
test is a skill published in the GitHub repository phj128/autoworker (17 stars, last pushed 5mo ago), licensed MIT. It adds 53 tokens to every session and 774 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
flow-next-impl-review
Carmack-level implementation review of changes via the configured backend. Use when asked to review code or a diff in a flow-next repo.
flow-next-guide
Recommend the smallest sufficient flow-next workflow from the starting state. Stateless router. Use when unsure which command or stage applies next.
flow-next-land
Autonomous PR babysitter tick. Fixes CI, resolves feedback, merges when converged, closes the spec, releases. Emits LANDVERDICT. Use when asked to land PRs.
flow-next-plan
Plan a feature into a flow-next spec with tasks in .flow/. Use when asked to plan, spec out, or break down work (fn-N ids).
flow-next-spec-completion-review
Verify that a spec's completed tasks fully implement the spec requirements. Use at spec completion before close.
flow-next-sync
Manually trigger plan-sync to update downstream task specs after implementation drift. Use when code changes outpace specs.