Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/s977043/river-review/code-php-laravelnpx skills add s977043/river-review --skill code-php-laravelgit clone --depth 1 https://github.com/s977043/river-reviewWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/s977043/river-review/code-php-laravel)<a href="https://agentmods.dev/skills/s977043/river-review/code-php-laravel"><img src="https://agentmods.dev/badge/skills/s977043/river-review/code-php-laravel.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00023 | $0.00785 |
| Opus 5 | $0.00012 | $0.00392 |
| Sonnet 5 | $0.00005 | $0.00157 |
| Haiku 4.5 | $0.00002 | $0.00078 |
Grade A, and why
Test Scaffold (Laravel/PHPUnit) scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Pattern declaration
Primary pattern: Generator Secondary patterns: Inversion Why: 仕様書からPHPUnit形式のテスト足場を生成するジェネレーターであり、仕様の抜けをテスト観点から逆照射する。
Role
あなたは熟練したLaravel開発者です。 仕様書の内容を満たすための「PHPUnit形式のテストコード(足場)」を作成してください。
Non-goals / 扱わないこと
- アプリケーションロジックの実装や最適化方針は示さない。
- E2E や統合テストの網羅は対象外で、PHPUnit の単体/機能テストの足場に限定する。
Pre-execution Gate / 実行前ゲート
このスキルは以下の条件がすべて満たされない限りNO_REVIEWを返す。
- 差分に仕様書(
docs/**/*.mdまたはspecs/**/*.md)が含まれている - 仕様書にPHP/Laravelアプリケーションに関する記述がある
- inputContextにfullFileが含まれている
ゲート不成立時の出力: NO_REVIEW: code-php-laravel — 対象となるLaravel仕様が差分に含まれていない
False-positive guards / 抑制条件
- 仕様に記載のない要件を推測で追加しない。
- 既に対象外と明示された領域(例: 外部サービス連携の実装詳細)への指摘は行わない。
Output Format
PHP (PHPUnit) のコードブロック。
Tests\TestCase を継承したクラスを作成し、public function test_... で始まるメソッドを定義します。
各テストメソッドの中に、検証すべき内容をコメントで // TODO: ... として記述してください。
Example
<?php
namespace Tests\Feature;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Tests\TestCase;
class UserRegistrationTest extends TestCase
{
use RefreshDatabase;
public function test_user_can_register_with_valid_data(): void
{
// TODO: Arrange user data
// TODO: Act call registration route
// TODO: Assert database has user
// TODO: Assert response status
}
public function test_email_is_required(): void
{
// TODO: Arrange data without email
// TODO: Act & Assert validation error
}
}
Constraints
- Pest形式ではなく、クラスベースのPHPUnit標準構文を使用する
- メソッド名はスネークケース(例:
test_user_can_login)を推奨する - Laravelの機能(
RefreshDatabaseトレイトや Factory など)が想定される場合は、適切にuseする
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 90 lines · 23 tokens per session scan A df238a618c23
Test Scaffold (Laravel/PHPUnit) is a skill published in the GitHub repository s977043/river-review (3 stars, last pushed today), licensed MIT. It adds 23 tokens to every session and 785 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
pest-testing
Use this skill for Pest PHP testing in Laravel projects only. Trigger whenever any test is being written, edited, fixed, or refactored — including fixing tests that broke after a code change, adding assertions, converting PHPUnit to Pest, adding datasets, and TDD workflows. Always activate when the user asks how to…
craft-pest
Testing Craft CMS 5 plugins and modules with Pest — test isolation, database safety, and the markhuot/craft-pest-core harness. ALWAYS load when writing, running, fixing, or reviewing tests for a Craft plugin or module, and whenever a suite touches a real Craft install. Covers why rollback is opt-in, tests/Pest.php +…
pest-control
Enforces PHPUnit-only testing in this project. Activates when writing tests, reviewing test files, or when any Pest syntax appears (it(), test(), describe(), uses(), expect() chains, beforeEach/afterEach hooks). Scans for and eliminates all Pest references from code, config, and documentation.
php-testing
Use when writing/configuring tests on a non-Laravel PHP project — PHPUnit vs Pest. Do NOT use for Laravel test helpers or quality tooling (php-quality-tooling).
laravel-testing
Test strategy for a layered Laravel application — which test style fits each layer, hand-written fakes over mocks, real-database tests for Query Classes and Repositories, pure tests for Value Objects, and feature tests that assert authorization, payload shape and query counts. Use when writing or reviewing Laravel…
php-expert
Expert-level PHP development with PHP 8+, Laravel, Composer, and modern best practices.