Borrowing it
Nothing to install: this file belongs to sachinshelke/codevira. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/sachinshelke/codevira/main/.claude/skills/foolproof-product/SKILL.mdgit clone --depth 1 https://github.com/sachinshelke/codeviraWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sachinshelke/codevira/foolproof-product)<a href="https://agentmods.dev/skills/sachinshelke/codevira/foolproof-product"><img src="https://agentmods.dev/badge/skills/sachinshelke/codevira/foolproof-product/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sachinshelke/codevira/foolproof-product"><img src="https://agentmods.dev/badge/skills/sachinshelke/codevira/foolproof-product.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00124 | $0.02361 |
| Opus 5.5 | $0.00050 | $0.00944 |
| Sonnet 5.5 | $0.00025 | $0.00472 |
| Haiku 4.5 | $0.00012 | $0.00236 |
Grade A, and why
foolproof-product scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 274 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Foolproof product — non-skippable code invariants
The release-readiness skill prevents shipping a release without evidence. THIS skill prevents writing code that misbehaves once shipped. The two are complementary; both must be enforced.
v2.0.0 shipped with 23 bugs (A–O) because individual code changes satisfied "the function returns a value" but violated the product invariants below. This skill makes those invariants explicit and checkable.
The 10 principles (P1–P10)
For every code change you make in mcp_server/ or indexer/, walk
through this checklist. Skipping any P is a discipline breach.
P1 — No silent failures, ever
For every code path that does work:
- Returns >0 results → succeeds with concrete counts in the response
- Returns 0 results → MUST emit a clear "no results because "
message with a
fix_commandfield
Anti-pattern (the v2.0 bug pattern):
def index() -> dict:
matched = [f for f in files if matches(f)]
if not matched:
return {"chunks": 0} # ← silent zero. NEVER.
return {"chunks": len(matched)}
Correct:
def index() -> dict:
matched = [f for f in files if matches(f)]
if not matched:
return {
"chunks": 0,
"warning": f"No files matched. watched_dirs={watched_dirs} "
f"file_extensions={extensions}",
"fix_command": "codevira configure",
}
return {"chunks": len(matched), "files": [str(f) for f in matched]}
P2 — Self-diagnose on startup
Every long-running entry point (MCP server boot, watcher start, indexer process) must run startup health checks:
- Database files openable + expected tables present
- Schema version matches (migrate forward OR halt with error)
- Required dependencies importable (chromadb, sentence-transformers)
- File system permissions on data dir
On any failure: halt with a clear remediation hint. Never start in a degraded state without telling the user.
P3 — Atomic state mutations
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 274 lines · 124 tokens per session scan A e37eaf640c65
foolproof-product is a skill published in the GitHub repository sachinshelke/codevira (12 stars, last pushed 1mo ago), licensed MIT. It adds 124 tokens to every session and 2,361 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
idea-to-spec
Converts vague ideas into concrete, testable specifications with acceptance criteria. No implementation begins without a spec.
ponytail-lazy-senior-dev
Applies the "lazy senior developer" mindset. Use this skill whenever generating, modifying, reviewing code, or fixing bugs to prioritize code reuse, minimalism, YAGNI principles, and root-cause fixes. Also use whenever the user says "ponytail", "be lazy", "lazy mode", "simplest solution", "minimal solution", "yagni"…
tdd-explore-ideas
Systematic codebase exploration, architectural critique, and 5-step Idea Assessment with TDD hypothesis verification for Phase 0.
laravel-expert
Laravel & PHP Development Instructions for GitHub Copilot.
tdd-generate-fixtures
Generates type-safe test factories, fixtures, and seed data based on CONTEXT.md and /spec/ contracts. (Optional Utility).
project-memory-keeper
Analyzes the last session to log progress, extract lessons learned, and save them to the project memory instructions.