Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add samibs/skillfoundry --skill layer-checkgit clone --depth 1 https://github.com/samibs/skillfoundryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/samibs/skillfoundry/layer-check)<a href="https://agentmods.dev/skills/samibs/skillfoundry/layer-check"><img src="https://agentmods.dev/badge/skills/samibs/skillfoundry/layer-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/samibs/skillfoundry/layer-check"><img src="https://agentmods.dev/badge/skills/samibs/skillfoundry/layer-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Tool Misuse · line 133 Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface.Fix: Override unsafe defaults with secure settings (verify=True, auth required, restrictive permissions). Review and harden all tool configurations.
- medium Excessive Agency · line 418 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00011 | $0.04116 |
| Opus 5.5 | $0.00004 | $0.01646 |
| Sonnet 5.5 | $0.00002 | $0.00823 |
| Haiku 4.5 | $0.00001 | $0.00412 |
Grade A, and why
layer-check scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
│ □ All endpoints respond correctly (curl/httpie output) │ How it starts
The opening of the file, as written. The whole thing — 481 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Three-Layer Enforcement - Production Reality Gate
You are the Three-Layer Enforcement Agent, the strict validator that ensures every feature is REAL across all tiers: Database, Backend, and Frontend. You do not accept incomplete implementations.
ZERO TOLERANCE POLICY
BANNED PATTERNS (Automatic Rejection)
Any code containing these patterns is IMMEDIATELY REJECTED:
BANNED KEYWORDS (case-insensitive scan):
├── TODO
├── FIXME
├── HACK
├── XXX
├── PLACEHOLDER
├── STUB
├── MOCK (in production code, not test files)
├── FAKE
├── DUMMY
├── COMING SOON
├── NOT IMPLEMENTED
├── WORK IN PROGRESS
├── WIP
├── TEMPORARY
├── TEMP
├── HARDCODED (as excuse)
└── LATER
BANNED PATTERNS:
├── throw new NotImplementedException()
├── raise NotImplementedError
├── pass # empty function body (Python)
├── { } # empty function body
├── return null; // placeholder
├── return undefined;
├── return []; // empty stub
├── return {}; // empty stub
├── console.log("TODO")
├── print("not implemented")
├── /* implement later */
├── // will add later
└── Lorem ipsum (in UI)
BANNED BEHAVIORS
| Behavior | Why Banned | Required Instead |
|---|---|---|
| Mock data in production code | Hides missing backend | Real API integration |
| Hardcoded credentials | Security violation | Environment variables |
| Static JSON instead of API call | Fake functionality | Real data fetch |
| setTimeout to simulate loading | Fake UX | Real async operation |
| Commented-out code blocks | Technical debt | Delete or implement |
| Empty catch blocks | Silent failures | Proper error handling |
any type in TypeScript |
Type evasion | Proper typing |
// @ts-ignore |
Type evasion | Fix the type |
eslint-disable without justification |
Rule evasion | Fix the issue |
THREE-LAYER VALIDATION
LAYER 1: DATABASE
┌─────────────────────────────────────────────────────────────┐
│ DATABASE VALIDATION CHECKLIST │
├─────────────────────────────────────────────────────────────┤
│ SCHEMA: │
│ □ Migration file exists and is executable │
│ □ All tables/collections defined with proper types │
│ □ Primary keys defined │
│ □ Foreign keys with proper relationships │
│ □ Indexes on frequently queried columns │
│ □ Constraints (NOT NULL, UNIQUE, CHECK) where needed │
│ │
│ DATA INTEGRITY: │
│ □ No orphan records possible (cascade rules) │
│ □ Audit columns (created_at, updated_at, created_by) │
│ □ Soft delete if required (deleted_at) │
│ □ Version/revision tracking if needed │
│ │
│ SECURITY: │
│ □ Sensitive data identified and encrypted │
│ □ PII fields documented │
│ □ No plaintext passwords │
│ □ Connection uses secure credentials (not hardcoded) │
│ │
│ EVIDENCE REQUIRED: │
│ □ Migration runs successfully (show output) │
│ □ Schema matches PRD data model │
│ □ Sample data insert works │
│ □ Rollback migration tested │
└─────────────────────────────────────────────────────────────┘
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 481 lines · 11 tokens per session scan A 3e0f844f8bcd
layer-check is a skill published in the GitHub repository samibs/skillfoundry (12 stars, last pushed 23d ago), licensed MIT. It adds 11 tokens to every session and 4,116 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ring:running-dev-cycle
Running the backend dev cycle: implements every task in a rolling-wave plan.md (ring:writing-plans format) for a Go/TS service, driving specialist agents through Gate 0 implementation/TDD, Gate 8 parallel review, and Gate 9 validation per epic, elaborating later phases at each phase boundary. Use when starting or…
ring:writing-skills
Writing or editing a Ring skill: SKILL.md structure, frontmatter and Agent-Search-Optimization rules, token-efficiency targets, and bulletproofing (Iron Law, rationalization tables, Red Flags) so discipline-enforcing skills resist excuses. Use when creating or revising a skill. Delegates pressure-testing to…
ring:detecting-goroutine-leaks
Detecting goroutine leaks in Go: greps for goroutine patterns, audits goleak coverage (VerifyTestMain/VerifyNone), runs goleak, and dispatches ring:backend-go to fix leaks and add regression tests. Use after implementation or during review when code spawns goroutines or a leak is suspected. Runs before…
ring:creating-worktrees
Creating an isolated git worktree for parallel branch work: selects the directory by priority order, verifies/adds .gitignore safety, auto-installs the detected toolchain's dependencies, runs a baseline test, and reports readiness. Use before a feature that needs isolation from the main workspace or before executing…
ring:test-driven-development
Enforcing the RED-GREEN-REFACTOR loop: write one failing test and watch it fail, write minimal code to pass, then refactor green. Use when starting implementation of a new feature or bugfix, or writing any new production code. Requires pasted failure output as proof of RED; code written before its test must be…
ring:validating-acceptance-criteria
Validating a completed task against its acceptance criteria, mapping each AC to evidence, and gating completion on explicit user sign-off (self-approval prohibited). Gate 5 of ring:running-dev-cycle / ring:running-dev-cycle-frontend, run at task cadence after ring:reviewing-code. Use when implementation and tests are…