Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/secondlifes/delphi-expert/dmvcframework-testingnpx skills add SecondLifes/delphi-expert --skill dmvcframework-testinggit clone --depth 1 https://github.com/SecondLifes/delphi-expertWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00115 | $0.05941 |
| Opus 5 | $0.00057 | $0.02971 |
| Sonnet 5 | $0.00023 | $0.01188 |
| Haiku 4.5 | $0.00012 | $0.00594 |
Grade A, and why
dmvcframework-testing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
89% identical to dmvcframework-testing — 16 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 705 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DMVCFramework Integration Testing Guide
DMVCFramework is available at https://github.com/danieleteti/delphimvcframework
It ships with a full test stack: DUnitX as test runner, an in-process IMVCServer
(Indy Direct) and IMVCRESTClient as the fluent HTTP client. No external server needed —
tests start and stop the server in [SetupFixture]/[TeardownFixture].
TMVCListeneris deprecated as of 3.5 and will be removed in 4.0 (sources/MVCFramework.Server.pas). It is now a thin wrapper overIMVCServer. Do not write new tests against it: build aTMVCEngine, host it withTMVCServerFactory.CreateIndyDirect, and you need no WebModule at all.
Reference test files in the official repository:
unittests/general/TestClient/LiveServerTestU.pasunittests/general/TestClient/ActiveRecordControllerTestU.pasunittests/general/RESTClient/MVCFramework.Tests.RESTClient.pas
REQUIRED REFERENCE — dmvcframework-security. Any endpoint that accepts input from a client (body,
query string, header, cookie, upload, URL) must follow it: access control and IDOR, mass assignment,
SQL injection, XSS, CSRF, path traversal, uploads, security headers, JWT, secrets. Invoke it whenever you
write or review such an endpoint — not only when the user says "security".
When in doubt about an API — verify it, never guess
Never invent an identifier or answer from memory. If you need a signature this skill does not cover, ask the
user for the path to their DelphiMVCFramework checkout and read sources/ (and the matching samples/
project); failing that, read the official repository —
sources ·
samples.
If you still cannot verify it, say so. Where a skill and a sample disagree, the sample wins.
0. STOP — tests go alongside a wizard project
This skill tests an existing DMVCFramework application. It does not create one.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 705 lines · 115 tokens per session scan A d4bff186d577
dmvcframework-testing is a skill published in the GitHub repository SecondLifes/delphi-expert (3 stars, last pushed 23d ago), licensed MIT. It adds 115 tokens to every session and 5,941 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. It is 89% identical to dmvcframework-testing, differing in 16 lines, and is treated as a copy.
Other skills, from other repositories
studio-testing
Testing strategy for Supabase Studio. Use when writing tests, deciding whether a change needs tests and which type, extracting logic from components into testable utility functions, or reviewing test coverage. Covers unit tests, component tests, and E2E test selection criteria.
tdd-workflow
Use this skill when writing new features, fixing bugs, or refactoring code. Enforces test-driven development with 80%+ coverage including unit, integration, and E2E tests.
testing
Testing workflow and quality standards for writing and running tests. Use when: (1) Writing new tests, (2) Adding a new feature that needs tests, (3) Modifying logic that has existing tests, (4) Before claiming a task is complete.
testing-patterns
Testing patterns and principles. Unit, integration, mocking strategies.
testing
Writing or debugging tests, choosing unit vs integration style, Postgres/ClickHouse tests, regenerating ClickHouse test schema, or exporting test helpers from packages without pulling test code into production bundles.
gsd-add-tests
Generate tests for a completed phase based on UAT criteria and implementation.