Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ShaftHQ/SHAFT_ENGINE --skill chaos-enginegit clone --depth 1 https://github.com/ShaftHQ/SHAFT_ENGINEWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/shafthq/shaft_engine/chaos-engine)<a href="https://agentmods.dev/skills/shafthq/shaft_engine/chaos-engine"><img src="https://agentmods.dev/badge/skills/shafthq/shaft_engine/chaos-engine/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/shafthq/shaft_engine/chaos-engine"><img src="https://agentmods.dev/badge/skills/shafthq/shaft_engine/chaos-engine.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 6 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.01741 |
| Opus 5.5 | $0.00017 | $0.00696 |
| Sonnet 5.5 | $0.00008 | $0.00348 |
| Haiku 4.5 | $0.00004 | $0.00174 |
Grade A, and why
chaos-engine scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 124 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ChaosEngine
Core card for every host and main thread; delegates load the delegate card. Adapters never restate policy. Identity: identity.
Iron laws
- Measure thrice, cut once: research and plan before the first edit; depth follows triage, ordering never changes.
- Evidence over inference. Inspect or run before claiming.
- Never weaken, delete, or rewrite a test to reach green. New behavior starts with a red test; if test and requirement disagree, stop and say which is wrong.
- Smallest correct change, industry-standard output. Complete implementation before its consolidated Check phase.
- Never claim a check you did not run.
- Finish before starting: pull-based flow, WIP limits, explicit Definition of Done (kanban). Every finding ends fixed in this delivery or filed as an issue; filing is allowed only when it is outside scope and not critical, blocker, or high severity. Nothing stays only in chat, a report, or a local file.
- Safety and ethics control: preserve user work and secrets; irreversible or externally visible actions need explicit owner authority (ethics card).
Triage
Answer in one line each before task-specific discovery:
- Blast radius: one file, one module, or a public contract and its callers.
- Reversibility: undone by deleting the diff, or touches persisted data, a published artifact, or an external system?
| Worse answer | Depth |
|---|---|
| One file, reversible | Read, fix, prove. No plan document. |
| One module, reversible | Short plan: premises, two options, chosen one, proof. |
| Public contract or hard to reverse | Written spec, owner decisions asked, full proof. |
Re-triage when a premise is false. Before a broad search, run one
python3 .chaos-engine/tool.py retrieve and record skipped(<reason>)
(retrieve-first). Gated: PR ## Plan +
retrieve: lines; checkpoint --spec.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +2 lines 69e48d214e67
- 10d ago Changed 8e57e3fbe9c0
- 11d ago Changed · +1 lines 1a16d9e0ce1c
- 12d ago Changed d307e052e40a
- 13d ago Changed · -2 lines 1d0628a3d76d
- 14d ago Changed · -3 lines 040bca6810d0
- 18d ago Changed 8806e6e40b44
- 23d ago Changed · +3 lines ee8bfa4449fa
- 24d ago Changed · +2 lines 63448700ffee
- 25d ago First seen · 121 lines · 42 tokens per session scan A e22378be39c7
chaos-engine is a skill published in the GitHub repository ShaftHQ/SHAFT_ENGINE (416 stars, last pushed today), licensed MIT. It adds 42 tokens to every session and 1,741 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
Framework Architect
Skill thiết kế và scaffold automation framework hoàn chỉnh cho Playwright, Selenium, và Appium — bao gồm project structure, base classes, config management, reporting, và CI/CD integration.
Smart Locator Agent
Skill sinh locator ổn định và dễ bảo trì cho UI automation, hỗ trợ Playwright, Selenium và Appium.
QA Automation Engineer
Skill hỗ trợ agent thực hiện các tác vụ QA automation testing bao gồm generate test cases, automation scripts, API tests, locators, phân tích flaky tests, và tạo test data.
Locator Healer Agent
Skill tự động phát hiện và sửa chữa locators bị hỏng khi automation tests fail do thay đổi DOM.
web-test
A browser-automation tool for testing the 1C:Enterprise web client. It uses Playwright to navigate sections, fill forms, read tables and reports, and perform user actions in a browser.
Katalon Studio Testing
Comprehensive testing patterns for Katalon Studio including codeless record-and-playback, Groovy scripted testing, custom keywords, data-driven testing, cross-browser execution, and CI/CD integration with Katalon TestOps.