Borrowing it
Nothing to install: this file belongs to shutootaki/gwm. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/shutootaki/gwm/main/.claude/skills/verify-gwm/SKILL.mdgit clone --depth 1 https://github.com/shutootaki/gwmWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/shutootaki/gwm/verify-gwm)<a href="https://agentmods.dev/skills/shutootaki/gwm/verify-gwm"><img src="https://agentmods.dev/badge/skills/shutootaki/gwm/verify-gwm/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/shutootaki/gwm/verify-gwm"><img src="https://agentmods.dev/badge/skills/shutootaki/gwm/verify-gwm.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00101 | $0.02286 |
| Opus 5 | $0.00051 | $0.01143 |
| Sonnet 5 | $0.00020 | $0.00457 |
| Haiku 4.5 | $0.00010 | $0.00229 |
Grade A, and why
verify-gwm scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 262 lines — stays where its author put it; the contents beside it link to each section on GitHub.
gwm-rust 動作確認スキル
gwm-rustのコード変更後に、ビルド・コマンド実行・TUI表示を確認する手順。
確認フロー
Step 1: ビルド
cargo build
ビルドが失敗した場合は、エラーを報告して終了。
Step 2: 基本情報確認
./target/debug/gwm --help
./target/debug/gwm --version
./target/debug/gwm # 引数なし(ウェルカムメッセージ)
Step 3: helpコマンド確認
./target/debug/gwm help
./target/debug/gwm help list
./target/debug/gwm help add
./target/debug/gwm help remove
./target/debug/gwm help go
./target/debug/gwm help clean
./target/debug/gwm help pull-main
Step 4: listコマンド
./target/debug/gwm list
./target/debug/gwm ls # エイリアス
確認ポイント:
- テーブルが正しく描画されているか
- ブランチ名、パス、ステータスが表示されているか
- 列幅が適切に調整されているか
Step 5: その他の非TUIコマンド
./target/debug/gwm clean --dry-run
./target/debug/gwm clean -n # 短縮オプション
./target/debug/gwm pull-main
Step 6: TUI起動確認(自動)
TUIコマンドの動作確認はtui-automationスキルを使用して自動化できます。
自動テストの実行:
SKILL_DIR=".claude/skills/tui-automation"
# gwm add のテスト
$SKILL_DIR/tui-start.sh "./target/debug/gwm add"
$SKILL_DIR/tui-state.sh # text_input を期待
$SKILL_DIR/tui-type.sh "feature/test"
$SKILL_DIR/tui-state.sh # preview が表示されることを確認
$SKILL_DIR/tui-send.sh Escape
$SKILL_DIR/tui-close.sh
# gwm go のテスト
$SKILL_DIR/tui-start.sh "./target/debug/gwm go"
$SKILL_DIR/tui-state.sh # select_list を期待
$SKILL_DIR/tui-send.sh Escape
$SKILL_DIR/tui-close.sh
手動確認が必要な場合:
以下はインタラクティブなTUIを起動するため、ユーザーに手動実行を案内する:
addコマンド:
./target/debug/gwm add # TUI: 新規ブランチ作成
./target/debug/gwm add -r # TUI: リモートブランチ選択
./target/debug/gwm add feature/test # 直接指定
./target/debug/gwm add --from develop # ベースブランチ指定
goコマンド:
./target/debug/gwm go # TUI: ワークツリー選択
./target/debug/gwm go main # 直接指定(クエリ)
removeコマンド:
./target/debug/gwm remove # TUI: 複数選択
./target/debug/gwm rm # エイリアス
./target/debug/gwm remove -f # 強制削除
./target/debug/gwm remove --clean-branch auto # ブランチ自動削除
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 262 lines · 101 tokens per session scan A 0fb815775c69
verify-gwm is a skill published in the GitHub repository shutootaki/gwm (18 stars, last pushed 7mo ago), licensed MIT. It adds 101 tokens to every session and 2,286 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
setup-pre-commit
Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-commit hooks, set up Husky, configure lint-staged, or add commit-time formatting/typechecking/testing.
cw-gates
Use before claiming any Codewhale change is done, green, or ready to land: the focused-to-broad verification ladder, the budget checks CI enforces, and the rules for what counts as a passing test.
codew-release-qa-sweep
Use before claiming Codewhale release work is done: run the full gate sweep and list the manual QA targets.
ccmanager-config
Set up, review, or repair a CCManager config — .ccmanager.json at a git repository root, or the global /.config/ccmanager/config.json. Use when someone wants ccmanager to launch a different agent CLI (codex, gemini, cursor-agent, copilot…), add command presets, run a command on session state changes or worktree…
safe-extraction
Apply when extracting code from a large monolith file into submodules. Covers barrel re-exports, internals DI seam proxy patterns, CI invariant allowlist updates, and cross-file test verification. Prevents CI failures, broken imports, and test regressions from code extraction.
merge-queue-readiness
Pre-queue merge-group CI simulation. Triggered before adding a PR to a GitHub merge queue. Prevents merge-queue kick-outs from integration test failures.