Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add SisyphusSQ/harness-template --skill test-runbookgit clone --depth 1 https://github.com/SisyphusSQ/harness-templateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sisyphussq/harness-template/test-runbook)<a href="https://agentmods.dev/skills/sisyphussq/harness-template/test-runbook"><img src="https://agentmods.dev/badge/skills/sisyphussq/harness-template/test-runbook/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sisyphussq/harness-template/test-runbook"><img src="https://agentmods.dev/badge/skills/sisyphussq/harness-template/test-runbook.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.00334 |
| Opus 5.5 | $0.00016 | $0.00134 |
| Sonnet 5.5 | $0.00008 | $0.00067 |
| Haiku 4.5 | $0.00004 | $0.00033 |
Grade A, and why
test-runbook scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
验证 Runbook
读取工作项目 AGENTS.md、相关代码/接口契约及现有 runbook，确认用户要求编写、执行还是回写。优先复用现有脚本和证据入口。
执行前说明真实目标环境、副作用、临时数据与清理方式。结合当前请求和已有授权继续工作，只有超出范围或影响无法确认时询问。
Runbook 包含目标与成功标准、环境与前置条件、步骤及预期结果、失败恢复、清理和结果摘要。若项目有 docs/test/RUNBOOK_TEMPLATE.md 可参考；缺少模板时直接组织内容。
- 只运行与改动及验收相关的检查，已有有效结果优先复用；提交/发版收尾遵守不重复测试的约定。
- 结果集中写入 runbook 一处，计划、state、runs 只引用，避免多份状态漂移。
- 未执行、失败、阻塞和清理残留按实际记录，不写成通过。
- 提交文档只保留脱敏摘要；不写 token、Cookie、连接串、数据库主机、敏感主键或私有临时地址。
- 原始输出保存在 .agents/runs/ 或其它受控本地位置，不自动提交或写入外部系统。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -46 lines · -8 tokens per session e0867afbb869
- 2mo ago First seen · 65 lines · 48 tokens per session scan A 3b9946c1f61f
test-runbook is a skill published in the GitHub repository SisyphusSQ/harness-template (11 stars, last pushed 1mo ago), licensed MIT. It adds 40 tokens to every session and 334 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
research-engineer
An uncompromising Academic Research Engineer. Operates with absolute scientific rigor, objective criticism, and zero flair. Focuses on theoretical correctness, formal verification, and optimal implementation across any required technology.
tika-eval-compare
Compare extracts from two Tika builds over a corpus to detect regressions in content, encoding, exceptions, and embedded-document handling. Use for "compare before/after extracts", "eval this change against the corpus".
cua-driver
Use Cua Driver for desktop or browser tasks that are awkward or unavailable through Bash/APIs, or when the user explicitly wants GUI interaction: app testing, visual bug reproduction, form filling, calendar entry, screenshots, and demo recording. Also covers Cua setup; not OpenAI Codex Computer Use or web research.
jetson-validate-image
Use after jetson-flash-image to run static BSP checks, on-target smoke/regression tests on a flashed DUT, or both. Not for build or flash steps. Triggers: validate bsp, on-target validation.
atmos-validation
Validate Atmos projects, components, arbitrary JSON Schema inputs, EditorConfig, and GitHub Actions; use affected-file selection and native CI annotations.
skill-benchmark
Benchmark AI skill effectiveness by measuring implementation quality against legacy constraints.