Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add synaptiai/synapti-marketplace --skill runtime-verificationgit clone --depth 1 https://github.com/synaptiai/synapti-marketplaceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/synaptiai/synapti-marketplace/runtime-verification)<a href="https://agentmods.dev/skills/synaptiai/synapti-marketplace/runtime-verification"><img src="https://agentmods.dev/badge/skills/synaptiai/synapti-marketplace/runtime-verification/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/synaptiai/synapti-marketplace/runtime-verification"><img src="https://agentmods.dev/badge/skills/synaptiai/synapti-marketplace/runtime-verification.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00116 | $0.01288 |
| Opus 5.5 | $0.00046 | $0.00515 |
| Sonnet 5.5 | $0.00023 | $0.00258 |
| Haiku 4.5 | $0.00012 | $0.00129 |
Grade A, and why
runtime-verification scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
5. **Smoke**: `curl` `/health` and `/`; non-200 is a P1 finding (`references/finding-schema.md`). How it starts
The opening of the file, as written. The whole thing — 62 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Runtime Verification
Contract
Iron law: no completion until the code builds, runs, and behaves correctly; if you cannot verify it, build the infrastructure to verify it. Invoked after quality checks pass by /flow:start Phase 4 step 2, /flow:pr Phase 4 via Agent(integration-verifier), and the address-pr, debug, and start-issue workflows. Returns the Runtime Verification Results and Acceptance Criteria Verification tables, with failures as P1 findings (category=runtime). Permitted skips: only markdown-only, config-only, or dependency-bump-only, each with its listed evidence; any other skip needs an approved six-field escalation via AskUserQuestion.
Skip Whitelist
| Category | Definition | Required evidence |
|---|---|---|
markdown-only |
Only .md, .markdown, .txt, .rst files |
git diff --name-only origin/$DEFAULT_BRANCH..HEAD showing only doc extensions |
config-only |
Only config files (.json, .yaml, .yml, .toml, .ini, .env.example, dotfiles) with no code-path change; syntax still validated (lint/schema, dry-run) |
Full file list plus validation output |
dependency-bump-only |
Only lockfiles and manifest version strings (package.json version, package-lock.json, poetry.lock, Gemfile.lock, go.sum, Cargo.lock); no source, config semantics, or new dependencies; build still succeeds |
Full file list plus build output |
Mixed diffs (a whitelisted category plus one .py file, a new dependency, or a behavior-changing config value) get full verification. "Small change", "CI-only", "tests cover this", "just a refactor" are not categories.
Out-of-whitelist skips (anything uncovered): raise a Proactive-Autonomy escalation per references/escalation-format.md via AskUserQuestion and wait for approval; Situation cites why the whitelist misses the change, Tried lists the fast-path, build, and smoke attempts. Blanket repo-wide authorization is never valid.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · -181 lines d56f35b0146f
- 1mo ago First seen · 243 lines · 116 tokens per session scan A 49ceb38bf461
runtime-verification is a skill published in the GitHub repository synaptiai/synapti-marketplace (7 stars, last pushed 7d ago), licensed Apache-2.0. It adds 116 tokens to every session and 1,288 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
ios-testing-patterns
XCTest and XCUITest execution workflows and flaky test detection patterns.
ui-automation-workflows
Accessibility-first UI automation using IDB. Query accessibility tree (fast, 50 tokens) before screenshots (slow, 170 tokens). Use when automating simulator interactions, tapping UI elements, finding buttons, or testing user flows. Covers idb-ui-describe, idb-ui-tap, idb-ui-find-element patterns.
debug
Run /debug to find and fix a bug's root cause: a test failing for an unclear reason, /check verify finding a failure, or behavior being wrong. Runs a reproduce, localize, hypothesize, test, fix, verify loop, makes the minimal fix, and hands a regression test to /test. No features, no extra refactors.
test-runner
Use this skill when orchestrating agentic end-to-end tests. Resolves target + profile, dispatches the right driver(s) (playwright for web today, peekaboo for macOS (issue #381)), invokes the ux-evaluator agent (opus, read-only) against driver artifacts, reconciles findings with the open issue tracker via…
wicked-garden-qe-incident-to-scenario-synthesizer
Turns a production incident into a deterministic scenario file that reproduces it. Takes an incident-report markdown OR direct fields (stack trace, endpoint URL, HTTP method, request body), extracts the minimal reproducer, writes scenarios/ .md with linkedtoincident: frontmatter, emits wicked.qe.scenario.authored with…
wicked-garden-qe-exploratory-tester
Session-based, unscripted exploratory testing — the agent acts like a human tester. Charter-driven session, note-taking, bug hunting across UI and API. Use when: exploratory testing, unscripted session, charter-based bug hunting, heuristic-driven testing, fresh-eyes pass.