Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add tdwhere123/do-it --skill do-it-verifygit clone --depth 1 https://github.com/tdwhere123/do-itWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tdwhere123/do-it/do-it-verify)<a href="https://agentmods.dev/skills/tdwhere123/do-it/do-it-verify"><img src="https://agentmods.dev/badge/skills/tdwhere123/do-it/do-it-verify/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tdwhere123/do-it/do-it-verify"><img src="https://agentmods.dev/badge/skills/tdwhere123/do-it/do-it-verify.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00024 | $0.00379 |
| Opus 5.5 | $0.00010 | $0.00152 |
| Sonnet 5.5 | $0.00005 | $0.00076 |
| Haiku 4.5 | $0.00002 | $0.00038 |
Grade A, and why
do-it-verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Verify
Match evidence to the claim. A passing command establishes what that command actually checked; it does not automatically establish user acceptance. Prefer checks that exercise the affected behavior after the relevant change. Confirm that the intended items or assertions were actually checked: a validator that inspects nothing cannot establish that its target is valid.
Consider whether evidence is stale, from another checkout, unrelated, simulated, or incomplete. A green result can be manufactured: tests special-cased to the fixture, hard-coded expected values, weakened or skipped assertions, deleted failing tests, swallowed errors, or fallbacks that produce the expected output without the intended mechanism. Check that the passing check would fail if the claimed behavior were absent. Local tests can establish local behavior without establishing production operation. Reproduce the original symptom when verifying a bug fix and cover materially affected paths that share its cause. Choose evidence from the causal claim, not a fixed test count; a plausible diff or an unrelated green command does not close it. Retain relevant valid evidence, and bound conclusions when affected paths remain unchecked. Exercise package and host integration when claiming an installation works.
Report the result and relevant check, plus material gaps or remaining risks. Use NOT_VERIFIED when proof is missing, and explain what is missing. No fixed acceptance table, status vocabulary, or report template is required unless the user or project asks for one.
For branch closeout, inspect the intended diff and review state and follow the user's authorized commit, merge, publication, or cleanup scope. Parent agents integrate delegated results and verify the combined change. Hook silence and diagnostic event records are not proof of completion.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago Changed · +4 lines a55682fc4e66
- 12d ago Changed · +6 lines 98602c26e228
- 1mo ago Changed · -78 lines · -25 tokens per session 068688145d6f
- 1mo ago Changed · +51 lines · +3 tokens per session 5c6e0bce8e12
- 1mo ago First seen · 53 lines · 46 tokens per session scan A 1e96676c27be
do-it-verify is a skill published in the GitHub repository tdwhere123/do-it (28 stars, last pushed 8d ago), licensed MIT. It adds 24 tokens to every session and 379 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
sc-skill
Capture deterministic macOS screenshots for testing, docs, release notes, and marketing assets. Use when asked to automate app screenshots, batch-generate screenshot sets, standardize window sizing/composition, or choose between Peekaboo and native macOS screenshot tooling.
agent-session-format-check
Verify agent session format compatibility for Agent Sessions. Use when any agent CLI updates, when monitoring flags drift, or when bumping max verified versions (fixtures + docs + tests). Covers session schema, usage/limits tracking, storage backends, and discovery path contracts for all supported agents.
rn-testing
This skill should be used when the user asks to "write a Maestro test", "create E2E flows", "add testIDs", "run UI tests", "run E2E tests", "verify a feature works", "test my screen", "set up maestro-runner", "mock network requests", "inspect store state", "write test assertions", or needs guidance on test timing…
capturing-proof
This skill should be used when the user asks to "capture proof", "record a demo of this feature", "make a video showing it works", "record the flow for the PR", "generate a PR body", "capture screenshots for the PR", "proof-capture", or when a verified feature needs PR-ready proof artifacts (video + numbered…
test-generator
Automatically suggest tests for new functions and components. Use when new code is written, functions added, or user mentions testing. Creates test scaffolding with Jest, Vitest, Pytest patterns. Triggers on new functions, components, test requests, testing mentions.
dpf-verify-on-live-install
Use when asked to functionally verify that a DPF feature works on the live install by driving the happy path on the running portal.