Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TestAny-io/testany-agent-skills --skill testany-import-gitgit clone --depth 1 https://github.com/TestAny-io/testany-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/testany-io/testany-agent-skills/testany-import-git)<a href="https://agentmods.dev/skills/testany-io/testany-agent-skills/testany-import-git"><img src="https://agentmods.dev/badge/skills/testany-io/testany-agent-skills/testany-import-git/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/testany-io/testany-agent-skills/testany-import-git"><img src="https://agentmods.dev/badge/skills/testany-io/testany-agent-skills/testany-import-git.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 46 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.04933 |
| Opus 5 | $0.00021 | $0.02466 |
| Sonnet 5 | $0.00008 | $0.00987 |
| Haiku 4.5 | $0.00004 | $0.00493 |
Grade A, and why
testany-import-git scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 295 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Testany Git Import
把一个 Git 仓库里的测试脚本批量注册成 Testany platform cases，并在后续以 sync / switch / relation 的方式保持与仓库同步。
用户输入: $ARGUMENTS
核心概念
| 对象 | 说明 |
|---|---|
| Connection | 一次 OAuth 授权后得到的 Git 平台身份（当前支持 GitHub）。GitHub 连接下有若干 installation_bindings，每个绑定代表一个 GitHub App 安装（owner/org + 可访问 repo 范围）。installation_id 是后续浏览仓库的必填入参 |
| Import History | 一次导入配置：绑定到某个 connection、某个 repo、某个 ref，决定了"这些文件 ↔ 这些 case"的映射 |
| File Binding | import history 下"一个文件 ↔ 一个 case"的绑定记录，是 Testany 上那批 case 的真源 |
| Sync Record | 一次同步动作的审计记录（per-file 成功/失败/跳过） |
import_mode（枚举值必须严格匹配）
本质差别：后端 auto-diff vs 用户手动选 —— 不是"仓库内容多少是测试"之类的场景判断。
managed_import：镜像仓库、自动 diff。confirm_git_sync触发一次 mirror→binding 的增量落地；新增文件还可以另走 addFiles，上游被删走 sourceDeleted 两阶段确认sync_link：显式管理 binding 集。current phase 下confirm_git_sync不可用，binding 集演化统一走 addFiles（新增文件）和 sourceDeleted（上游删除）两条关系流。preview_git_sync在这里仅用于查看"已绑定文件相对 last_synced_commit 的变化"
选择建议：想省心 + 信任仓库当 source-of-truth → managed_import；想精细控制每次哪些文件入 binding 集 → sync_link。不要基于"仓库是否纯测试"这类理由推断。
sync_mode（枚举值必须严格匹配）
latest：跟随tracked_branch的 HEAD，每次 sync 自动前进pinned_commit：钉在某个 commit；要前进必须走 switchCommit
操作速查
| 意图 | 工具链 |
|---|---|
| 看我有哪些 Git 连接 | testany_list_git_connections |
| 新建 GitHub 连接 | testany_initiate_git_oauth → 用户浏览器完成 → 轮询 list |
| Access token 快过期 / 已过期但 refresh_token 还在 | testany_refresh_git_connection_scope（server-to-server，无需浏览器） |
| Refresh_token 也挂了 / 用户主动断连 / 换账号 | testany_reauthorize_git_connection（返回 authorize_url，需用户浏览器完成） |
| 连接侧 repo 选择 / scope 变更 | testany_refresh_git_connection_scope（同入口；它既刷 token 又校对 scope） |
| 删连接 | testany_disconnect_git_connection |
| 列可访问仓库 | testany_list_git_repositories（必填 installation_id） |
| 选分支 / commit | testany_list_git_branches / testany_list_git_commits |
| 看仓库目录 / 预览文件 | testany_browse_git_tree / testany_preview_git_file |
| 列 / 查 / 删 import | testany_list_git_imports / testany_get_git_import / testany_delete_git_import |
| 新建导入 | testany_create_git_import |
| 看 / 清 bindings | testany_list_git_import_file_bindings / testany_delete_git_import_file_bindings |
| 周期同步（managed_import 专属） | testany_preview_git_sync → testany_confirm_git_sync（sync_link 在 current phase 不支持 confirm_sync；改走 addFiles/sourceDeleted） |
| 重放失败 sync（sync_link 专属） | testany_retry_git_sync({sync_record_id}) |
| 切 commit（要求 sync_mode=pinned_commit） | testany_preview_git_switch_commit → testany_confirm_git_switch_commit |
| 解除 pinned、回 latest（要求 sync_mode=pinned_commit） | testany_preview_git_switch_mode → testany_confirm_git_switch_mode |
| 审计同步历史 | testany_list_git_sync_records → testany_get_git_sync_record |
| 加新文件（managed_import 与 sync_link 均可） | testany_get_git_add_files_summary → _list_git_add_files_candidates → _confirm_git_add_files |
| 标记源删除（managed_import 与 sync_link 均可） | testany_get_git_source_deleted_summary → _list_..._candidates → _confirm_git_source_deleted |
| Webhook 读 / 开关 / 轮换 | testany_get_git_webhook_config / _update_git_webhook_config / _disable_git_webhook / _regenerate_git_webhook_secret |
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 295 lines · 42 tokens per session scan A 7931c5d6d4fe
testany-import-git is a skill published in the GitHub repository TestAny-io/testany-agent-skills (81 stars, last pushed yesterday), licensed MIT. It adds 42 tokens to every session and 4,933 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
research-engineer
An uncompromising Academic Research Engineer. Operates with absolute scientific rigor, objective criticism, and zero flair. Focuses on theoretical correctness, formal verification, and optimal implementation across any required technology.
tika-eval-compare
Compare extracts from two Tika builds over a corpus to detect regressions in content, encoding, exceptions, and embedded-document handling. Use for "compare before/after extracts", "eval this change against the corpus".
neuron-evaluation-engineer
Create and run AI evaluations with datasets, assertions, and output drivers in Neuron AI. Use this skill whenever the user mentions evaluation, testing AI systems, creating evaluators, dataset-driven testing, assertion-based validation, or wants to measure AI system performance. Also trigger for tasks involving…
jetson-validate-image
Use after jetson-flash-image to run static BSP checks, on-target smoke/regression tests on a flashed DUT, or both. Not for build or flash steps. Triggers: validate bsp, on-target validation.
atmos-validation
Validate Atmos projects, components, arbitrary JSON Schema inputs, EditorConfig, and GitHub Actions; use affected-file selection and native CI annotations.
skill-benchmark
Benchmark AI skill effectiveness by measuring implementation quality against legacy constraints.