Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add YuDefine/nuxt-supabase-starter --skill data-sanitygit clone --depth 1 https://github.com/YuDefine/nuxt-supabase-starterWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yudefine/nuxt-supabase-starter/data-sanity)<a href="https://agentmods.dev/skills/yudefine/nuxt-supabase-starter/data-sanity"><img src="https://agentmods.dev/badge/skills/yudefine/nuxt-supabase-starter/data-sanity/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yudefine/nuxt-supabase-starter/data-sanity"><img src="https://agentmods.dev/badge/skills/yudefine/nuxt-supabase-starter/data-sanity.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00049 | $0.01411 |
| Opus 5 | $0.00024 | $0.00705 |
| Sonnet 5 | $0.00010 | $0.00282 |
| Haiku 4.5 | $0.00005 | $0.00141 |
Grade A, and why
data-sanity scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 62 lines — stays where its author put it; the contents beside it link to each section on GitHub.
data-sanity — Layer C static data-shape audit。依當前產品已安裝的 skill 入口呼叫，或讀取本文件後使用下列 CLI。
本 skill 執行唯讀稽核與回報；發現問題後，修正依本次任務既有授權處理。metadata.clade.permission_tier 記錄這項政策，不是原生權限控制。
Born from perno app-status-badge-extraction（2026-05-24）: attendance/amendments.vue 用 useEmployeeListQuery({ perPage: 200 })，但 server schema 是 perPage: z....max(100) → API 400 → employeeNameMap empty → 員工 column 整列「-」。typecheck / lint / design review / verify:ui 全沒抓到，因為它是資料形狀問題，不是型別或視覺問題。
這是 clade 自有 skill（不是 /impeccable 的 sub-command — impeccable 是第三方 npx-managed skill，clade 不擁有）。
何時跑
- Design Checkpoint 期間（[[proactive-skills.design-checkpoint]]）：對本次工作觸及的 paginated query + lookup-resolved column 跑一次。
- 交付人工檢查之前：data-shape 防線。
- Ad-hoc：任何改到
useXxxQuery({ <param>: <literal> })或 lookup map 的工作。
怎麼跑
從 clade central 呼叫（<clade-vendor> = ~/offline/clade/vendor，與其他 vendor script 同慣例）：
node <clade-vendor>/scripts/audit-data-sanity.ts \
--consumer-path . \
[--files <comma-separated-touched-files>] \
--json
- 不給
--files→ walk 整個 consumer（skip node_modules/.nuxt/dist）。 - 給
--files→ 掃指定的既有檔；route 關聯可額外讀取它匯入的 schema。範圍以傳入路徑為準，此參數不提供目錄隔離；只傳本次已授權的路徑。
偵測項
- PARAM_BOUNDARY（Critical — blocks archive）：client 端 pagination-ish param literal（
perPage/per_page/pageSize/page_size/limit/take/first/count/top/size）超過（max）或低於（min）同名 server zod bound（.max(N)/.min(N)/.length(N)）。對應 UI-INV-2（lookup-resolved column 解析率 100%）。 - LOOKUP_MAP_RISK（advisory / warn）：偵測
xxxMap/xxxLookup/xxxById從 query data（.reduce(/Object.fromEntries(/new Map(）建的 lookup map。提醒：來源 query 若失敗，此 map empty → 對應 column uniform fallback。確認來源 query param 在 schema bound 內。 - SUBQUERY_ALIAS_COLLISION（advisory / warn）：同一 serverish 檔案中重複使用
.as('alias')時回報，供查核是否屬同一 SQL query 的衝突；不改 exit code。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +6 lines · +1 tokens per session 242504a1264d
- 5d ago First seen · 56 lines · 48 tokens per session scan A e76877eb8763
data-sanity is a skill published in the GitHub repository YuDefine/nuxt-supabase-starter (45 stars, last pushed today), licensed MIT. It adds 49 tokens to every session and 1,411 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
server-side-calls
Call tRPC procedures directly from server code using t.createCallerFactory() and router.createCaller(context) for integration testing, internal server logic, and custom API endpoints. Catch TRPCError and extract HTTP status with getHTTPStatusCodeFromError(). Error handling via onError option.
ssl-proxy-troubleshoot
Systematic workflow for troubleshooting SSL/proxy connectivity issues with government websites.
diagnose-backend-bug
Diagnose a bounded backend or multi-service failure from GitHub Issues, Jira, Aone, user-provided exports, logs, traces, responses, stack traces, or job records. Use when a service, API, RPC, worker, queue, CLI, or scheduled job bug needs correlation through the project's existing observability route before repair; do…
platform-apex-anonymous-run
Use this skill to run anonymous Apex against the connected Salesforce org — from a .apex file or a pasted snippet — capturing the debug log, surfacing compile and runtime errors, and summarizing results. Trigger on phrases like "run this anonymous apex", "execute this script against my org", "run this snippet of…
api-debugging
Systematic approach to debugging REST APIs, HTTP errors, authentication issues, and network problems. Use when the user has API errors, status code issues, timeout problems, or needs help troubleshooting HTTP requests.
lsp-refactoring
Intelligent code refactoring using IDE-level tools (rename, find-references, go-to-definition), AST-aware pattern matching, and TDD verification. Use for safe, large-scale refactoring with precision.