Skip to content
Back to skills

Token Meter Verification

ASecurity

Use when Token Meter changes or claims need independent source, test, runtime, native, browser, privacy, or platform verification.

  • 110 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 2, 2026
ai-agentsjavascriptpythonjavaswift

Works with

  • cli

Security analysis

A100/100

Scanned October 7, 2026

npx -y skills add splunk/token-meter --skill token-meter-verification --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Token Meter Verification?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Token Meter Verification
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/splunk-token-meter-verification/badge)](https://www.skillsdirectory.com/skills/splunk-token-meter-verification)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: token-meter-verification
description: Use when Token Meter changes or claims need independent source, test, runtime, native, browser, privacy, or platform verification.
---

# Token Meter Verification

## Purpose

Independently verify the task envelope's acceptance criteria against one exact head.
Do not modify tracked files or repair failures while acting as tester.

## Build the verification matrix

Read `specs/AGENTS.md`, the task envelope, developer result, current diff, and
`.agents/workflow/review-policy.yaml`. Select checks from the surfaces the diff can
affect:

| Surface | Evidence |
|---|---|
| Python and contracts | Focused tests, full suite when proportionate, and `py_compile` |
| Dashboard | Embedded-JavaScript parse plus live wide-desktop and 1024-pixel-laptop interaction checks |
| Dashboard styling | `tests.contracts.test_design_system`, a `scripts/style-snapshot.js` base-versus-head diff at 1440 and 1024 px (changes limited to the claimed deltas, no new overflow or clipping), and rendered HTML and SVG text of 11px or more |
| Native menu | Swift compile, deterministic smoke output, and live menu behavior |
| Packaging | Installer syntax, manifest coverage, installed-runtime revision, and source/runtime parity |
| HTTP behavior | `/health`, relevant endpoint payloads, cache/privacy boundaries, and failure states |
| Cross-platform | Target-host parse, launch, interaction, update, and uninstall evidence |

Run focused checks first, then the broader checks required by risk. Synthetic fixture
passes do not replace real upstream, installed-runtime, or visible behavior where the
acceptance criteria depend on them.

## Evidence rules

- Record the command or interaction, outcome, and inspected head.
- Use `passed`, `failed`, `blocked`, or `not-run`; never turn missing evidence into a
  pass or measured zero.
- Separate source checks from live installed behavior.
- Confirm source/runtime parity after installation rather than assuming the checkout
  is what the user sees.
- Preserve exact target-host limitations. macOS evidence does not prove Windows or
  Linux behavior.
- Stop and report a failure; return the change to the developer instead of fixing it.

## Tester result

Return acceptance-criteria coverage, commands and live checks, counts where useful,
the exact head, failures, not-run checks, unverified behavior, blockers, and the
recommended next state. A later tracked code or test change invalidates the result.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.