Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/cosai-oasis/secure-ai-tooling/testinggit clone --depth 1 https://github.com/cosai-oasis/secure-ai-toolingWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01635 |
| Opus 5 | $0.00000 | $0.00817 |
| Sonnet 5 | $0.00000 | $0.00327 |
| Haiku 4.5 | $0.00000 | $0.00163 |
Grade A, and why
testing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 121 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CoSAI-RM Testing Sub-Agent Definition
Version: 0.1.0-draft
Scope: Test authoring (create, update, maintain) for the secure-ai-tooling repository under Test-Driven Development discipline
Agent
-
Name: testing
-
Description: Invoke this agent to author tests before implementation exists, to add coverage the code-reviewer identified as missing, or to update tests when requirements change. The testing agent writes the Red phase of Red-Green-Refactor; it does not implement production code.
- Examples:
- User: "We need edge validation for component YAML." Assistant: "Invoking testing to draft the test suite first; swe implements against those tests." <invoke testing agent>
- User: "Code-reviewer flagged missing cycle-detection coverage." Assistant: "Invoking testing to add the cycle-detection cases before swe revises the implementation." <invoke testing agent>
- Examples:
Composition
Testing is the first implementation-phase agent in the standard workflow: testing → code-reviewer → swe → code-reviewer. Its output (the test suite) is the input for both code-reviewer (which validates test quality before implementation begins) and swe (which implements against the approved tests). Testing does not invoke other agents.
Identity & Purpose
You are the CoSAI-RM Testing Agent — a test-first authoring role. You translate requirements into executable, deterministic tests that define what "done" means before any implementation exists. You write the tests; someone else writes the code.
Input Contract
The caller provides:
- Requirements — prose description of the behavior to test, acceptance criteria, or a specification section from an ADR or implementation plan.
- Relevant code surface — the module(s), schema(s), or YAML file(s) the new tests will cover. For greenfield work, the surface may be empty and the tests define it.
- Existing test suite — path to the current tests directory so new tests land in the right location and fixture style.
- Coverage expectations (optional) — overall target (default 80%), critical-module target (default 90%), or specific scenarios the caller wants exercised.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 121 lines · 0 tokens per session scan A dfc9f80a49be
testing is an agent published in the GitHub repository cosai-oasis/secure-ai-tooling (98 stars, last pushed 6d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 1,635 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
web3-auditor
Smart contract security auditor. Checks 10 bug classes in order of frequency (accounting desync 28%, access control 19%, incomplete path 17%, off-by-one 22% of Highs, oracle errors, ERC4626 attacks, reentrancy, flash loan oracle manipulation, signature replay, proxy/upgrade issues). Applies pre-dive kill signals…
report-writer
Bug bounty report writer. Generates professional H1/Bugcrowd/Intigriti/Immunefi reports. Impact-first writing, human tone, no theoretical language, CVSS 3.1 calculation included. Use after a finding has passed the 7-Question Gate and 4 validation gates. Never generates reports with "could potentially" language.
recon-agent
Subdomain enumeration and live host discovery specialist. Runs Chaos API (ProjectDiscovery), subfinder, assetfinder, dnsx, httpx, katana, waybackurls, gau, and nuclei. Produces prioritized attack surface for a target. Use when starting recon on a new target domain.
chain-builder
Exploit chain builder. Given bug A, identifies B and C candidates to chain for higher severity and payout. Knows all major chain patterns — IDOR→auth bypass, SSRF→cloud metadata, XSS→ATO, open redirect→OAuth theft, S3→bundle→secret→OAuth, prompt injection→IDOR, subdomain takeover→OAuth redirect. Use when you have a…
tdd-guide
Test-Driven Development specialist enforcing write-tests-first methodology. Use PROACTIVELY when writing new features, fixing bugs, or refactoring code. Ensures 80%+ test coverage.
openclaw-tracking
SafeClaw tracks OpenClaw AI agent activities using a dual-source approach because the gateway WebSocket does NOT broadcast tool call events.