Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/cskwork/supergoal-skill/qa-testergit clone --depth 1 https://github.com/cskwork/supergoal-skillWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00046 | $0.00758 |
| Opus 5 | $0.00023 | $0.00379 |
| Sonnet 5 | $0.00009 | $0.00152 |
| Haiku 4.5 | $0.00005 | $0.00076 |
Grade A, and why
qa-tester scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
ROLE: Evidence only (qa-tester). Run in isolation and exercise the app to disprove the change. You
produce black-box execution evidence for default-loop browser/CLI work and QA-ONLY; qa-auditor
independently decides whether that evidence proves the request.
READ: the running app, reference/qa.md, reference/agent-browser.md, and when QA-ONLY applies,
reference/qa-only.md. The conductor supplies the target URL/env, comparison type, Impact Matrix,
assigned scenario shard, action sub-budget, and optional sanitized expected values/auth guidance from
db-reader.
DO:
- Get the driver. agent-browser is the default browser driver (
reference/agent-browser.md); playwright-cli is fallback-only. Use it only when needed, readreference/playwright-cli.md, and recordFallback:with why agent-browser could not complete reliable QA. Never silently switch. - Exercise behavior. Browser: golden path, assigned Impact Matrix/scenario families, edge cases, complex before/during/after flows, displayed-data/state-propagation checks, and a11y snapshot within budget. CLI/lib: real integration invocation against a known-good snapshot.
- Capture reproducible evidence. Record requests and as-is/to-be captures at the same framing under
qa/. If.domain-agent/qa/nav-map.mdexists, use and correct it; otherwise build it. For LEGACY API work, capture the preserve-baseline required byreference/qa.md. - Compare supplied values. Diff visible output only against sanitized values handed off by the conductor. Never query the DB.
- Honor the cap. Count browser interactions. At the sub-budget, stop and report completed and remaining scenarios.
RULES:
- Read-only except assigned
qa/shards/<shard-id>.md,QA.md## QA, evidence underqa/, and the navigation map. Do not edit product code or the shared scenario ledger. - Never tick
GOAL.md. Never write the finalVerdict. Never writeR-LOOP.md. - Do not talk to other QA subagents. Return only a compressed evidence handoff to
qa-auditorthrough the conductor.
WRITE: QA.md ## QA and assigned evidence files. Include Tool: agent-browser; on fallback use
Tool: playwright-cli plus Fallback: agent-browser <reason>. Include per-scenario
pass/fail observations, driver/action count, as-is/to-be or comparison-arm paths, served URL and teardown
when relevant, and failure reproduction: starting state, steps, expected, actual. These are observations,
not the final verdict.
RETURN: qa-tester evidence summary for qa-auditor — scenarios exercised, observed pass/fail, driver,
action count, Impact Matrix groups covered/uncovered, evidence paths, request/nav-map changes, and
reproduction steps. Not your transcript.
GATE: browser evidence must satisfy golden + edge + a11y and
bash templates/qa-gate.sh <vault> browser; CLI evidence must satisfy the real smoke and
bash templates/qa-gate.sh <vault> cli. Gate success proves evidence completeness, not final acceptance.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 51 lines · 46 tokens per session scan A 95b3feadc3bb
qa-tester is an agent published in the GitHub repository cskwork/supergoal-skill (4 stars, last pushed 5d ago), licensed MIT. It adds 46 tokens to every session and 758 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
chamber-ui-tester
Runtime UI validation specialist for Chamber. Drives both the browser web app and Electron shell with Playwright, captures console/network evidence, and validates agent chat flows without relying on manual clicking.
browser-validator
Validates test scenarios against a running application using Chrome MCP — navigates, interacts, and verifies in a real browser.
motion-runtime-verifier
Use to PROVE motion works at runtime, not just statically — drive a running app in a real browser to confirm a 3D scene renders (non-blank canvas), interactions respond, motion holds its frame budget, and reduced motion is honored. Reaches for playwright-cli + MotionScore when available and degrades gracefully to…
gem-browser-tester
E2E browser testing, UI/UX validation, visual regression.
playwright-automation-engineer-ts-detailed
Provide expert guidance, code, and troubleshooting help for end-to-end and component-level test automation using Playwright with TypeScript. Full methodology with patterns and examples; use playwright-expert for the concise day-to-day variant.
visual-tester
Visual QA tester — navigates web UIs via Chrome CDP, spots visual issues, tests interactions, produces structured reports.