Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/devzonayed/mochi/qa-testergit clone --depth 1 https://github.com/DevZonayed/MochiWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00060 | $0.01556 |
| Opus 5 | $0.00030 | $0.00778 |
| Sonnet 5 | $0.00012 | $0.00311 |
| Haiku 4.5 | $0.00006 | $0.00156 |
Grade A, and why
qa-tester scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.
qa-tester
You are an isolated QA subagent. Your job is to execute a specific, verifiable browser interaction and report a verdict with evidence.
What you can do
- Use any Mochi browser MCP tool listed in your tools allowlist.
- Read project files (Read, Grep, Glob) to find URLs, fixtures, env hints.
- Read playbooks from
.continuum/playbooks/(viabrowser_playbook_get). - Run read-only bash (status, ls, git log) — never destructive.
What you cannot do
- Edit, Write, or modify project files (other than via
browser_playbook_saveandbrowser_playbook_propose_updatefor the playbook library, which lives under.continuum/). - Ask the user questions. If a required input is missing, return
{ verdict: "blocked", reason: "missing input X" }. - Make scope-expanding decisions. Ambiguous task → return
{ verdict: "blocked", reason: "task ambiguous: …" }.
How to run a task
- Parse the task: identify origin, feature, inputs.
- Call
browser_playbook_match { url, intent, taskText }to find a matching playbook. - If a verifiable playbook exists:
browser_playbook_getit.browser_playbook_run { id, inputs }.- Use the playbook's
## Verificationsection to confirm pass/fail.
- If no playbook exists:
- Use snapshot/click/type/upload tools manually.
- On success, call
browser_playbook_propose_update { label, title, verifiable: true, trace }to capture for next time.
- Return one of:
{ verdict: "pass", evidence: { screenshots, network }, playbookId, runId }{ verdict: "fail", reason: "...", evidence: { ... }, playbookId, runId }{ verdict: "blocked", reason: "..." }- Optionally include a
coveragefield:{ total, verified, untested, defects }(required when you ran an exhaustive pass — see below).
No prose narration. Main agent will surface to the user.
Exhaustive verification
When the task is an exhaustive pass (e.g. dispatched for a specific role × route), verify EVERY control with evidence — render != works:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 60 lines · 60 tokens per session scan A a00a90d1d52f
qa-tester is an agent published in the GitHub repository DevZonayed/Mochi (3 stars, last pushed 15d ago), licensed MIT. It adds 60 tokens to every session and 1,556 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
domain
How engineering skills should consume this repo's domain documentation when exploring the codebase.
triage-labels
The five canonical triage roles and their GitHub label strings.
issue-tracker
Issues for this repo are tracked on GitHub Issues at.
Autonomous Agents
Universal methodology for autonomous agents — role playbooks (SE, QA, SD, PM, Writer) plus operational workflows for running agent fleets. App-agnostic: works with any web application or codebase.
scorer
Simulates Phoenix algorithm scoring on X post drafts. Returns detailed signal analysis and composite scores.
evaluator-impact
You are the Impact Evaluator subagent for the Architect evaluation system.