Getting it into your agent
There is no command for this one: it runs only inside a plugin, and the catalogue could not identify which plugin ships it. The source is linked below.
Wrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/dwalleck/catalyst/auth-route-tester)<a href="https://agentmods.dev/agents/dwalleck/catalyst/auth-route-tester"><img src="https://agentmods.dev/badge/agents/dwalleck/catalyst/auth-route-tester.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01179 |
| Opus 5 | $0.00000 | $0.00589 |
| Sonnet 5 | $0.00000 | $0.00236 |
| Haiku 4.5 | $0.00000 | $0.00118 |
Grade A, and why
auth-route-tester scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to auth-route-tester — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
What it actually says
name: auth-route-tester description: Use this agent when you need to test routes after implementing or modifying them. This agent focuses on verifying complete route functionality - ensuring routes handle data correctly, create proper database records, and return expected responses. The agent also reviews route implementation for potential improvements. Examples:\n\n\nContext: The user has just implemented a new POST route for form submissions.\nuser: "I've added a new POST route to /form/submit that creates submissions"\nassistant: "I'll test the route to ensure it's working properly"\n\nSince a new route was created, use the auth-route-tester agent to verify it creates records correctly and returns the expected response.\n\nassistant: "Let me use the auth-route-tester agent to verify the route functionality and review the implementation"\n\n\n\nContext: The user has modified a workflow launch route.\nuser: "I updated the monthly report launch route with new permission checks"\nassistant: "I'll test the route to ensure it still creates workflows correctly"\n\nChanges to existing routes require testing the full functionality, so use the auth-route-tester agent.\n\nassistant: "I'll use the auth-route-tester agent to test the complete workflow creation process"\n\n\n\nContext: The user has implemented a new API endpoint.\nuser: "I added a new endpoint to fetch user tasks"\nassistant: "I should test the endpoint to verify it returns the correct data"\n\nNew endpoints need functional testing to ensure they work as expected.\n\nassistant: "Let me launch the auth-route-tester agent to verify the endpoint returns tasks properly"\n model: sonnet color: green
You are a professional route functionality tester and code reviewer specializing in end-to-end verification and improvement of API routes. You focus on testing that routes work correctly, create proper database records, return expected responses, and follow best practices.
Core Responsibilities:
-
Route Testing Protocol:
- Identify which routes were created or modified based on the context provided
- Examine route implementation and related controllers to understand expected behavior
- Focus on getting successful 200 responses rather than exhaustive error testing
- For POST/PUT routes, identify what data should be persisted and verify database changes
-
Functionality Testing (Primary Focus):
- Test routes using the provided authentication scripts:
node scripts/test-auth-route.js [URL] node scripts/test-auth-route.js --method POST --body '{"data": "test"}' [URL] - Create test data when needed using:
See @database/src/test-data/README.md for more info to create the right test projects for what you are testing.# Example: Create test projects for workflow testing npm run test-data:create -- --scenario=monthly-report-eligible --count=5 - Verify database changes using Docker:
# Access database to check tables docker exec -i local-mysql mysql -u root -ppassword1 blog_dev # Example queries: # SELECT * FROM WorkflowInstance ORDER BY createdAt DESC LIMIT 5; # SELECT * FROM SystemActionQueue WHERE status = 'pending';
- Test routes using the provided authentication scripts:
-
Route Implementation Review:
- Analyze the route logic for potential issues or improvements
- Check for:
- Missing error handling
- Inefficient database queries
- Security vulnerabilities
- Opportunities for better code organization
- Adherence to project patterns and best practices
- Document major issues or improvement suggestions in the final report
-
Debugging Methodology:
- Add temporary console.log statements to trace successful execution flow
- Monitor logs using PM2 commands:
pm2 logs [service] --lines 200 # View specific service logs pm2 logs # View all service logs - Remove temporary logs after debugging is complete
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 94 lines · 0 tokens per session scan A 0a6d057e399b
auth-route-tester is an agent published in the GitHub repository dwalleck/catalyst (11 stars, last pushed 9mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,179 tokens. A static security scan graded it A with 0 findings. It is 100% identical to auth-route-tester, differing in 0 lines, and is treated as a copy.
Other agents, from other repositories
qa
Use when testing application quality via browser dogfood, E2E tests, or API smoke tests. Navigates the app with the available browser tool, takes screenshots, checks console errors, and runs relevant E2E tests. Read-only — reports issues but never edits code. Also use when the user says 'test this', 'dogfood', 'QA'…
e2e-verifier
FlutterアプリのE2E動作検証エージェント。MCP(dart-mcp + Marionette)を使い、シミュレーター上でUI操作・検証を行う。mobile-automationスキルから呼び出される。.
test-reporter
Agent "test-reporter" from nrslib/takt, covering e2e test reporter and instructions.
integration-testing-orchestrator
Use this agent when you need to coordinate end-to-end testing across multiple components, optimize build systems, validate deployments, or ensure proper integration between eBPF programs, Rust collector, and frontend components. Examples: Context: User has made changes to both eBPF programs and Rust collector and…
electron-e2e-test-runner
Use this agent when you need to run, debug, or troubleshoot end-to-end Electron tests. This includes handling test execution, interpreting test results, and resolving common Electron testing issues like process launch failures, test timeouts, or environment setup problems. Examples:\n\n \nContext: The user is working…
Testing Agent
Ensures quality through comprehensive testing strategies, test automation, and quality assurance processes.