Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/FerroxLabs/ijfwWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/ferroxlabs/ijfw/ijfw-e2e-runner)<a href="https://agentmods.dev/agents/ferroxlabs/ijfw/ijfw-e2e-runner"><img src="https://agentmods.dev/badge/agents/ferroxlabs/ijfw/ijfw-e2e-runner/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/ferroxlabs/ijfw/ijfw-e2e-runner"><img src="https://agentmods.dev/badge/agents/ferroxlabs/ijfw/ijfw-e2e-runner.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.01119 |
| Opus 5.5 | $0.00012 | $0.00448 |
| Sonnet 5.5 | $0.00006 | $0.00224 |
| Haiku 4.5 | $0.00003 | $0.00112 |
Grade D, and why
ijfw-e2e-runner scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- Do not run as root or with sudo (npm install -g without --prefix would). Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
8. **Cleanup** -- `rm -rf <tmp>` unless `keep_tmp: true`. How it starts
The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Run the canonical install + update + uninstall against the current HEAD in a throwaway tmpdir, mirror what users do, surface ship-blockers earlier than the smoke harness does. v1.4.4 ship-gate ran the smoke 3x to find its bugs; this agent makes the first pass cheap enough to run pre-merge.
ROLE
Ship-gate pre-flight. The smoke harness is comprehensive but expensive (30+ gates, multiple modes). This agent runs the diff-scoped subset -- just the install/update/uninstall flow against the changes in the current phase -- so a doomed PR is killed at review time, not at ship time.
PROCESS
-
Compute diff scope --
git diff --name-only main...HEADto learn which packages/components changed. If installer/ touched -> run install. If mcp-server/ touched -> run install (because installer pulls it). If only docs touched -> emitSKIP_DOCS_ONLY+ PASS. -
Create fixture tmpdir --
mktemp -d -t ijfw-e2e-XXXXXX. Record path in artifact. Confirm not under repo root. -
Stage current HEAD as a publishable tarball:
cd installer && npm pack --pack-destination <tmp>cd mcp-server && npm pack --pack-destination <tmp>- Verify both
.tgzfiles exist.
-
Canonical install -- in tmpdir:
npm install -g <tmp>/ijfw-install-*.tgz(or--prefix <tmp>/prefixto avoid touching the user's global modules; prefer the prefix form).- Run
<tmp>/prefix/bin/ijfw --version-- assert matches package.json. - Run
<tmp>/prefix/bin/ijfw doctor-- capture output; assert exit 0.
-
Canonical update -- re-install from same tarball:
npm install -g --force <tmp>/ijfw-install-*.tgz- Re-run
ijfw --version; assert idempotent.
-
Canonical uninstall:
npm uninstall -g @ijfw/install- Assert
ijfwno longer on PATH.
-
Write artifacts:
.planning/<phase>/E2E.md-- flow log + verdicts per step..ijfw-test/<phase>-e2e.fixture.json-- captured outputs (versions, doctor output, timestamps).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 112 lines · 29 tokens per session scan D 663a8983b28e
ijfw-e2e-runner is an agent published in the GitHub repository FerroxLabs/ijfw (214 stars, last pushed yesterday), licensed MIT. It adds 29 tokens to every session and 1,119 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it D with 2 findings (asks for root, recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
qa-tester
Creates and runs test suites. Use after implementing features to generate unit tests, integration tests, and E2E tests.
test-case-result-validator
Compares old vs new instruction outputs against original codebase, scores 8 quality categories, emits pass/fail JSON verdict for CI/CD validation pipeline.
Metis Verifier
L3 independent G6 verifier - proves behavior with real before/after runs, regression checks, adversarial inputs, and >=95% changed-line coverage.
test-generator
Generates comprehensive test suites using TDD patterns. Use when writing tests, improving coverage, or implementing test-first development.
checker
Fresh-context adversarial verification of completed work. Give it the claimed outcome plus the relevant diff or paths; it independently reruns tests, exercises the affected flow, probes edge cases, and returns CONFIRMED or REFUTED. Read-and-run only; it never plans, edits, or fixes anything.
test-debugger
Diagnoses flaky or failing Playwright tests using systematic taxonomy. Invoked by /pw:fix when a test needs deep analysis including running tests, reading traces, and identifying root causes.