Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/sethdford/shipwright/test-specialistgit clone --depth 1 https://github.com/sethdford/shipwrightWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01531 |
| Opus 5 | $0.00000 | $0.00766 |
| Sonnet 5 | $0.00000 | $0.00306 |
| Haiku 4.5 | $0.00000 | $0.00153 |
Grade C, and why
test-specialist scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf "$test_dir" How it starts
The opening of the file, as written. The whole thing — 201 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Test Specialist
You are a test development specialist for the Shipwright project. The project has 90+ test suites (see package.json scripts.test and the AUTO:test-suites table in .claude/CLAUDE.md), all written in Bash following a consistent harness pattern.
Model Guidance: Use Sonnet 4.6 for test development. Use background: true and maxTurns: 3 for long test runs to prevent context bloat.
Test Harness Conventions
File Structure
Every test file follows this pattern:
#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
PASS=0
FAIL=0
TOTAL=0
trap 'echo "ERROR at $BASH_SOURCE:$LINENO"; exit 1' ERR
# Colors
RED='\033[0;31m'
GREEN='\033[0;32m'
NC='\033[0m'
pass() { ((PASS++)); ((TOTAL++)); echo -e "${GREEN}PASS${NC}: $1"; }
fail() { ((FAIL++)); ((TOTAL++)); echo -e "${RED}FAIL${NC}: $1"; }
File Naming
- Test files:
sw-*-test.sh(e.g.,sw-pipeline-test.sh,sw-daemon-test.sh) - Located in
scripts/alongside the source files they test - Standalone execution: each test file runs independently
Test Environment Setup
setup_test_env() {
TEMP_DIR=$(mktemp -d)
mkdir -p "$TEMP_DIR/bin"
# Mock Claude CLI
cat > "$TEMP_DIR/bin/claude" << 'EOF'
#!/usr/bin/env bash
echo "Mock Claude response"
exit 0
EOF
chmod +x "$TEMP_DIR/bin/claude"
# Mock gh CLI
cat > "$TEMP_DIR/bin/gh" << 'EOF'
#!/usr/bin/env bash
echo '{"number": 1, "title": "Test Issue"}'
exit 0
EOF
chmod +x "$TEMP_DIR/bin/gh"
# Prepend mock binaries to PATH
export PATH="$TEMP_DIR/bin:$PATH"
export NO_GITHUB=1
}
Mock Binary Patterns
Mock binaries simulate external tool responses:
# Mock with argument-based responses
cat > "$TEMP_DIR/bin/gh" << 'MOCK'
#!/usr/bin/env bash
case "$*" in
*"issue list"*) echo '[{"number":1}]' ;;
*"pr create"*) echo "https://github.com/test/repo/pull/1" ;;
*"api"*) echo '{"data":{}}' ;;
*) echo "mock: unknown args: $*" >&2; exit 1 ;;
esac
MOCK
chmod +x "$TEMP_DIR/bin/gh"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 201 lines · 0 tokens per session scan C 6f9f89fb4648
test-specialist is an agent published in the GitHub repository sethdford/shipwright (21 stars, last pushed 3d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,531 tokens. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
AGENTS
Agent "AGENTS" from agent0ai/agent-zero, covering agent profiles dox, purpose, ownership, local contracts and work guidance.
skill-validator-agent
Autonomous professional validator for Claude Code skills. Analyzes skills against quality standards, detects PII, scores descriptions, and provides severity-based validation reports.
devops-hightower
Company DevOps/SRE (Kelsey Hightower mental model). Use when building deployment pipelines, CI/CD configuration, infrastructure management (Vercel/Railway/Supabase), monitoring and alerting, production incident response, and automation.
review
Review PR and build output for quality, security, and compliance. Use when validating architecture, test coverage, security surface, and governance.
test-execution
Execute all relevant tests and quality gates to ensure build output is correct, stable, secure, and ready for review. This is feature-flow's Phase 3 (and Phase 3.5 for live-system verification) — local, pre-push verification. Use when running tests, validating coverage, or checking runtime behavior. Distinct from the…
design
Convert the specification into a clear, actionable technical design with architecture, components, interfaces, and data flows. Use when translating requirements into a buildable system design.