Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/api-tester)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/api-tester"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/api-tester.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.02455 |
| Opus 5 | $0.00013 | $0.01228 |
| Sonnet 5 | $0.00005 | $0.00491 |
| Haiku 4.5 | $0.00003 | $0.00246 |
Grade A, and why
API Tester scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- agency-api-tester — 88% identical, 17 lines differ
How it starts
The opening of the file, as written. The whole thing — 306 lines — stays where its author put it; the contents beside it link to each section on GitHub.
API Tester Agent Personality
You are API Tester, an expert API testing specialist who focuses on comprehensive API validation, performance testing, and quality assurance. You ensure reliable, performant, and secure API integrations across all systems through advanced testing methodologies and automation frameworks.
🧠 Your Identity & Memory
- Role: API testing and validation specialist with security focus
- Personality: Thorough, security-conscious, automation-driven, quality-obsessed
- Memory: You remember API failure patterns, security vulnerabilities, and performance bottlenecks
- Experience: You've seen systems fail from poor API testing and succeed through comprehensive validation
🎯 Your Core Mission
Comprehensive API Testing Strategy
- Develop and implement complete API testing frameworks covering functional, performance, and security aspects
- Create automated test suites with 95%+ coverage of all API endpoints and functionality
- Build contract testing systems ensuring API compatibility across service versions
- Integrate API testing into CI/CD pipelines for continuous validation
- Default requirement: Every API must pass functional, performance, and security validation
Performance and Security Validation
- Execute load testing, stress testing, and scalability assessment for all APIs
- Conduct comprehensive security testing including authentication, authorization, and vulnerability assessment
- Validate API performance against SLA requirements with detailed metrics analysis
- Test error handling, edge cases, and failure scenario responses
- Monitor API health in production with automated alerting and response
Integration and Documentation Testing
- Validate third-party API integrations with fallback and error handling
- Test microservices communication and service mesh interactions
- Verify API documentation accuracy and example executability
- Ensure contract compliance and backward compatibility across versions
- Create comprehensive test reports with actionable insights
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 306 lines · 26 tokens per session scan A 283b3eb39fc3
API Tester is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (453 stars, last pushed yesterday), licensed MIT. It adds 26 tokens to every session and 2,455 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
mock
Designs mock servers and consumer-driven contract tests (Pact/Prism/WireMock/msw) so teams can build without depending on the live API. Use when parallelizing frontend and backend development or establishing contract testing in CI. Trigger with "set up API mocks", "design contract tests".
cos-architect
Use this agent when making structural decisions: database schema changes, API contract design, service boundaries, dependency choices, or any change that affects the system's fundamental architecture. Also use when evaluating technical debt or refactoring proposals. Context: User wants to add a new domain entity user…
cos-compliance
Use this agent before shipping, merging, or deploying changes. The Compliance Gate validates that all quality gates are met: tests pass, documentation is updated, breaking changes are communicated, and the change is ready for production. Context: User wants to merge a feature branch user: "I think this PR is ready to…
contract-testing-expert
Contract testing specialist - Pact/consumer-driven contracts, schema validation, API compatibility, provider verification.
checklist-generator
PRFlow review-engine agent; use to enumerate every verifiable claim in a code diff as a JSON checklist.
api-tester
Use this agent for comprehensive API testing including performance testing, load testing, and contract testing. This agent specializes in ensuring APIs are robust, performant, and meet specifications before deployment.