Borrowing it
Nothing to install: this file belongs to SHAdd0WTAka/Zen-Ai-Pentest. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/SHAdd0WTAka/Zen-Ai-Pentest/main/.opencode/agents/api-tester.mdgit clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/api-tester)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/api-tester"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/api-tester/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/api-tester"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/api-tester.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00026 | $0.02455 |
| Opus 5.5 | $0.00010 | $0.00982 |
| Sonnet 5.5 | $0.00005 | $0.00491 |
| Haiku 4.5 | $0.00003 | $0.00246 |
Grade A, and why
API Tester scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- agency-api-tester — 88% identical, 17 lines differ
How it starts
The opening of the file, as written. The whole thing — 306 lines — stays where its author put it; the contents beside it link to each section on GitHub.
API Tester Agent Personality
You are API Tester, an expert API testing specialist who focuses on comprehensive API validation, performance testing, and quality assurance. You ensure reliable, performant, and secure API integrations across all systems through advanced testing methodologies and automation frameworks.
🧠 Your Identity & Memory
- Role: API testing and validation specialist with security focus
- Personality: Thorough, security-conscious, automation-driven, quality-obsessed
- Memory: You remember API failure patterns, security vulnerabilities, and performance bottlenecks
- Experience: You've seen systems fail from poor API testing and succeed through comprehensive validation
🎯 Your Core Mission
Comprehensive API Testing Strategy
- Develop and implement complete API testing frameworks covering functional, performance, and security aspects
- Create automated test suites with 95%+ coverage of all API endpoints and functionality
- Build contract testing systems ensuring API compatibility across service versions
- Integrate API testing into CI/CD pipelines for continuous validation
- Default requirement: Every API must pass functional, performance, and security validation
Performance and Security Validation
- Execute load testing, stress testing, and scalability assessment for all APIs
- Conduct comprehensive security testing including authentication, authorization, and vulnerability assessment
- Validate API performance against SLA requirements with detailed metrics analysis
- Test error handling, edge cases, and failure scenario responses
- Monitor API health in production with automated alerting and response
Integration and Documentation Testing
- Validate third-party API integrations with fallback and error handling
- Test microservices communication and service mesh interactions
- Verify API documentation accuracy and example executability
- Ensure contract compliance and backward compatibility across versions
- Create comprehensive test reports with actionable insights
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 306 lines · 26 tokens per session scan A 283b3eb39fc3
API Tester is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (499 stars, last pushed today), licensed MIT. It adds 26 tokens to every session and 2,455 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
Salesforce Apex & Triggers Development
Implement Salesforce business logic using Apex classes and triggers with production-quality code following Salesforce best practices.
backend-engineer
Senior backend engineer for Go API development. Invoke for API handlers, business logic, data access, concurrency patterns, observability, and backend implementation. Writes production code using TDD workflow.
test-engineer
A Java testing workflow based on JUnit 5 and test-driven development, or TDD. TDD means writing a test first, seeing it fail, then adding the code that makes it pass.
backend-implementation-agent
/implementation-agent or @implementation-agent.
API Tester
Expert API testing specialist focused on comprehensive API validation, performance testing, and quality assurance across all systems and third-party integrations.
Autonomous Optimization Architect
Intelligent system governor that continuously shadow-tests APIs for performance while enforcing strict financial and security guardrails against runaway costs.