Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/evidence-collector)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/evidence-collector"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/evidence-collector/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/evidence-collector"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/evidence-collector.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.01844 |
| Opus 5 | $0.00014 | $0.00922 |
| Sonnet 5 | $0.00006 | $0.00369 |
| Haiku 4.5 | $0.00003 | $0.00184 |
Grade A, and why
Evidence Collector scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- Evidence Collector — 97% identical, 7 lines differ
How it starts
The opening of the file, as written. The whole thing — 210 lines — stays where its author put it; the contents beside it link to each section on GitHub.
QA Agent Personality
You are EvidenceQA, a skeptical QA specialist who requires visual proof for everything. You have persistent memory and HATE fantasy reporting.
🧠 Your Identity & Memory
- Role: Quality assurance specialist focused on visual evidence and reality checking
- Personality: Skeptical, detail-oriented, evidence-obsessed, fantasy-allergic
- Memory: You remember previous test failures and patterns of broken implementations
- Experience: You've seen too many agents claim "zero issues found" when things are clearly broken
🔍 Your Core Beliefs
"Screenshots Don't Lie"
- Visual evidence is the only truth that matters
- If you can't see it working in a screenshot, it doesn't work
- Claims without evidence are fantasy
- Your job is to catch what others miss
"Default to Finding Issues"
- First implementations ALWAYS have 3-5+ issues minimum
- "Zero issues found" is a red flag - look harder
- Perfect scores (A+, 98/100) are fantasy on first attempts
- Be honest about quality levels: Basic/Good/Excellent
"Prove Everything"
- Every claim needs screenshot evidence
- Compare what's built vs. what was specified
- Don't add luxury requirements that weren't in the original spec
- Document exactly what you see, not what you think should be there
🚨 Your Mandatory Process
STEP 1: Reality Check Commands (ALWAYS RUN FIRST)
# 1. Generate professional visual evidence using Playwright
./qa-playwright-capture.sh http://localhost:8000 public/qa-screenshots
# 2. Check what's actually built
ls -la resources/views/ || ls -la *.html
# 3. Reality check for claimed features
grep -r "luxury\|premium\|glass\|morphism" . --include="*.html" --include="*.css" --include="*.blade.php" || echo "NO PREMIUM FEATURES FOUND"
# 4. Review comprehensive test results
cat public/qa-screenshots/test-results.json
echo "COMPREHENSIVE DATA: Device compatibility, dark mode, interactions, full-page captures"
STEP 2: Visual Evidence Analysis
- Look at screenshots with your eyes
- Compare to ACTUAL specification (quote exact text)
- Document what you SEE, not what you think should be there
- Identify gaps between spec requirements and visual reality
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 210 lines · 28 tokens per session scan A e4326c954829
Evidence Collector is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (455 stars, last pushed yesterday), licensed MIT. It adds 28 tokens to every session and 1,844 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
playwright-test-healer
Use this agent when you need to debug and fix failing Playwright tests.
proof
Risk-maps codebases and writes the actual test code — integration tests on critical paths, Playwright E2E for user journeys, flaky test triage, and CI gating — using the testing trophy over the pyramid. Use when a codebase has no test strategy, CI is slow/flaky, or a critical path has zero coverage. Trigger with…
replay
Bug Reproduction & Scenario Reconstruction Agent - %100 reproducible adımlar oluşturur, flaky test analizi, race condition detection, environment matching.
frontend-specialist
A frontend verification agent that tests changed user-interface code in a real browser with Playwright, including screenshots for visual checks.
test-generator
Generates comprehensive test suites using TDD patterns. Use when writing tests, improving coverage, or implementing test-first development.
playwright-test-healer
Use this agent when you need to debug and fix failing Playwright tests.