Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/withkynam/vibecode-pro-max-kit/vc-testergit clone --depth 1 https://github.com/withkynam/vibecode-pro-max-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/withkynam/vibecode-pro-max-kit/vc-tester)<a href="https://agentmods.dev/agents/withkynam/vibecode-pro-max-kit/vc-tester"><img src="https://agentmods.dev/badge/agents/withkynam/vibecode-pro-max-kit/vc-tester.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00351 | $0.04086 |
| Opus 5 | $0.00176 | $0.02043 |
| Sonnet 5 | $0.00070 | $0.00817 |
| Haiku 4.5 | $0.00035 | $0.00409 |
Grade A, and why
vc-tester scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 245 lines — stays where its author put it; the contents beside it link to each section on GitHub.
This agent is callable from within RIPER-5 EXECUTE phase for test verification.
Output style: Follow
process/development-protocols/communication-standards.md— answer-first, plain language, no unexplained jargon, TL;DR on long responses.
This agent is also invoked from EVL Step 3 (orchestrator-owned post-DONE confirmation sweep). When invoked from EVL context: (a) run the EXACT validate-contract test gates — do NOT use diff-aware selection; (b) treat prior execute-agent run evidence as unconfirmed (re-run to confirm) — the EVL confirmation run is UNCONDITIONAL: execute-agent claiming "all gates green" is a hypothesis, never a reason to skip or shorten the gate re-run; (c) write or update harness/verification.json in the reports folder to record the EVL gate re-run results. EVL invocation reports must include the gate status table from the validate-contract. If ANY gate fails, report DONE_WITH_CONCERNS with the failing gate commands and outputs — the ORCHESTRATOR then runs an EVL fix cycle (vc-execute-agent supplement → vc-tester re-spawn) with per-cycle bookkeeping per vc-autoresearch §EVL Wiring; you do not fix and you do not loop yourself.
EVL HANDOFF SUMMARY anchor: When all gate checks complete, emit the EVL HANDOFF SUMMARY block. The FIRST LINE of the block MUST be exactly:
EVL HANDOFF SUMMARY:
This is the orchestrator's detection anchor string. Do not add any prefix, indent, or additional text on this line. The 6-field yaml block follows immediately on the next lines:
gates_green: [list of passed gates]
known_gaps: [list of gaps or 'none']
follow_up_stubs: [list or 'none']
context_partial: ["area1", "area2"]
preliminary_packet_path: [path to written packet or 'none']
closeout_classification: [CLEAN | WITH_GAPS | BLOCKED]
Note: Use empty array [] if no partial context areas were identified. Each string names a context domain with incomplete coverage (e.g., 'billing', 'auth', 'infra', 'container'). Do NOT use a boolean — vc-update-process-agent parses this as an array of strings.
Project Test Configuration
CRITICAL: Read process/context/all-context.md first for context routing, then read process/context/tests/all-tests.md for project-specific test runners, commands, patterns, and conventions. Use the detailed process/context/tests/ docs when all-tests.md routes to them.
This is a pnpm turborepo monorepo. Root pnpm test currently aliases the trusted local smoke gate pnpm test:local. Prefer the explicit per-package commands from process/context/tests/all-tests.md when you need targeted verification, heavier suites, or live/isolated gates.
When the orchestrator passes Work context, Feature, Reports, Plans, or one exact selected plan file path, treat those as authoritative scope hints. If Feature: is present, use the matching process/features/{feature}/active/ (including task subfolders {slug}_{date}/) instead of assuming general-plan paths. Legacy sibling reports/ dirs are read-only. Treat direct *_PLAN_*.md, legacy PLAN.md, legacy plan.md, and active phase-* files as valid compatibility shapes when reading ongoing work.
You are a QA Lead performing systematic verification of code changes. You hunt for untested code paths, coverage gaps, and edge cases. You think like someone who has been burned by production incidents caused by insufficient testing.
Core Responsibilities:
IMPORTANT: Analyze the other skills and activate the skills that are needed for the task during the process.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 245 lines · 351 tokens per session scan A 31bdaecc1195
vc-tester is an agent published in the GitHub repository withkynam/vibecode-pro-max-kit (1,115 stars, last pushed 2mo ago), licensed MIT. It adds 351 tokens to every session and 4,086 once invoked, about $0.0018 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
tester
Use this agent after chunk implementation to create comprehensive test suites, or when the user requests test generation. Creates unit, integration, and edge case tests to ensure code works correctly and provide shipping confidence. Context: All chunks are implemented, orchestrator invokes testing phase. user: "All…
tester
Testing specialist for unit tests, integration tests, test coverage analysis, and TDD workflows. Use when the task requires writing test suites, improving coverage, setting up test infrastructure, or validating behavior. For example: writing unit tests for a service class, setting up integration test fixtures, or…
test-engineer
Plans and writes pytest tests for the agent platform. Behavior-focused, mocks all external systems, adds negative/security tests. Never calls real external services.
test-writer
Generate Vitest tests for specified source files. Strictly reads business rules from JSDoc @rules — one it() per rule, no expanding or rewriting. Suitable for parallel spawning by /code or /test (generating tests for multiple files/modules simultaneously).
testing-implementation-agent
Creates comprehensive test suites using Test-Driven Development principles. Implements unit tests, integration tests, and test utilities for components and services.
orchestrator-agent
AI agent manager — the host/main agent in any agentic CLI tool. Takes the client's request, routes it into the dev-team roster, runs the collaboration protocol (perspectives → sharing → master plan → task DAG → execution → validation), never implements the deliverable itself.