qa-only

qa-only is a command for Claude Code from an8079/take-skills. It costs 36 tokens per session (2,065 once invoked), scanned A, original, MIT.

A reporting-only command for systematic web-application quality checks. It explores a supplied or locally running website, detects relevant project details and tests, and produces a structured report with a health score and screenshots.

In plain words
What is it for?
Use it to test a website or local web app, run quick smoke checks or fuller reviews, inspect navigation and console errors, and save screenshots and findings in a QA report.
Why use it?
It helps find and document defects without changing the application’s code. The report provides evidence that developers can use to decide what to fix.

Command for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the claude-dev-assistant plugin — 21 skills, 39 commands shipped together

Good fit Use it to test a website or local web app, run quick smoke checks or fuller reviews, inspect navigation and console errors, and save screenshots and findings in a QA report.

Compare 6 commands from other repositories ↓
Install with agentmods
npx agentmods add commands/an8079/take-skills/takes-qa-only
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/an8079/take-skills

Made for: Claude Code.

Or install claude-dev-assistant, the plugin that ships this one along with the rest of its 21 skills, 39 commands.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for qa-only

README.md
[![agentmods](https://agentmods.dev/badge/commands/an8079/take-skills/takes-qa-only/github.svg)](https://agentmods.dev/commands/an8079/take-skills/takes-qa-only)
Your own site
<a href="https://agentmods.dev/commands/an8079/take-skills/takes-qa-only"><img src="https://agentmods.dev/badge/commands/an8079/take-skills/takes-qa-only/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for qa-only

Your own site · 80×15
<a href="https://agentmods.dev/commands/an8079/take-skills/takes-qa-only"><img src="https://agentmods.dev/badge/commands/an8079/take-skills/takes-qa-only.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 36 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,065 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00036 $0.02065
Opus 5 $0.00018 $0.01033
Sonnet 5 $0.00007 $0.00413
Haiku 4.5 $0.00004 $0.00206

Measured 9d ago against content hash 1b16fc5bf557, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

qa-only scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

  • qa — 88% identical, 76 lines differ
commands/takes-qa-only.md · 255 lines

How it starts

The opening of the file, as written. The whole thing — 255 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/qa-only - 仅报告模式

对 Web 应用进行系统性 QA 测试,生成带证据的结构化报告。绝不修复任何代码。

使用方式

/qa-only                              # 标准报告
/qa-only https://example.com          # 测试指定 URL
/qa-only --quick                      # 快速冒烟测试(30秒)

Phase 1: 初始化

检测项目运行时:

[ -f package.json ] && echo "RUNTIME:node"
[ -f Gemfile ] && echo "RUNTIME:ruby"
[ -f requirements.txt ] || [ -f pyproject.toml ] && echo "RUNTIME:python"
[ -f go.mod ] && echo "RUNTIME:go"
[ -f Cargo.toml ] && echo "RUNTIME:rust"

检测测试框架:

ls jest.config.* vitest.config.* playwright.config.* .rspec pytest.ini pyproject.toml phpunit.xml 2>/dev/null
ls -d test/ tests/ spec/ __tests__/ cypress/ e2e/ 2>/dev/null

创建输出目录:

mkdir -p .claude-studio/qa-reports/screenshots

Phase 2: 目标 URL

优先从用户请求中解析 URL:

  • 用户提供了 URL → 直接使用
  • 用户未提供 URL → 检查本地端口(localhost:3000/4000/8080
  • 无法检测 → 询问用户

检查 git 分支(diff-aware 模式):

git branch --show-current
git diff main...HEAD --name-only
git log main..HEAD --oneline

如果提供了 URL 但在特性分支上,优先测试受分支变更影响的页面。


Phase 3: 探索

Orient - 应用地图

  1. 访问目标 URL
  2. 获取导航结构(linkssnapshot -i
  3. 检查控制台错误
  4. 检测框架:
    • HTML 含 __next → Next.js
    • csrf-token → Rails
    • wp-content → WordPress
    • 客户端路由无页面重载 → SPA

Explore - 系统性遍历

每个页面:

  1. 截图存档(screenshot
  2. 检查控制台错误(console --errors
  3. 点击所有按钮/链接,验证响应
  4. 填写表单并提交(空提交、无效数据、边界值)
  5. 检查导航路径
  6. 检查各状态(空状态、加载状态、错误状态、溢出状态)
  7. 响应式检查(移动端 viewport)

优先级: 核心功能(首页、仪表盘、结账、搜索)多花时间,次要页面(关于页、条款页)少花时间。

Quick 模式

仅访问首页 + 顶部 5 个导航目标。检查:页面加载?控制台错误?可见的失效链接?无详细问题文档。


Phase 4: 记录

每个问题立即记录,不要批量。

截图证据要求:

  • 交互式 bug:操作前截图 → 执行操作 → 结果截图
  • 静态 bug(布局问题、错字):单张带标注截图

使用 Read 工具展示截图给用户。


Phase 5: 健康评分

计算各类别分数(0-100),取加权平均。

评分规则

类别 权重
Console 15%
Links 10%
Visual 10%
Functional 20%
UX 15%
Performance 10%
Content 5%
Accessibility 15%

Console(权重 15%)

  • 0 错误 → 100
  • 1-3 错误 → 70
  • 4-10 错误 → 40
  • 10+ 错误 → 10

Read the full file on GitHub · 255 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 255 lines · 36 tokens per session scan A 1b16fc5bf557

Subscribe to this mod's changes

qa-only is a command published in the GitHub repository an8079/take-skills (4 stars, last pushed 5mo ago), licensed MIT. It adds 36 tokens to every session and 2,065 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.