Borrowing it
Nothing to install: this file belongs to DIGI-UW/OpenELIS-Global-2. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/DIGI-UW/OpenELIS-Global-2/develop/.ai/skills/playwright/commands/audit-playwright.mdgit clone --depth 1 https://github.com/DIGI-UW/OpenELIS-Global-2Wrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/digi-uw/openelis-global-2/audit-playwright)<a href="https://agentmods.dev/commands/digi-uw/openelis-global-2/audit-playwright"><img src="https://agentmods.dev/badge/commands/digi-uw/openelis-global-2/audit-playwright.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00445 |
| Opus 5 | $0.00000 | $0.00222 |
| Sonnet 5 | $0.00000 | $0.00089 |
| Haiku 4.5 | $0.00000 | $0.00044 |
Grade A, and why
audit-playwright scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Audit Playwright
Use this command to audit Playwright tests and helpers for stability, maintainability, and adherence to OpenELIS best practices.
User Input
$ARGUMENTS
Interpret input best-effort:
/audit-playwright- audit changed Playwright files/audit-playwright <spec-or-helper>- audit specific file(s)
Audit Checklist
-
Selector quality
- Prefer
data-testid/ semantic locators over fragile CSS selectors. - Flag broad fallback selector chains and unnecessary
.first()usage.
- Prefer
-
Runtime correctness
- Ensure assertions align with actual DOM behavior (e.g., input value vs text).
- Ensure waits rely on Playwright assertions/events, not fixed sleeps.
-
Project integration
- Verify new specs are included in
playwright.config.tstestMatch. - For demo tests, verify they are included in
CORE_DEMO_TESTSorHARNESS_DEMO_TESTS.
- Verify new specs are included in
-
Debuggability
- Ensure tests emit enough context on failure (URL, key state/logs).
- Confirm helpers keep deterministic behavior.
-
Repo policy alignment
- Use
videoPause()for demo pacing, notwaitForTimeout(). - Keep tests focused and avoid multi-concern mega-tests when possible.
- Use
-
Anti-pattern detection
- Flag
response.ok()orresponse.status()used as pass/fail signal - Flag
{ force: true }without a justifying comment about Carbon - Flag
.catch(() => false)onisVisible()calls (dead code) - Flag
isVisible({ timeout: N })— timeout param is deprecated - Flag tests with no
expect()calls - Flag
page.getByLabel("text").check()on Carbon inputs (targets hidden element)
- Flag
Required References
.ai/skills/playwright/reference/selector-policy.md.ai/skills/playwright/reference/debug-workflow.md.specify/guides/playwright-best-practices.md
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 60 lines · 0 tokens per session scan A 48b0e12c0bd8
audit-playwright is a command published in the GitHub repository DIGI-UW/OpenELIS-Global-2 (251 stars, last pushed today), licensed MPL-2.0. It costs nothing until one of its globs matches a file; then it loads 445 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
paul:verify
Guide manual user acceptance testing of recently built features.
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
ui-snapshot.template
This prompt was authored for Claude-style slash workflows. In Codex runtime, adapt tool calls as follows.
verify-pr
Verify a PR's frontend changes through browser automation.
harness-eval
A four-level verification command for completed software tasks. It checks whether the code builds, matches its documented contracts, works end to end, and follows the project's governing rules.
test-run
Run E2E tests with qa-use CLI.