Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Go1c/workflow-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/go1c/workflow-plugin/qa)<a href="https://agentmods.dev/commands/go1c/workflow-plugin/qa"><img src="https://agentmods.dev/badge/commands/go1c/workflow-plugin/qa/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/go1c/workflow-plugin/qa"><img src="https://agentmods.dev/badge/commands/go1c/workflow-plugin/qa.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.00347 |
| Opus 5.5 | $0.00010 | $0.00139 |
| Sonnet 5.5 | $0.00005 | $0.00069 |
| Haiku 4.5 | $0.00003 | $0.00035 |
Grade A, and why
qa scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
调起 workflow-qa 技能，对下面这张单做线上验收。预设边界：只跑测和验收，不改代码、不修 bug、不改需求、不擅自关单。
按技能要求执行：先过连接与受测环境前置（受测地址取自 .workflow 的 [qa] 段，缺了就停下问我，不要猜）；读单并看完每一张截图附件建立复现基线；在真实线上环境实际操作、原路径至少跑两遍、每个关键步骤截图；首次未复现必须做变体重试；然后按判定表给出唯一一个判定。
结论只来自线上实测 —— 读代码、看提交记录、旧截图都不算验收证据；证据不足就判「阻塞」并告诉我缺什么。
回写按技能的写入顺序生成本地 bundle：上传证据附件 → 追加 description 的 QA 块（原文一字不动）→ 发 QA 评论 → 现查 transitions 后流转 → 需要关单结论的再写 resolution。再由 /workflow:upload 按权限模式逐步写回并验证，部分成功保留草稿并如实报告。
探索中发现的疑似新问题先报给我，不要自行建单。
待验收的单号或描述：
$ARGUMENTS
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 18 lines · 25 tokens per session scan A 4d8c4373ed03
qa is a command published in the GitHub repository Go1c/workflow-plugin (2 stars, last pushed 1mo ago), licensed MIT. It adds 25 tokens to every session and 347 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
a11y-audit
Audit Accessibilité WCAG 2.2 AAA.
fix
Correction automatisee des bugs identifies par la QA Recette.
test-suite
Run comprehensive test suite with coverage analysis.
recette
Tests d'acceptance automatises avec Claude in Chrome.
regression
Voir et gerer le registre de tests de regression QA Recette.
report
Generer des rapports QA Recette a partir des donnees de session.