Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/yeisonrestrepo/code-conductor/cc-testgit clone --depth 1 https://github.com/yeisonrestrepo/code-conductorWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00011 | $0.00377 |
| Opus 5 | $0.00005 | $0.00188 |
| Sonnet 5 | $0.00002 | $0.00075 |
| Haiku 4.5 | $0.00001 | $0.00038 |
Grade A, and why
cc-test scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
1. Confirm the app is running: `curl -f http://localhost:3000 || echo "App not running"` What it actually says
Phase 0 — Skill activation
Before doing anything else, invoke the subagent-driven-development Superpowers skill:
Skill({ skill: "subagent-driven-development", args: "$ARGUMENTS" })
Delegate coverage analysis to an Explore sub-agent. Delegate each test file to a separate sub-agent. The main context receives summaries and final file paths only.
Analyze coverage gaps first. Run:
# language-specific coverage command
# e.g.: pnpm test --coverage | tail -20
# e.g.: pytest --cov=src --cov-report=term-missing
Identify what is untested. Prioritize:
- Public functions and API endpoints with no tests
- Error paths and edge cases in critical paths
- Integration points between modules
Strategy:
- Unit: logic with no I/O dependencies
- Integration: modules that talk to a database, API, or file system
- E2E: user-facing flows (use Playwright)
All tests use AAA structure:
// Arrange
// Act
// Assert
Test names: "should [expected behavior] when [condition]"
For E2E with Playwright:
- Confirm the app is running:
curl -f http://localhost:3000 || echo "App not running" - Navigate to the relevant page
- Interact with the UI to trigger the flow
- Capture a screenshot
- Generate the Playwright test
Run tests after writing them. Confirm before running.
Report:
- Passed: N
- Failed: N (with failure messages)
- Skipped: N
- Coverage delta: before → after (if available)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 57 lines · 11 tokens per session scan A bd8007d1ca96
cc-test is a command published in the GitHub repository yeisonrestrepo/code-conductor (6 stars, last pushed 1mo ago), licensed MIT. It adds 11 tokens to every session and 377 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
param-discover
Discover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback). Hidden params are gold for IDOR, SSRF, LFI, redirect, and authorization bypass — often missed by automated scanners. Usage: /param-discover | /param-discover -l.
screenshot
Screenshot a URL or document and read it visually.
barebrowse
Browser automation using the user's real browser with real cookies. Handles consent walls, login sessions, and bot detection automatically.
live-canvas
Conduct design interviews, generate UI variations, and collect live click-to-annotate feedback that streams into the session so edits land without leaving the browser. Use when the user wants rapid iterative UI refinement, not just batched feedback.
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
run-test
Execute AI agent test script in real browser.