setup

A setup guide for CapusQA, a tool for testing websites and native apps through browser and screen interactions.

In plain words
What is it for?
Use it the first time CapusQA is run, or when adding test personas and login details to a project.
Why use it?
It helps prepare missing permissions, optional vision models, browser targets, and project test data before testing begins.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/danielbirk04/capusqa/setup
Any agent
npx skills add DanielBirk04/capusqa --skill setup
Clone the repo
git clone --depth 1 https://github.com/DanielBirk04/capusqa

Made for: Claude Code, Codex.

Per session 85 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 693 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00085 $0.00693
Opus 5 $0.00043 $0.00347
Sonnet 5 $0.00017 $0.00139
Haiku 4.5 $0.00009 $0.00069

Measured yesterday against content hash 829db5a85963, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

setup scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

env var is set. `curl -s $BASE/api/status` first — no response ⇒ `capusqa serve`
client/claude/capusqa/skills/setup/SKILL.md · 47 lines

How it starts

The opening of the file, as written. The whole thing — 47 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/capusqa:setup — get ready to test

Walk a new user from zero to a runnable test. The MCP + plugin are already wired (that's how you got here — the CLI capusqa setup does that part); this finishes the environment and preps the project.

Reaching the daemon

BASE = the capusqa URL in .mcp.json (default http://127.0.0.1:7777). POST routes add -H "Authorization: Bearer $CAPUSQA_DASHBOARD_TOKEN" only if that env var is set. curl -s $BASE/api/status first — no response ⇒ capusqa serve (see /capusqa:help).

1 — Environment (same checks as Home → System status)

curl -s $BASE/api/doctor{checks:[…]}. Walk the reds; the fix for each:

  • macOS Accessibility / Screen-Recording (needed for native-app clicks / typing / screenshots): POST $BASE/api/doctor/request fires the OS dialogs; the user approves in System Settings → Privacy & Security. Web/URL testing needs neither.
  • OmniParser vision models (icon perception; optional — text/DOM works without): download via /capusqa:update step 5, or POST $BASE/api/models/download then poll curl -s $BASE/api/models/status until ready (~1.5 GB).
  • Browser targets missing → uv tool install 'capusqa[browser]' && playwright install chromium. Re-check curl -s $BASE/api/doctor until the required rows are green. (If the MCP or plugin themselves show unregistered, the CLI capusqa setup re-wires them.)

2 — Project prep (so a run reaches the deep half of the app)

Optional but high-leverage — all via /capusqa:settings:

  • Personas: the standard panel for speed, or a project-specific set (/capusqa:settings → Personas).
  • A login, if the app needs one (/capusqa:settings → Saved secrets, or → Role logins to wire a per-URL account with its role/tenant).

3 — Test

You're ready: /capusqa:test to launch, /capusqa:runs to watch, /capusqa:issues for what it finds.

When something's off

Daemon down → capusqa serve. Permissions won't stick → approve in System Settings, then re-/capusqa:doctor. Version looks stale → /capusqa:update. More → /capusqa:help.

Read the full file on GitHub · 47 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 47 lines · 85 tokens per session scan A 829db5a85963

Subscribe to this mod's changes

setup is a skill published in the GitHub repository DanielBirk04/capusqa (0 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 85 tokens to every session and 693 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

use-agent-browser-for-airi

Test AIRI display-model imports with agent-browser across stage-tamagotchi Electron, stage-web, and stage-pocket mobile web layouts. Use when uploading and verifying contributor-supplied Live2D ZIP, VRM, or MMD ZIP/PMX/PMD files through AIRI's model selector, including onboarding bypass, format-specific import…

moeru-ai/airi · 87 tokens

opencli-sitemap-author

Use when creating or maintaining OpenCLI site sitemaps: agent-facing navigation, page-state, action, workflow, API-reference, pitfall, and fallback knowledge for a website. Use after browser exploration discovers durable site context, when a sitemap is stale, or when promoting local site knowledge into the repo.

jackwener/OpenCLI · 67 tokens

debug-optimize-lcp

Guides debugging and optimizing Largest Contentful Paint (LCP) using Chrome DevTools MCP tools. Use this skill whenever the user asks about LCP performance, slow page loads, Core Web Vitals optimization, or wants to understand why their page's main content takes too long to appear. Also use when the user mentions…

ChromeDevTools/chrome-devtools-mcp · 99 tokens

pinchtab-mcp

Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.

pinchtab/pinchtab · 52 tokens

traceway-setup

Analyze and instrument repositories for Traceway observability. Use when the user wants to plan, add, migrate, or verify Traceway or OpenTelemetry monitoring for backend, browser, full-stack, mobile or iOS, or AI-agent software, including project topology and user-approved setup-plan creation. Backends use OTLP/HTTP…

tracewayapp/traceway · 134 tokens

southwest

Search Southwest Airlines fares and points pricing via Patchright browser automation. SW is not in any GDS or API. Covers all fare classes, Companion Pass value, and fare drop monitoring.

borski/travel-hacking-toolkit · 40 tokens