Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add idavidov13/agentic-playwright --skill enumsgit clone --depth 1 https://github.com/idavidov13/agentic-playwrightWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/idavidov13/agentic-playwright/enums)<a href="https://agentmods.dev/skills/idavidov13/agentic-playwright/enums"><img src="https://agentmods.dev/badge/skills/idavidov13/agentic-playwright/enums/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/idavidov13/agentic-playwright/enums"><img src="https://agentmods.dev/badge/skills/idavidov13/agentic-playwright/enums.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 87 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 112 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00148 | $0.02772 |
| Opus 5.5 | $0.00059 | $0.01109 |
| Sonnet 5.5 | $0.00030 | $0.00554 |
| Haiku 4.5 | $0.00015 | $0.00277 |
Grade A, and why
enums scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 183 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Enums
Critical
- Convention: TypeScript
enum— the scaffold uses the language constructenum, notas constobject literals. Stay consistent. - Enum name: PascalCase (e.g.,
Messages,ApiEndpoints,Roles,StorageStatePaths). - Enum member: SCREAMING_SNAKE_CASE (e.g.,
LOGIN_SUCCESS,CURRENT_USER,APP). - Location: app-defined strings go in
enums/{area}/*.ts; cross-app constants go inenums/util/*.ts. Do not invent a new top-level folder. - JSDoc: every enum declaration must have a JSDoc comment describing what the enum groups.
- No hardcoded repeat strings. Any string used in more than one place — endpoint paths, UI messages, roles, storage-state paths — must live in an enum and be imported.
- Message values must match the real app. For enums that mirror UI text (error messages, success messages, validation text), the string must be captured via
playwright-clifrom the live app, not guessed. - Edits to existing enum values go through
refactor-values. Renaming a key or changing a value cascades through tests, page objects, and schemas.
File Locations
{area}is a placeholder. Before creating or referencing any path below, runls enums/to discover the real subdirectory names in this repo (e.g.,front-office,back-office) and use those instead.
| Type | Directory | Naming | Scaffold examples |
|---|---|---|---|
| App-specific enums | enums/{area}/ |
[name].ts |
Messages, ApiEndpoints, StorageStatePaths (in enums/app/app.ts) |
| Shared / utility enums | enums/util/ |
[name].ts |
Roles (in enums/util/roles.ts) |
Instructions
Phase 1: Decide if the value belongs in an enum
Use this decision table. Each row points to the canonical home — use it to prevent enums/ from overlapping with config/ or test-data/static/.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 183 lines · 148 tokens per session scan A 914f733b598b
enums is a skill published in the GitHub repository idavidov13/agentic-playwright (235 stars, last pushed 5d ago), licensed MIT. It adds 148 tokens to every session and 2,772 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ultracite
Ultracite is a zero-config linting and formatting preset for JavaScript/TypeScript projects. Use when: (1) Setting up or initializing Ultracite in a project, or migrating its existing lint and format config onto Ultracite (ultracite init), (2) Running linting or formatting commands (check, fix, doctor), (3) Writing or…
freelance-gig-finder
Find fresh freelance and contract opportunities across multiple platforms for any skill set. Use this skill when a user asks "find me freelance React jobs", "Upwork gigs for Python developers", "freelance work posted this week", "contract jobs for designers", "find me remote freelance opportunities for [skill]", "I'm…
fetch
Default, free, and fastest way to read a URL's actual content — pulls clean, full page content (not a summary or a truncated snippet) as markdown, HTML, or structured JSON, including from JavaScript-heavy pages, in parallel across up to 10 URLs in one call. Zero setup, no CLI, no install — first use triggers an OAuth…
oss-bounty-finder
Find paid open-source work, OSS bounties, open source grants, or ways to get paid contributing to open source. Use when someone asks any of the following — "find me paid open source work", "show me OSS bounties for Rust", "how do I get paid for open source", "find GitHub bounties", "are there any open source grants I…
typescript-strict
TypeScript strict mode patterns with interfaces, type guards, generics, and utility types. Use when defining types, creating type-safe functions, handling nullable values, or implementing generic components.
jest-unit
Unit testing skill using Jest for TypeScript and JavaScript, covering mocking, spies, snapshots, coverage, async testing, and custom matchers.