Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/joncik91/ucai/qanpx skills add Joncik91/ucai --skill qagit clone --depth 1 https://github.com/Joncik91/ucaiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/joncik91/ucai/qa)<a href="https://agentmods.dev/skills/joncik91/ucai/qa"><img src="https://agentmods.dev/badge/skills/joncik91/ucai/qa.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00057 | $0.01908 |
| Opus 5 | $0.00028 | $0.00954 |
| Sonnet 5 | $0.00011 | $0.00382 |
| Haiku 4.5 | $0.00006 | $0.00191 |
Grade A, and why
qa scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 158 lines — stays where its author put it; the contents beside it link to each section on GitHub.
QA Engineer
Testing patterns, test design, coverage strategy, and quality automation for any language or framework.
Step 1: Detect the Stack
Before writing tests, identify the language, framework, and test tooling:
| Signal | Test framework likely in use |
|---|---|
vitest.config.* or vitest in package.json |
Vitest |
jest.config.* or jest in package.json |
Jest |
playwright.config.* |
Playwright (E2E) |
cypress.config.* |
Cypress (E2E) |
pytest.ini / pyproject.toml [tool.pytest.*] |
pytest |
*_test.go files |
Go test |
*_spec.rb / spec/ dir |
RSpec |
*.test.cs / xunit.runner.json |
xUnit / NUnit |
*.spec.ts with Angular |
Jasmine + Karma or Jest |
Check: cat package.json, ls -la, cat pytest.ini — whichever applies. Also check existing test files to understand conventions.
Step 2: Research Current Practices
Search for current testing patterns for the detected stack:
WebSearch: "<framework> unit testing best practices 2025"
WebSearch: "<test library> mocking patterns 2025"
WebSearch: "Playwright E2E testing patterns 2025"
WebSearch: "<framework> test coverage strategy 2025"
Step 3: Universal Testing Principles
These apply regardless of language or test framework.
Test Pyramid
- Unit tests (70%): fast, isolated, test one thing; mock all dependencies
- Integration tests (20%): test that components work together; use real dependencies where practical
- E2E tests (10%): test critical user journeys against a real browser/API; keep them minimal and stable
Test Isolation
- Each test is independent — no shared mutable state between tests
- Tests can run in any order and produce the same result
- Clean up after each test (reset DB, clear mocks, restore spies)
- Never depend on test execution order
Naming Conventions
Use a consistent naming pattern that reads as documentation:
<unit>_<condition>_<expected result>
// OR
describe("UserService") {
describe("createUser") {
it("returns 409 when email already exists")
it("hashes password before storing")
it("sends welcome email on success")
}
}
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 158 lines · 57 tokens per session scan A b8b9fc4f2d8a
qa is a skill published in the GitHub repository Joncik91/ucai (29 stars, last pushed 9d ago), licensed MIT. It adds 57 tokens to every session and 1,908 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
infrastructure-planning
Plan and document the required software, infrastructure, and logistics for a Paperclip company — domains, GitHub, Docker Hub, Kubernetes, Slack, Google Workspace, Stripe, shipping providers, and CI/CD pipelines. Use when setting up infrastructure for a new company or auditing what an existing company needs.
work-planning
Design the complete work hierarchy for a Paperclip company — Goals, Projects, and Tasks as a unified top-down planning workflow. Produces .planning.json for deterministic generation of goals/, projects/, and tasks/ directories. Use when creating a new company's work plan, reorganizing work structure, or linking goals…
zasilkovna
Integrate and manage Zásilkovna (Packeta) shipping for Czech and Slovak logistics. Create shipments, generate labels, track packages, manage pickup points, and configure webhooks using the Zásilkovna API. Covers both the REST API and SOAP API. Includes ready-to-run CLI scripts for all API operations. Context: User…
frontend-aesthetics
Design guidance and aesthetic patterns for building beautiful, distinctive frontends — websites, web apps, landing pages. Provides typography strategies, color application, motion choreography, layout composition, and component design recipes. Use when the user asks to "make this look better", "improve the design"…
git-pr
For every git repo in the current folder, create and merge a PR for feature-branch work, then return to the default branch and pull. With no arguments this runs fully autonomously across ALL sub-repos — commit → push → PR → squash-merge → checkout main → pull. Use whenever the user asks to commit, ship, push…
update-docs
Create or update project documentation. If no docs/ folder exists, creates comprehensive documentation from scratch using multiple parallel agents covering architecture, infrastructure, security, tech stack, and features. If docs/ already exists, re-analyzes the codebase and updates all sections EXCEPT docs/features/…