Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add morodomi/redteam-skills --skill generate-e2egit clone --depth 1 https://github.com/morodomi/redteam-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/morodomi/redteam-skills/generate-e2e)<a href="https://agentmods.dev/skills/morodomi/redteam-skills/generate-e2e"><img src="https://agentmods.dev/badge/skills/morodomi/redteam-skills/generate-e2e.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00022 | $0.00592 |
| Opus 5 | $0.00011 | $0.00296 |
| Sonnet 5 | $0.00004 | $0.00118 |
| Haiku 4.5 | $0.00002 | $0.00059 |
Grade A, and why
generate-e2e scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Generate E2E
security-scan結果からPlaywright E2Eテストコードを自動生成するスキル。
Usage
/generate-e2e # 直前のscan結果からテスト生成
/generate-e2e ./scan-result.json # 指定JSONから生成
/generate-e2e --force # 既存ファイル上書き
Options
| Option | Description | Required |
|---|---|---|
| [path] | security-scan JSON file | No (uses last scan) |
| --force | 既存ファイルを上書き | No |
Input Format
security-scan が出力するJSON形式を入力として受け取る。
{
"metadata": {
"scan_id": "<uuid>",
"scanned_at": "<timestamp>",
"target_directory": "<path>"
},
"summary": {
"total": 3,
"critical": 1,
"high": 1,
"medium": 1,
"low": 0
},
"vulnerabilities": [
{
"id": "XSS-001",
"vulnerability_class": "xss",
"severity": "high",
"file": "app/Controllers/UserController.php",
"line": 45,
"endpoint": "/users/{id}"
}
]
}
Output
生成されるファイルは tests/security/ ディレクトリに出力される。
<target-project>/
└── tests/
└── security/
├── playwright.config.ts # Playwright設定
└── <vuln-type>.spec.ts # 脆弱性別テストファイル
Behavior
Empty Vulnerabilities (0件)
脆弱性が0件の場合、playwright.config.ts のみ生成される。テストファイルは生成されない。
File Overwrite
- デフォルト: 既存ファイルがある場合は警告して中断
- --force: 既存ファイルを強制的に上書き
Workflow
1. security-scan JSON読み込み
2. 脆弱性タイプ別にグループ化
3. テンプレートから設定ファイル生成
4. 各脆弱性タイプのテストファイル生成
5. tests/security/ に出力
Reference
詳細は reference.md を参照。
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- reference.md 7.2 KB
- templates/auth.spec.ts.tmpl 4.9 KB
- templates/base-test.ts.tmpl 622 B
- templates/csrf.spec.ts.tmpl 5.5 KB
- templates/playwright.config.ts.tmpl 661 B
- templates/sqli.spec.ts.tmpl 6.6 KB
- templates/ssrf.spec.ts.tmpl 2.8 KB
- templates/ssti.spec.ts.tmpl 5.5 KB
- templates/xss.spec.ts.tmpl 3.1 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 92 lines · 22 tokens per session scan A 265c8129d0e5
generate-e2e is a skill published in the GitHub repository morodomi/redteam-skills (2 stars, last pushed 6mo ago), licensed MIT. It adds 22 tokens to every session and 592 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
test-native-extension
Validate a third-party control repo across four automated layers plus one printed manual recipe. Layer 1 asserts native-source structure (Android getName() and iOS +moduleName to manifest nativeModule; @ReactMethod / RCTEXPORTMETHOD to methods; no @ReactModule) plus load/init readiness (ReactPackage public no-arg…
test-site
Tests a deployed, activated Power Pages site at runtime using browser-based navigation, page crawling, and API request verification via Playwright. Use when the user wants to test, verify, or smoke-test their deployed site.
qa
Browser-based QA verification. Launches a real browser, navigates the app, clicks buttons, fills forms, and tests user flows. Works as a standalone skill or as a phase end condition in campaigns. Requires Playwright (optional dependency, graceful skip if not installed).
integration-e2e-testing
Integration and E2E test design principles, ROI calculation, test skeleton specification, and review criteria. Use when designing integration tests, E2E tests, or reviewing test quality.
check-and-test
Run lint checks (ruff for Python, Biome for TS/JS), type checks (pyright for Python, tsc for TS/JS), and the standard pytest tiers (unit + e2e + tests skipped during pre-commit). Investigates failures to determine if they are application bugs or test issues, and fixes application bugs rather than weakening tests. Does…
playwright-skill
IMPORTANT - Path Resolution: This skill can be installed in different locations (plugin system, manual installation, global, or project-specific). Before executing any commands, determine the skill directory based on where you loaded this SKILL.md file, and use that path in all commands below.