Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add timzaak/web-dev-skills/plugin install t-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/timzaak/web-dev-skills/t-web-demo-accept)<a href="https://agentmods.dev/skills/timzaak/web-dev-skills/t-web-demo-accept"><img src="https://agentmods.dev/badge/skills/timzaak/web-dev-skills/t-web-demo-accept/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/timzaak/web-dev-skills/t-web-demo-accept"><img src="https://agentmods.dev/badge/skills/timzaak/web-dev-skills/t-web-demo-accept.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00023 | $0.00987 |
| Opus 5 | $0.00012 | $0.00494 |
| Sonnet 5 | $0.00005 | $0.00197 |
| Haiku 4.5 | $0.00002 | $0.00099 |
Grade A, and why
t-web-demo-accept scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Demo 测试验收
运行时边界统一参考:${CLAUDE_PLUGIN_ROOT}/protocols/runtime-boundaries.md
需求来源边界统一参考:${CLAUDE_PLUGIN_ROOT}/protocols/requirement-source-contract.md
目标
- 验证测试是否覆盖用户故事。
- 验证测试是否可编译、可运行且全部通过。
- 输出结构化验收报告到
.ai/quality/。
参数
/t-tools:t-web-demo-accept [target]
target 说明:
- 测试文件路径:
demo/e2e/<role>/<scenario>.e2e.ts - 角色名:按目标项目
demo/e2e/下的实际角色目录匹配 all或留空:验收全部 Demo 测试
执行流程
-
识别目标测试文件。
-
若是文件路径:仅处理该文件。
-
若是角色名:匹配
demo/e2e/**下对应文件。 -
若是
all或空:扫描demo/e2e/**/*.e2e.ts,排除fixtures/、templates/、verification/。 -
用户故事一致性检查(必须)。
-
读取测试文件顶部注释中的用户故事路径。
-
校验用户故事文件存在;交付测试文件只允许引用
docs/user-stories/...,不接受.ai/user-stories/...(见${CLAUDE_PLUGIN_ROOT}/protocols/code-comment-contract.md)。 -
核对场景覆盖、角色匹配、关键断言与验收标准。
-
编译检查(必须)。
cd demo && npm run build
- 测试执行检查(必须)。
uv run scripts/web-demo-test-runner.py "[测试文件]" --mode fast --log-level mini
-
若任一测试失败、超时或编译失败,直接判定该文件
REJECTED。 -
代码质量检查。
grep -n "verifyTestEnvironment\|cleanupDemoTestData" [测试文件路径]
grep -n "UnifiedLogger\|logger\." [测试文件路径]
grep -n "waitForTimeout" [测试文件路径]
grep -n "data-testid\|getByRole\|getByText" [测试文件路径]
npx jscpd --pattern "**/*.ts" --reporters console demo/e2e
wc -l [测试文件路径]
- 生成报告。
- 单文件:
.ai/quality/web-demo-accept-[name]-[YYYYMMDD-HHMMSS].md - 批量:同时生成汇总
.ai/quality/web-demo-accept-summary-[YYYYMMDD-HHMMSS].md - 短报告:结论、门禁摘要、P0/P1/P2 单行清单、日志路径。
输出格式
每个文件产出:
- 状态:
ACCEPTED/ACCEPTED_WITH_IMPROVEMENTS/REJECTED - 分数:0-100
- 门禁摘要:用户故事映射、编译、执行、隔离/日志、重复代码
- 问题清单:P0 / P1 / P2,每条单行
- 证据路径
日志路径统一使用仓库相对路径:
log/backend-demo.loglog/frontend-demo.logdemo/test-results/
失败处理
- 用户故事不存在(
docs/user-stories未找到,或测试文件引用的是已被/将被删除的.ai/user-stories草稿):直接拒绝验收。 - 编译失败:直接拒绝验收。
- 测试失败或超时:直接拒绝验收。
- 批量模式下:记录失败并继续处理后续文件。
质量门禁
P0 必须全部通过:
- 用户故事映射有效
- 编译成功
- 测试全部通过
- 存在环境验证与数据清理
- 使用 UnifiedLogger
允许 ACCEPTED_WITH_IMPROVEMENTS 的前提:
- 所有测试通过
- 无 P0 问题
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 100 lines · 23 tokens per session scan A 0d1663b35af2
t-web-demo-accept is a skill published in the GitHub repository timzaak/web-dev-skills (74 stars, last pushed yesterday), licensed Apache-2.0. It adds 23 tokens to every session and 987 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
azure-playwright-workspaces
Expert knowledge for Playwright Workspaces development including troubleshooting, best practices, decision making, limits & quotas, security, and configuration. Use when managing Playwright Testing workspaces, tokens/RBAC, quotas, monitoring/metrics, or run/AADSTS7000112 issues, and other Playwright Workspaces related…
verify
Prove a change works end to end through acceptance criteria, focused project gates, real user or caller flows, edge cases, and reliability checks. Use before a PR, when the user asks whether a change actually works, or as the first stage of $ship even when automated tests are green.
integration-testing
Guidance for writing integration and end-to-end tests that use real databases, HTTP services, or message queues. It also covers keeping each test independent and repeatable.
e2e-testing
Guide for running end-to-end tests of the Qwen Code CLI, including headless mode, MCP server testing, and API traffic inspection. Use this skill whenever you need to verify CLI behavior with real model calls, reproduce user-reported bugs end-to-end, test MCP tool integrations, or inspect raw API request/response…
terminal-capture
Automates terminal UI screenshot testing for CLI commands. Applies when reviewing PRs that affect CLI output, testing slash commands (/about, /context, /auth, /export), generating visual documentation, or when 'terminal screenshot', 'CLI test', 'visual test', or 'terminal-capture' is mentioned.
agent-reproduce-align
Use after a Codex or Claude Code feature has been implemented in Qwen Code to run the selected reference agent and Qwen Code under the same scenario, capture HTTP and terminal traces, compare request bodies, tool/function schemas, outputs, and iterate until the reproduced behavior is close enough.