replay-app-harness

replay-app-harness is a skill for Claude Code from understudylabs/understudy-agent-tools. It costs 93 tokens per session (1,072 once invoked), scanned A, original, MIT.

A regression-testing workflow for an application that uses a language model, replaying it against fixed benchmark tasks after code changes.

In plain words
What is it for?
Use it to draft an app-harness configuration, review the launch command, and run approved replay tests against the current application.
Why use it?
It shows whether an edit changed the app’s benchmark behavior and helps catch regressions before release.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is node dist/bin.js runs execute --benchmark <benchmark-dir>.

Part of the understudy plugin — 43 skills, 1 command shipped together

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/understudylabs/understudy-agent-tools
agentmods
npx agentmods add skills/understudylabs/understudy-agent-tools/replay-app-harness

Made for: Claude Code.

Or install understudy, the plugin that ships this one along with the rest of its 43 skills, 1 command.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for replay-app-harness

README.md
[![agentmods](https://agentmods.dev/badge/skills/understudylabs/understudy-agent-tools/replay-app-harness.svg)](https://agentmods.dev/skills/understudylabs/understudy-agent-tools/replay-app-harness)
Your own site
<a href="https://agentmods.dev/skills/understudylabs/understudy-agent-tools/replay-app-harness"><img src="https://agentmods.dev/badge/skills/understudylabs/understudy-agent-tools/replay-app-harness.svg" alt="Measured on agentmods" height="20"></a>
Per session 93 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,072 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00093 $0.01072
Opus 5 $0.00046 $0.00536
Sonnet 5 $0.00019 $0.00214
Haiku 4.5 $0.00009 $0.00107

Measured 6d ago against content hash 1c6508031c22, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

replay-app-harness scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/replay-app-harness/SKILL.md · 90 lines

How it starts

The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Replay the user's app on frozen benchmark tasks

Model arms answer "what would model X do?". The app_replay arm answers "what does the user's app, as the code currently exists, do on the same frozen tasks?" — the regression check to run after editing the user's code. Full reference: docs/app-harness.md in this repo; sidecar schema: schemas/understudy.app_harness.v1.schema.json.

Resolve CLI

Prefer the installed understudy binary. If it is unavailable inside a repo checkout, run through the package script:

npm run build
node dist/bin.js runs execute --benchmark <benchmark-dir>

Safety Gates

  • The harness launches the user's own code as a subprocess. Only put commands in app-harness.json that the developer showed you or approved; never invent entrypoints. Show the drafted sidecar and get approval before the first run.
  • LLM traffic is pinned to the Understudy gateway. The executor's redirect env vars win over the harness's env — do not attempt to route around them, and say so if the app hard-codes a provider base URL.
  • The app may mutate real state. Before queueing, confirm with the developer that the entrypoint is replay-safe (test/sandbox mode, no production writes). If unsure, do not run it.
  • Honest scoring only. Never present app_replay_unobserved or unscored rows as passes/failures; report them as unobserved and point at the tier-1 boundary in docs/app-harness.md.

Step 1 — Author app-harness.json from the user's repo

Read the user's repo and draft the sidecar into the benchmark directory:

  1. Find the entrypoint that handles ONE task-shaped request end to end (CLI/worker script preferred; long-running HTTP servers are tier 2).
  2. Study how the task input reaches it and pick input_mode:
    • argv — prompt appended as the final argument;
    • stdin — one JSON line {"task_id", "prompt"};
    • http — author the endpoint template now; it validates but does not execute at tier 1 (say so to the user). In every mode the app can instead read UNDERSTUDY_TASK_PROMPT / UNDERSTUDY_TASK_ID from the env.
  3. Note the SDK shape in notes (OpenAI/Anthropic — both base-URL redirect vars are injected; see the instrument skill).
  4. Set tool_route: "gateway_tools" only if the app's tool layer writes UNDERSTUDY_LIVE_JOURNAL lines; otherwise "none" and tell the user the rows will honestly read app_replay_unobserved until tier 2.
  5. Set per_task_timeout_seconds (default 300, max 3600), cwd, command (argv vector), schema_version: "understudy.app_harness.v1", llm_route: "gateway".

Read the full file on GitHub · 90 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 90 lines · 93 tokens per session scan A 1c6508031c22

Subscribe to this mod's changes

replay-app-harness is a skill published in the GitHub repository understudylabs/understudy-agent-tools (16 stars, last pushed 4d ago), licensed MIT. It adds 93 tokens to every session and 1,072 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

dogfood

Systematically explore and test a mobile app on iOS/Android with agent-device to find bugs, UX issues, and other problems. Use when asked to dogfood, QA, exploratory test, find issues, bug hunt, or test this app on mobile.

callstack/agent-device · 55 tokens

test-warp-ui

Guides testing Warp UI features and changes using the computer use tool. Use this skill only when computer-use testing was requested (explicit request or accepted offer) and the computeruse tool is available to the agent. Covers launching Warp and verifying UI behavior.

warpdotdev/warp · 55 tokens

test-electron-app

Drive the real running PostHog Electron app (live tRPC, workspace-server, real data) over CDP with agent-browser. Connect to the running app on port 9222, test desktop changes against a local Django stack, snapshot the accessibility tree, inspect network requests, and screenshot only when explicitly asked. Use when…

PostHog/posthog-foss · 112 tokens

pyats-dynamic-test

Generate and execute deterministic pyATS aetest validation scripts - interface state, OSPF neighbors, BGP paths, ping matrices, and custom compliance tests. Use when writing a network test, validating post-change state, running pass/fail checks, or building automated regression tests.

automateyournetwork/netclaw · 61 tokens

trailblaze

Use when working with Trailblaze — natural-language device control for coding agents across iOS, Android, and web, with replayable .trail.yaml files as the artifact. Trigger on mentions of Trailblaze, the trailblaze CLI, .trail.yaml files, trailmaps, waypoints, or requests to drive / author / debug / run UI tests on…

block/trailblaze · 115 tokens

Detox Mobile Testing

Gray-box end-to-end testing for React Native apps with Detox. Covers .detoxrc.js configuration, build and test commands, matchers, device.launchApp control, automatic synchronization, and macOS CI pipelines.

PramodDutta/qaskills · 48 tokens