Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zacharygcook/agent-skills --skill local-web-e2egit clone --depth 1 https://github.com/zacharygcook/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zacharygcook/agent-skills/local-web-e2e)<a href="https://agentmods.dev/skills/zacharygcook/agent-skills/local-web-e2e"><img src="https://agentmods.dev/badge/skills/zacharygcook/agent-skills/local-web-e2e/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zacharygcook/agent-skills/local-web-e2e"><img src="https://agentmods.dev/badge/skills/zacharygcook/agent-skills/local-web-e2e.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00059 | $0.00503 |
| Opus 5 | $0.00030 | $0.00251 |
| Sonnet 5 | $0.00012 | $0.00101 |
| Haiku 4.5 | $0.00006 | $0.00050 |
Grade A, and why
local-web-e2e scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 51 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Local Web E2E
Make local browser tests safe to run beside normal development and strong enough to reveal real integration failures.
Safety Invariants
- Use a dedicated E2E database or isolated datastore namespace.
- Fail closed before any reset: verify the target clearly identifies itself as E2E and require an explicit override for exceptions.
- Use dedicated ports and build/cache directories so tests do not collide with running dev servers.
- Never borrow an arbitrary existing server unless the suite verifies its configuration and data target.
- Keep credentials synthetic and secrets out of tracked files.
Environment Lifecycle
- Run a doctor/preflight check for runtimes, browsers, ports, database reachability, and required configuration.
- Build shared packages needed by multiple services.
- Reset, migrate, and seed the disposable datastore deterministically.
- Start services with isolated ports and capture logs.
- Wait on health/readiness endpoints, not fixed sleeps.
- Run browser tests with intentional concurrency.
- On failure, retain traces, screenshots, videos, and service logs.
- Stop only processes launched by the suite and restore mutated state when a test exercises operator controls.
Test Quality
Prefer a short set of high-signal journeys:
- authentication and authorization boundaries;
- a primary user workflow from UI through API and persistence;
- loading, empty, error, and retry states;
- cross-origin/session behavior in realistic local topology;
- admin/operator actions followed by explicit state restoration.
Use stable roles, labels, and test IDs. Avoid timing-only assertions and selectors tied to cosmetic DOM structure. Seed prerequisites directly when setup through the UI would add noise without testing meaningful behavior.
Debugging Order
- Read the first application/service error, not only the browser timeout.
- Confirm the browser reached the intended port and build directory.
- Confirm every service points at the disposable datastore.
- Inspect readiness and seed output.
- Open the trace and screenshot.
- Re-run the narrowest failing test before the whole suite.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 51 lines · 59 tokens per session scan A 20228bf89cf6
local-web-e2e is a skill published in the GitHub repository zacharygcook/agent-skills (2 stars, last pushed 1mo ago), licensed MIT. It adds 59 tokens to every session and 503 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
pptx-html-fidelity-audit
Audit a python-pptx export against its source HTML deck, identify layout/content drift (footer overflow, cropped content, missing italic/em, lost styling, off-rhythm spacing), and re-export with strict footer-rail + cursor-flow layout discipline. Use this skill whenever the user has a .pptx that was generated from an…
jetson-video-pipeline
Use when executing and verifying Jetson Video Codec SDK or PyNvVideoCodec encode/decode, transcode, segmentation, container decode, AV1, or acceptance workflows with exact artifact handoffs.
playwright-skill
Complete browser automation with Playwright. Auto-detects dev servers, writes reusable test scripts, and supports screenshots, responsive checks, UX validation, login flows, link checks, and arbitrary browser automation. Use when the user wants to test a website, automate browser interactions, validate web…
qa-systematic
Systematic web application QA testing with issue taxonomy, health scoring, and regression tracking. Triggers on: "QA this", "test the app", "smoke test", "run QA", "systematic test", "regression test", "full QA", "/qa-systematic".
e2e-testing
ORGII keeps two separate E2E surfaces. Do not use one as proof for the other.
dual-instance-verification
Dual-instance (双机) real-machine verification protocol for ORG2 cloud sync and session sharing. Use before declaring any sharing/sync/collab feature or fix "verified": share/unshare, push/retract, fork/import, comments, member-floor, replay, continuation, or anything touching Org2CloudSyncEngine, collab engines, or the…