attack-path-analysis
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Automated visual QA testing using Playwright — navigate web apps like a real user, capture screenshots, find bugs, and fix them.
Claude Code
$ npx -y skills add CoWork-OS/CoWork-OS --skill playwright-qa --agent claude-code
Codex
$ npx skills add CoWork-OS/CoWork-OS --skill playwright-qa -a codex -y
Cursor
$ npx skills add CoWork-OS/CoWork-OS --skill playwright-qa -a cursor -y
Gemini CLI
$ npx skills add CoWork-OS/CoWork-OS --skill playwright-qa -a gemini-cli -y
GitHub Copilot
$ npx skills add CoWork-OS/CoWork-OS --skill playwright-qa -a github-copilot -y
OpenCode
$ npx skills add CoWork-OS/CoWork-OS --skill playwright-qa -a opencode -y
Windsurf
$ npx skills add CoWork-OS/CoWork-OS --skill playwright-qa -a windsurf -y
name: playwright-qa description: "Automated visual QA testing using Playwright — navigate web apps like a real user, capture screenshots, find bugs, and fix them." version: "1.0.0" metadata: author: CoWork OS Contributors <info@coworkosapp.com>
Automated visual QA testing for web applications. Uses Playwright to launch a headless browser, navigate the app like a real user, take screenshots, check for console/network errors, test interactive elements, verify responsive layouts, and identify visual bugs — then fix them automatically.
| Name | Type | Required | Description | | -------------- | ------ | -------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | | url | string | No | Target URL to test (defaults to http://localhost:3000) | | server_command | string | No | Command to start the dev server (e.g., "npm run dev") | | checks | string | No | Comma-separated list of checks: visual_snapshot, console_errors, network_errors, interaction_test, responsive_check, accessibility_check, performance_check |
You are running automated visual QA on a web application using Playwright.
**Workflow:**
1. **Install dependencies** (if project was just scaffolded):
2. **Start the dev server** (if not already running):
3. **Run full QA pipeline**:
4. **Review results**:
5. **Fix issues** (if auto_fix is enabled):
6. **Manual testing** (for specific flows):
7. **Cleanup**:
**Key tools:**
**Best practices:**
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated…
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate…
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger…
Use when the user asks for a security review of a pull request, commit, branch diff, working-tree patch, or other Git-backed…
Use when the user asks for a repository-wide or scoped-path security scan.
Shape output for a reader with ADHD: lead with the next action, number multi-step work, restate state across turns, suppress…
Set up the owner profile so a personal agent knows who it works for (first-run setup, \"get to know me\"), or distill colleague,…