agentsclimarketplace
Sign in

Dont read the code ego

Skill YYshen07/dont-read-the-code-ego

Run source-blind black-box product checks on macOS with Ego Lite from a validated release-candidate request, then produce auditable evidence and failure routing without opening the source repository. Use when testing or inspecting a deployed web product as a simulated user, especially as the optional Mac-side companion to the Linux-capable dont-read-the-code four-role pipeline.From its SKILL.md

Install
npx -y skills add YYshen07/dont-read-the-code-ego

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • 24 days oldThe repository was created 24 days ago. New is not bad, but a brand new repository carrying a familiar-sounding name is the shape a typosquat arrives in, and there has been no time for anyone else to find a problem with it.
  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

2.9 KB, 573 tokens by cl100k_base, as published. Nobody here has run it

不要看代码！Ego 检查

Test the released behavior, not the implementation. This Skill requires macOS, Ego Lite, its ego-browser Skill, and Node.js. It does not require SwarmForge, tmux, Babashka, or a source checkout.

Read before acting

Read:

  1. references/simulated-user.md
  2. references/safety-policy.md
  3. references/failure-routing.md

Then read the installed ego-browser Skill in full before invoking its CLI.

Prepare a clean-room run

Check the Mac runtime:

scripts/check-prereqs.sh

Use a directory that does not contain the product repository. It should contain only:

  • ego-check-request.json
  • The selected persona file.
  • Explicitly approved upload fixtures.
  • An empty evidence output directory.

Validate the request:

node scripts/validate-request.mjs ego-check-request.json

Reject a request whose deterministic quality result is not passed, whose starting URL leaves the origin allowlist, or whose account kind is not test or fixture.

Use assets/persona.example.json when no project-specific persona exists. Do not invent implementation details to make the task easier.

Execute with Ego Lite

  1. Create one Ego Task Space named with the request and run IDs.
  2. Open only the request's starting URL.
  3. Act through screenshots, semantic snapshots, visible text, accessible names, keyboard, mouse, and ordinary form controls.
  4. Stay inside the request's allowed origins.
  5. Default-deny purchases, publishing, messaging, durable deletion, account changes, legal consent, and unlisted uploads.
  6. Treat user ownership, login, CAPTCHA, or manual approval as a hard handoff.
  7. Verify observable postconditions; a click is not evidence.
  8. Capture evidence before completing the Task Space.

Never use raw CDP, page or locator evaluation, browser/server fetch, source files, tests, selectors, internal APIs, Git history, or another agent's transcript.

Produce the result

Create run-result.json from assets/run-result.example.json. Preserve the request ID, source commits, and quality-report digest.

Validate:

node scripts/validate-bundle.mjs ego-check-request.json run-result.json

Return the validated result and evidence to the core pipeline or human operator. Do not modify product code.

  • passed routes to specifier or release owner.
  • product-defect routes to coder.
  • specification-gap routes to specifier.
  • blocked routes to the operator for environment, fixture, authentication, or safety resolution.

What ships with it: 16 files

44.5 KB alongside SKILL.md, 4 of them executable

agents/

assets/

references/

scripts/

Keep looking

Skills are one crate of 326,144. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.