Skip to content
Back to skills

Test Tutorial Agent

BSecurity

Run the tutorial agent experiment — starts the e2e Docker container, overwrites the plugin cache with dev builds, and spawns a subagent with the tutorial prompt to verify MCP tools and skills work end-to-end

  • 7 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added May 27, 2026
toolsgobashdockertestingapi

Works with

  • cli
  • api
  • mcp

Security analysis

B89/100
  • mediumUses curl or wget to download content
  • highPerforms destructive filesystem operations

Pro shows the line behind each finding and how to fix it

Scanned May 27, 2026

npx -y skills add normalled/apijack --skill test-tutorial-agent --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Test Tutorial Agent?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Test Tutorial Agent
[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/normalled-test-tutorial-agent/badge)](https://www.skillsdirectory.com/skills/normalled-test-tutorial-agent)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: test-tutorial-agent
description: Run the tutorial agent experiment — starts the e2e Docker container, overwrites the plugin cache with dev builds, and spawns a subagent with the tutorial prompt to verify MCP tools and skills work end-to-end
---

# Test Tutorial Agent

Automated experiment to verify that the apijack MCP tools and write-routine skill work correctly by spawning a subagent that drives the full tutorial workflow.

## Steps

Run these steps in order:

### 1. Rebuild plugin cache with dev source

```bash
./scripts/dev-plugin.sh
```

### 2. Start the e2e Docker container (if not already running)

```bash
docker rm -f apijack-e2e 2>/dev/null
docker build -f tests/e2e-tutorial/Dockerfile -t apijack-e2e .
docker run --rm -d --name apijack-e2e -p 3456:3456 apijack-e2e sh -c "cd /tutorial && bun run src/server.ts"
```

Wait for the server to be ready:

```bash
until curl -sf http://localhost:3456/v3/api-docs > /dev/null 2>&1; do sleep 0.2; done
```

### 3. Ask the user to reload plugins

Tell the user: "Run `/reload-plugins` so the MCP server picks up the dev builds, then say 'go' to continue."

**STOP and wait for the user to confirm before proceeding.**

### 4. Spawn the tutorial subagent

Launch a subagent with this exact prompt:

> Use the /write-routine skill. Connect to the TODO API at http://localhost:3456 with username admin and password admin, then generate the CLI. From there, create 50 TODOs with creative titles. After all 50 are created, update each one in a random order to have a random background color. After all 50 have been colored, delete them all in reverse order.

### 5. Report results

After the subagent completes, report:
- Whether it succeeded or failed
- How many MCP tool calls it made
- Whether it used loops (`range`, `forEach`, `shuffle`, `reverse`) or hardcoded steps
- Read the routine YAML it created and assess if it's idiomatic

### 6. Clean up

```bash
docker stop apijack-e2e 2>/dev/null
rm -rf /home/garret/projects/apijack/.apijack
```

Then remind the user: "Run `./scripts/dev-plugin.sh --restore` and `/reload-plugins` when done testing."

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.