Skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Skills (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use one Momentic coding-agent plugin for browser and mobile test authoring, maintenance, and Mo bug bashes.
Add the catalog and install Momentic:
/plugin marketplace add momentic-ai/skills
/plugin install momentic@momenticIn Cursor, open Customize > Plugins, search for Momentic, and install the plugin.
Install the Momentic plugin from this repository.
The plugin bundles the repository-test skills, mo-qa, and local browser and mobile MCP servers. Mo-only work uses mo-qa and the qa CLI; it does not require local MCP setup or local MCP authentication.
Use a Momentic CLI to install the shared skills in supported coding agents:
npx momentic skills
npx momentic-mobile skills
qa skillsEach command asks which coding agents to configure. Pass --yes to skip the prompt. Use the skills CLI to install the skills from the public catalog:
npx skills add https://github.com/momentic-ai/skillsInstall the standalone mo-qa skill for the lighter Mo-only path. It uses the same source as the plugin:
npx skills add https://github.com/momentic-ai/skills --skill mo-qa| Task | Use |
|---|---|
| Exploratory Mo bug bash, PR testing, or private-target QA | qa CLI and mo-qa |
| Write or maintain repository browser tests | momentic-test and the local momentic MCP |
| Write or maintain repository mobile tests | momentic-mobile-test and the local momentic-mobile MCP |
| ChatGPT, Claude, or Gemini | The hosted Momentic connector at https://mcp.momentic.ai |
See the local MCP server guide for setup. The hosted connector cannot reach localhost, private networks, or local files.
Keep an existing connection when it supports the task. Do not authenticate a second connection or start another paid session after uncertain delivery without checking the original session.
The hosted connector uses Momentic OAuth. Keep credentials out of chat and uploads; use a Momentic environment or session-page secrets instead.
See the hosted connector guide for connection setup, files, findings, and retests.
| Skill | Description |
|---|---|
| momentic-test | Create, run, and maintain Momentic browser tests. |
| momentic-mobile-test | Create, run, and maintain Momentic mobile tests. |
| momentic-maintain | Diagnose and repair failing Momentic tests. |
| mo-qa | Use the qa CLI to run and control Mo bug bashes. |
| momentic-spec | Improve code correctness with Momentic specs. |
| momentic-triage | Triage and repair quarantined tests. |
The plugin manifests, marketplace catalogs, and skills are synced from upstream sources. Momentic contributors should edit them upstream. Others should open an issue instead of a pull request.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.