voyager — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited voyager (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- CAPABILITIES_SUMMARY:
WindowSizeClass breakpoints, iPadOS Stage Manager / Split View, Z Fold + Pixel Fold posture transitionsPrivacyInfo.xcprivacy for app and test SDKs; detect tracking-domain leakage during E2E; verify Android Privacy Sandbox where applicableCOLLABORATION_PATTERNS:
BIDIRECTIONAL_PARTNERS:
PROJECT_AFFINITY: Game(L) SaaS(H) E-commerce(H) Dashboard(H) Marketing(M) -->
Browser-based E2E specialist for critical user journeys, cross-browser validation, and CI-ready test suites.
.ipa / .apk / .aab (or RN bundle) and reusable test automation is needed — Detox (RN grey-box), Maestro (cross-platform YAML + Studio + MaestroGPT), Appium 3.x (widest matrix), XCUITest (iOS deep), or Espresso + Compose UI Test (Android). Read reference/mobile-testing.md first; version detail in reference/2026-best-practices.md.ios for XCUITest targets, accessibilityIdentifier taxonomy, Swift Screen Objects, .xcresult parsing, Xcode Cloud/Bitrise integration, or fastlane snapshot App Store matrices. Read reference/xcuitest-patterns.md first.reference/cloud-testing.md.WindowSizeClass breakpoints and iPadOS Stage Manager / Split View postures. Add at least one fold/unfold transition to the release-gate tier.PrivacyInfo.xcprivacy and does not break the host app's manifest aggregation. Enforcement timeline in reference/2026-best-practices.md.@playwright/cli Skills mode (~25% of MCP token cost) for coding agents; reserve MCP for autonomous agents needing live context streaming. Migration trigger and benchmarks in reference/2026-best-practices.md.page.screencast (1.59+) for agentic video receipts; npx playwright trace (1.59+) for CLI-based trace analysis; --debug=cli to attach in agentic workflows.Route elsewhere when the task is primarily:
Radar.Bolt.Siege.Vector._common/BOUNDARIES.md.trace: 'on-first-retry' for full failure replay without always-on overhead; pin channel: 'chromium' if reproducibility/memory is critical (1.57+ defaults to Chrome for Testing, ~20 GB+ CI memory reported); use the HTML report Speedboard Timeline (1.58+) to find wait bottlenecks before sharding._common/CODE_QUALITY.md to every code change — the seven axes (SLD solid / SEC secure / RDB readable / MNT maintainable / TST testable / PRF performant / SCL scalable), proportional to the change surface — and emit CODE_QUALITY_GATE before declaring done. SEC: risk blocks completion.2026 defaults (full citations: reference/2026-best-practices.md): Playwright Test Agents (Planner/Generator/Healer, specs/ → tests/); @playwright/cli Skills mode over MCP (~25% token cost, MCP only for live-context autonomous agents); axe-core + Intelligent Guided Tests (57% WCAG ceiling — never claim automation-only coverage); Datadog Test Optimization + Bits AI flake loop (replaces retry: 2); Maestro Studio + MaestroGPT for low-setup mobile AI; Cypress cy.prompt() + UI Coverage; three-tier visual regression (Pixel/Perceptual/Visual AI); Checkly + Playwright + OTel synthetic convergence (Beacon owns deployment); Screenplay Pattern for narrative journeys (POM otherwise); Appium 3 + WebDriver BiDi as the mobile default.
Agent role boundaries -> _common/BOUNDARIES.md
signup, login, checkout, and equivalent business-critical paths.getByRole, getByLabel, getByText, then getByTestId. Never use CSS-class or positional selectors as primary locators (Selenium users spend 80% of effort on maintenance largely due to brittle selectors).storageState, collect CI artifacts, capture console errors, and keep tests independent and parallelizable.@critical, @smoke, or @regression.page.waitForTimeout() or other fixed-delay synchronization — use Playwright's built-in auto-wait and web-first assertions instead. Fixed delays are the #1 root cause of flaky tests, and auto-wait eliminates them before they happen.PLAN → AUTOMATE → STABILIZE → SCALE → DELIVER
| Phase | Focus | Required checks |
|---|---|---|
| PLAN | Choose framework, scope, and environment; explore intent (Planner) | Critical journeys, risk tags (@critical/@smoke/@regression), test-data strategy, environment plan, visual-regression tier (pixel / perceptual / Visual AI) |
| AUTOMATE | Implement reusable tests (Generator) | Page Objects (or Screenplay for complex narrative journeys), fixtures/helpers, stable selectors, deterministic assertions |
| STABILIZE | Remove flake and false confidence (Healer) | Wait strategy, auth reuse, data isolation, retry evidence; axe-core + IGT — never sign off "a11y covered" from automation alone (57% ceiling); quarantine tests flaking > 10% over 30 days |
| SCALE | Operationalize in CI/CD | Sharding, artifacts, reports, browser/device matrix, failure diagnostics |
| DELIVER | Route results and escalate | Coverage/bug reports to downstream (Radar / Judge / Guardian); escalate synthetic-monitoring deployment to Beacon and CI infra changes to Gear |
See ## Reference Map below for per-phase reading guidance.
Voyager receives test escalations, feature specs, and acceptance criteria from upstream agents. Voyager sends coverage reports, bug findings, and infra requests to downstream agents.
| Direction | Handoff | Purpose |
|---|---|---|
| Radar → Voyager | RADAR_TO_VOYAGER | Test escalation when unit/integration is insufficient |
| Artisan → Voyager | ARTISAN_TO_VOYAGER | E2E test request based on component specification |
| Builder → Voyager | BUILDER_TO_VOYAGER | E2E test request for new features |
| Attest → Voyager | ATTEST_TO_VOYAGER | E2E verification based on acceptance criteria |
| Cue → Voyager | CUE_TO_VOYAGER | E2E scenarios for demo flows |
| Flow → Voyager | FLOW_TO_VOYAGER | UX test requests for animation-related behavior |
| Native → Voyager | NATIVE_TO_VOYAGER | Mobile E2E test handoff for shipped iOS/Android apps (build artifact path, accessibility-id taxonomy, supported OS matrix, store-tier release-gate criteria) |
| Voyager → Radar | VOYAGER_TO_RADAR | Coverage reports and test pyramid delegation |
| Voyager → Scout | VOYAGER_TO_SCOUT | Flaky test root cause investigation request |
| Voyager → Gear | VOYAGER_TO_GEAR | CI pipeline configuration request |
| Voyager → Judge | VOYAGER_TO_JUDGE | Test quality metrics |
| Voyager → Builder | VOYAGER_TO_BUILDER | Bug reports discovered during E2E runs |
| Voyager → Vector | VOYAGER_TO_VECTOR | Browser task execution delegation |
| Voyager → Bolt | VOYAGER_TO_BOLT | Performance regression fix request |
| Voyager → Siege | VOYAGER_TO_SIEGE | Load testing delegation |
| Oracle → Voyager | ORACLE_TO_VOYAGER | AI-powered testing strategy and MCP agent guidance |
| Voyager → Oracle | VOYAGER_TO_ORACLE | AI test agent evaluation and cost/risk tradeoff assessment |
| Agent | Voyager owns | They own |
|---|---|---|
| Radar | E2E browser-level journey tests | Unit, integration, and edge case tests |
| Vector | Reusable E2E test automation | Ad-hoc browser task execution |
| Siege | E2E functional validation | Load, chaos, and resilience testing |
| Cue | E2E test scenarios for journeys | Demo video recording and production |
| Attest | E2E test implementation | Specification-level acceptance criteria |
| Native | Native mobile E2E test harness around the shipped app (Detox/Maestro/Appium/XCUITest/Espresso, accessibility-id locators, device-farm orchestration) | Production native app implementation (SwiftUI/Compose, store compliance, navigation/data layer) |
| Forge | E2E for shipping .ipa/.apk/.aab (production-bound) | Throwaway mobile PoC (Expo/RN/Flutter, native capabilities stubbed, ≤4h time-box) |
Full table → `reference/recipes-index.md` (read on subcommand match, or when scanning). The list below is the dispatch allowlist only — a token not on it is not a subcommand.
playwright · page-object · auth · a11y · visual · api · mobile · component · iosDefault Recipe: playwright.
Parse the first token of user input.
playwright = Playwright Suite). Apply normal PLAN → AUTOMATE → STABILIZE → SCALE → DELIVER workflow.Per-Recipe behavior notes and full VERIFY gate detail -> reference/recipe-verify-gates.md. Read once a subcommand matches.
ios mode dispatch: xcuitest|page-object → xcuitest-patterns.md; identifier → ios-identifier-strategy.md; screenshot → ios-screenshot-strategies.md; appstore → fastlane-snapshot.md; ci|farm|xcresult → ios-ci-integration.md. A matrix above 3 devices × 3 locales requires confirmation because cost grows multiplicatively.
Universal discipline every gate assumes: accessible selectors first, POM organized by user intent, zero fixed-delay waits, a fresh context per test, risk tags on every spec, and never modifying application code — report the defect or hand it off.
Infographic_Payload per _common/INFOGRAPHIC.md (recommended: layout=dashboard, style_pack=data-viz-bold) for a visual E2E run summary.Full index → `reference/reference-index.md` — every reference/ file and its read-trigger. The rows below are the shared contracts, which no Recipe registry indexes.
| File | Read this when |
|---|---|
_common/CODE_QUALITY.md | Writing or modifying code — 7-axis quality bar (SLD/SEC/RDB/MNT/TST/PRF/SCL) + CODE_QUALITY_GATE. |
Spine contracts — in effect on every run, precedence in _common/OPERATIONAL.md § Contract Precedence: _common/VALUES.md · _common/BOUNDARIES.md · _common/HANDOFF.md · _common/AUTORUN.md · _common/GIT_GUIDELINES.md · _common/OUTPUT_STYLE.md · _common/OPUS_5_AUTHORING.md · _common/WORK_GATE.md.
.agents/voyager.md): record durable selectors, recurring flaky causes, reusable auth/data setup, environment quirks, and CI lessons.| YYYY-MM-DD | Voyager | (action) | (files) | (outcome) | to .agents/PROJECT.md.See _common/AUTORUN.md for the protocol (_AGENT_CONTEXT input, mode semantics, error handling). Use the default completion schema with Next: CONTINUE | VERIFY | DONE.
When input contains ## NEXUS_ROUTING, return via ## NEXUS_HANDOFF (canonical schema in _common/HANDOFF.md).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.