Skills nousresearch hermes-agent
dogfood
- Use it when:
- You want a web app explored for bugs, from one feature to the full site, starting from a URL.
- It does:
- Plans pages and flows, then clicks, fills forms, tabs and scrolls through each, logging console errors and screenshotting every issue.
- You get:
- A Markdown report in ./dogfood-output: summary by severity, each issue's steps to reproduce, expected and actual behavior and screenshot, and a table.
- Needs:
- Hermes Agent's browser_exec tool, which runs Python with browser helpers and raw DevTools Protocol calls.
- Unlike agent-device's dogfood:
- That one, Callstack's skill of the same name, is for apps on phones, simulators and emulators; this one tests web apps in a browser.
Written for Hermes Agent: every browser step goes through Hermes's browser_exec tool, so other agents need an equivalent.
TL;DR
Hermes Agent's QA skill runs in five phases. It creates an output folder and plans a rough sitemap: home page, navigation, key flows such as sign-up or checkout, forms, and edge cases like empty states and 404s. While exploring, it installs a console hook before each navigation so errors thrown during page load are caught, lists the visible interactive elements with their screen positions, looks at a screenshot, and tries buttons, links, forms with valid, invalid and empty input, keyboard focus and going back, checking for errors and visual changes after each interaction. Every issue gets a screenshot, URL, steps to reproduce, expected and actual behavior, a severity from Critical to Low and a category: functional, visual, accessibility, console, UX or content. It then merges duplicates, sorts by severity and fills its report template, ending with notes on what was and wasn't tested. Silent JavaScript errors count among the most valuable findings.
Summarizes the skill at 9f23c43.
npx skills add https://github.com/nousresearch/hermes-agent --skill dogfood skills.sh pageSource on GitHubAll skills from nousresearch/hermes-agent
- Total Downloads
- 6,400 on skills.sh, Nov 9, 2026
- Repo stars
- 261,819 nousresearch/hermes-agent
- First seen
- Mar 9, 2026 on skills.sh
Weekly values
| Week to | Installs |
|---|---|
| Sep 21 | 129 |
| Sep 28 | 153 |
| Oct 5 | 65 |
| Oct 12 | 34 |
| Oct 19 | 66 |
| Oct 26 | 55 |
| Nov 2 | 22 |
| Nov 9 | 25 |
| Category |
Find root causes, review code and test what you built. Drive browsers, scrape pages and search the web. Everything for building software: planning, coding, debugging, design, frameworks, cloud, agents and skills. |
|---|---|
| Type |
A multi-step process the agent follows: interview, debug, run a TDD loop, review. |
| Effect |
Its own steps change something outside your machine: post, send, deploy, provision, file issues, drive a website, or upload data to a service. |
| Needs |
Drives a real Chromium or Chrome browser. |
| Publisher |
A verified publisher on skills.sh, or the company or maintainer behind the product the skill operates. |
| Topics | |
| Stack |
SKILL.md
From nousresearch/hermes-agent at 9f23c43. Checked daily, last changed Nov 7, 2026.
Frontmatter
name: dogfood
description: "Exploratory QA of web apps: find bugs, evidence, reports."
version: 1.0.0
author: Teknium (teknium1), Hermes Agent
license: MIT
platforms: [linux, macos, windows]
metadata:
hermes:
tags: [qa, testing, browser, web, dogfood]
related_skills: []Dogfood: Systematic Web Application QA Testing
Overview
This skill guides you through systematic exploratory QA testing of web applications with browser_exec. You will navigate the application, interact with elements, capture evidence of issues, and produce a structured bug report.
Prerequisites
- The
browsertoolset must be enabled (browser_exec).browser_execruns Python with pre-imported helpers (new_tab,goto_url,wait_for_load,page_info,js,fill_input,click_at_xy,capture_screenshot,cdp); browser state persists across calls, Python variables do not. - A target URL and testing scope from the user
Inputs
The user provides:
- Target URL — the entry point for testing
- Scope — what areas/features to focus on (or "full site" for comprehensive testing)
- Output directory (optional) — where to save screenshots and the report (default:
./dogfood-output)
Workflow
Follow this 5-phase systematic workflow:
Phase 1: Plan
- Create the output directory structure:
{output_dir}/ ├── screenshots/ # Evidence screenshots └── report.md # Final report (generated in Phase 5) - Identify the testing scope based on user input.
- Build a rough sitemap by planning which pages and features to test:
- Landing/home page
- Navigation links (header, footer, sidebar)
- Key user flows (sign up, login, search, checkout, etc.)
- Forms and interactive elements
- Edge cases (empty states, error pages, 404s)
Phase 2: Explore
Batch each step's actions into one browser_exec call. For each page or feature in your plan:
-
Navigate with a console hook installed. Register the hook on the tab before navigating so errors thrown during page load are captured too:
# Open page with console-error capture HOOK = """window.__qa_errors = []; const _e = console.error; console.error = (...a) => { window.__qa_errors.push(a.map(String).join(' ')); _e(...a); }; addEventListener('error', e => window.__qa_errors.push('uncaught: ' + e.message)); addEventListener('unhandledrejection', e => window.__qa_errors.push('rejection: ' + String(e.reason)));""" new_tab('about:blank') # first call only: the hook binds to the current tab cdp('Page.addScriptToEvaluateOnNewDocument', source=HOOK) goto_url("https://example.com/page") wait_for_load() print(page_info()) print(js('window.__qa_errors || []'))Re-register the hook at the start of any later call that navigates. Silent JS errors are high-value findings.
-
Read the page structure — list visible interactive elements with their viewport centres (use
cdp('Accessibility.getFullAXTree')and filter in Python when you need roles/names):# List interactive elements print(js("""(() => [...document.querySelectorAll('a,button,input,select,textarea,[role=button]')] .filter(e => e.offsetParent).slice(0, 80).map((e, i) => { const r = e.getBoundingClientRect(); return {i, tag: e.tagName, text: (e.innerText || e.value || e.getAttribute('aria-label') || '').trim().slice(0, 60), id: e.id, name: e.name, x: Math.round(r.x + r.width / 2), y: Math.round(r.y + r.height / 2)}; }))()""")) -
Visually assess the page: call
capture_screenshot()and inspect the attached image for layout issues, broken elements, or accessibility concerns. If your model cannot view images, pass the printed path tovision_analyze. -
Test interactive elements systematically:
- Click buttons and links:
js("document.querySelector('#submit').click()"), orclick_at_xy(x, y)with a centre from step 2 - Fill forms:
fill_input('input[name=email]', 'test input') - Test keyboard navigation:
cdp('Input.dispatchKeyEvent', type='keyDown', key='Tab', code='Tab', windowsVirtualKeyCode=9)followed by the matchingkeyUp, thenjs('document.activeElement.outerHTML.slice(0, 200)')to see where focus landed; same pattern withkey='Enter',code='Enter',windowsVirtualKeyCode=13 - Scroll through content:
js('window.scrollBy(0, 800)') - Go back:
js('history.back()'), thenwait_for_load() - Test form validation with invalid inputs
- Test empty submissions
- Click buttons and links:
-
After each interaction, in the same call, check for:
- Console errors:
print(js('window.__qa_errors || []')) - Visual changes:
capture_screenshot()and compare with the previous one - Expected vs actual behavior (
page_info(), orjs()reading the relevant element)
- Console errors:
Phase 3: Collect Evidence
For every issue found:
-
Take a screenshot showing the issue:
capture_screenshot()prints the saved path. Copy it to{output_dir}/screenshots/under a descriptive name (e.g.issue-03-broken-login.png) — you will reference it in the report. -
Record the details:
- URL where the issue occurs
- Steps to reproduce
- Expected behavior
- Actual behavior
- Console errors (if any)
- Screenshot path
-
Classify the issue using the issue taxonomy (see
references/issue-taxonomy.md):- Severity: Critical / High / Medium / Low
- Category: Functional / Visual / Accessibility / Console / UX / Content
Phase 4: Categorize
- Review all collected issues.
- De-duplicate — merge issues that are the same bug manifesting in different places.
- Assign final severity and category to each issue.
- Sort by severity (Critical first, then High, Medium, Low).
- Count issues by severity and category for the executive summary.
Phase 5: Report
Generate the final report using the template at templates/dogfood-report-template.md.
The report must include:
- Executive summary with total issue count, breakdown by severity, and testing scope
- Per-issue sections with:
- Issue number and title
- Severity and category badges
- URL where observed
- Description of the issue
- Steps to reproduce
- Expected vs actual behavior
- Screenshot references (use
MEDIA:<screenshot_path>for inline images) - Console errors if relevant
- Summary table of all issues
- Testing notes — what was tested, what was not, any blockers
Save the report to {output_dir}/report.md.
Tools Reference
All browser actions are browser_exec calls; these are the helpers and idioms used above.
| Action | browser_exec idiom |
|---|---|
| Go to a URL | new_tab(url) once (or new_tab('about:blank') before registering the hook), then goto_url(url); follow with wait_for_load() |
| Page state | page_info() |
| DOM / accessibility tree | js(...) extraction, or cdp('Accessibility.getFullAXTree') filtered in Python |
| Click | js("document.querySelector(sel).click()") or click_at_xy(x, y) |
| Type into an input | fill_input(selector, text) |
| Scroll | js('window.scrollBy(0, 800)') |
| Go back | js('history.back()') |
| Press a key | cdp('Input.dispatchKeyEvent', type='keyDown', key=..., code=..., windowsVirtualKeyCode=...) + keyUp |
| Screenshot | capture_screenshot() (image attached to the result; text-only models use vision_analyze on the path) |
| JS console errors | hook via cdp('Page.addScriptToEvaluateOnNewDocument', source=HOOK), read with `js('window.__qa_errors |
Tips
- Always read
window.__qa_errorsafter navigating and after significant interactions. Silent JS errors are among the most valuable findings. - Batch each sub-procedure into one
browser_execcall (navigate, wait, extract, act, check errors) — fewer round-trips, and the hook stays in place. - Take a
capture_screenshot()when you need to reason about element positions or when DOM extraction is ambiguous;click_at_xytakes the centres from the element listing. - Test with both valid and invalid inputs — form validation bugs are common.
- Scroll through long pages — content below the fold may have rendering issues.
- Test navigation flows — click through multi-step processes end-to-end.
- Check responsive behavior by noting any layout issues visible in screenshots.
- Don't forget edge cases: empty states, very long text, special characters, rapid clicking.
- When reporting screenshots to the user, include
MEDIA:<screenshot_path>so they can see the evidence inline.