fix(subagents): restrict read-only agent tools and remove machine-specific paths

browser-check and profiler get an explicit read-only tools list mirroring the
Codex sandbox_mode, and test-apk no longer hardcodes one contributor's
ANDROID_HOME and project paths.
This commit is contained in:
Tommaso Casaburi
2026-07-03 13:58:35 +07:00
parent 21bbc5f07c
commit 0166f2f4e8
6 changed files with 8 additions and 4 deletions
+1
View File
@@ -1,6 +1,7 @@
---
name: browser-check
model: haiku
tools: Bash, Read, Grep, Glob
description: Verifies UI changes in the browser using playwright-cli across Blink, Gecko, and WebKit. Use after making visual or interaction changes to React components, CSS, layouts, or routing to confirm they render and behave correctly.
---
+1
View File
@@ -1,6 +1,7 @@
---
name: profiler
model: haiku
tools: Bash, Read, Grep, Glob
description: Performance profiler that browses 5chan routes via playwright-cli, collecting Web Vitals and React rerender data via react-scan. Returns a structured issues list for a batch of routes. Use proactively when profiling browsing performance, finding bottlenecks, or diagnosing excessive React rerenders.
---
+2 -2
View File
@@ -8,8 +8,8 @@ You are an Android APK testing agent for the 5chan project. You run only the wor
## Environment
- ANDROID_HOME: /Users/Tommaso/Library/Android/sdk
- Project: /Users/Tommaso/Desktop/bitsocial/5chan
- ANDROID_HOME: use the contributor's local Android SDK path from the environment (commonly `~/Library/Android/sdk` on macOS); do not hardcode another machine's path
- Project root: the current repository root from `git rev-parse --show-toplevel`
- Capacitor app (appId: fivechan.android)
- AVD: fivechan-test-api35 (pixel_6, API 35, arm64-v8a)
- PATH must include: $ANDROID_HOME/emulator, $ANDROID_HOME/platform-tools, $ANDROID_HOME/cmdline-tools/latest/bin
+1
View File
@@ -1,6 +1,7 @@
---
name: browser-check
model: composer-2.5-fast
tools: Bash, Read, Grep, Glob
description: Verifies UI changes in the browser using playwright-cli across Blink, Gecko, and WebKit. Use after making visual or interaction changes to React components, CSS, layouts, or routing to confirm they render and behave correctly.
---
+1
View File
@@ -1,6 +1,7 @@
---
name: profiler
model: composer-2.5-fast
tools: Bash, Read, Grep, Glob
description: Performance profiler that browses 5chan routes via playwright-cli, collecting Web Vitals and React rerender data via react-scan. Returns a structured issues list for a batch of routes. Use proactively when profiling browsing performance, finding bottlenecks, or diagnosing excessive React rerenders.
---
+2 -2
View File
@@ -8,8 +8,8 @@ You are an Android APK testing agent for the 5chan project. You run only the wor
## Environment
- ANDROID_HOME: /Users/Tommaso/Library/Android/sdk
- Project: /Users/Tommaso/Desktop/bitsocial/5chan
- ANDROID_HOME: use the contributor's local Android SDK path from the environment (commonly `~/Library/Android/sdk` on macOS); do not hardcode another machine's path
- Project root: the current repository root from `git rev-parse --show-toplevel`
- Capacitor app (appId: fivechan.android)
- AVD: fivechan-test-api35 (pixel_6, API 35, arm64-v8a)
- PATH must include: $ANDROID_HOME/emulator, $ANDROID_HOME/platform-tools, $ANDROID_HOME/cmdline-tools/latest/bin