스킬 gjalla-test-audit

📦

gjalla-test-audit

Name: gjalla-test-audit
Author: gjalla

콘텐츠 리비전 r1 안전 ⚙️ 외부 명령어

Audit Test Suites for False Confidence

Weak tests can hide production bugs while inflating coverage metrics. This skill reviews test quality and identifies misleading, redundant, or excessively mocked tests.

지원: Claude Codex Code(CC)

🥉 77 브론즈

Maintain this Skill? Claim it 🥉 77 브론즈

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "gjalla-test-audit" from https://skillstore.io/skills/gjalla-gjalla-test-audit.md and its manifest at https://skillstore.io/api/skills/gjalla-gjalla-test-audit/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/gjalla-gjalla-test-audit.md 서명된 manifest GET /api/skills/gjalla-gjalla-test-audit/manifest 서명된 lockfile GET /api/skills/gjalla-gjalla-test-audit/lockfile

테스트해 보기

"gjalla-test-audit" 사용 중입니다. Audit the account service tests for tautological database mocks.

예상 결과:

Tier 2 finding: three tests return hardcoded database rows and assert those same values. Replace them with database-backed behavior tests.

"gjalla-test-audit" 사용 중입니다. Find tests that do not exercise production code.

예상 결과:

Tier 1: The test recreates the source decision logic locally.
Evidence: The test imports no production module.
Action: Remove the duplicate logic test after approval and add a source-level test.

"gjalla-test-audit" 사용 중입니다. Review overlapping unit and integration tests.

예상 결과:

Tier 3 finding: the mocked unit test duplicates the stronger database-backed scenario. Keep unique edge cases and remove redundant coverage after approval.

보안 감사

안전

v1 • 2026. 8. 11. 버전별 보고서 열기

All 15 static findings are false positives caused by Markdown inline-code formatting around test identifiers and examples. The source defines a review workflow and requires approval before cleanup actions. No prompt injection, data exfiltration, command execution, or network reconnaissance intent was found.

스캔된 파일

102

분석된 줄 수

검토 항목

오탐 무시됨

위험 요인

⚙️ 외부 명령어 (14)

SKILL.md:18 SKILL.md:19 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:45 SKILL.md:48 SKILL.md:54 SKILL.md:56 SKILL.md:59

가장 최근에 완료된 정적·의미론적 감사에서 확인된 보안 발견 사항이 감지되지 않았습니다. 이는 스킬에 부작용이 없음을 증명하지 않습니다.

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/gjalla-gjalla-test-audit/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/gjalla-gjalla-test-audit/security.svg)](https://skillstore.io/skills/gjalla-gjalla-test-audit?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/gjalla-gjalla-test-audit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gjalla-gjalla-test-audit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/gjalla-gjalla-test-audit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

gjalla. (2026). gjalla-test-audit security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/gjalla-gjalla-test-audit/audits/1

BibTeX 인용

@techreport{gjalla-gjalla-gjalla-test-audit-2026,
  author = {gjalla},
  title = {gjalla-test-audit security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/gjalla-gjalla-test-audit/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gjalla-test-audit security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "gjalla"
date-released: "2026-08-11"
url: "https://skillstore.io/skills/gjalla-gjalla-test-audit/audits/1"
identifiers:
  - type: other
    value: "skillstore:gjalla-gjalla-test-audit:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Review a legacy test suite

Find tests that inflate confidence without protecting current production behavior.

Harden a risky subsystem

Compare critical source paths with tests and identify missing realistic coverage.

Improve quality governance

Classify weak tests and create a prioritized remediation report for the team.

이 프롬프트를 사용해 보세요

Basic test quality review

Audit the test suite in [directory]. Identify placeholder tests, tests without source imports, and obvious duplicated coverage. Report findings without changing files.

Mocking quality audit

Review tests for [component]. Compare each test with its source code. Flag tautological mocks and explain which production defects each test cannot detect.

Critical path coverage audit

Audit tests covering [critical path]. Rank gaps by production impact, identify encoded bugs, and recommend realistic integration or round-trip tests.

Full remediation plan

Audit [test scope] across all test layers. Classify findings into deletion and replacement tiers. Estimate coverage impact and propose approved cleanup waves.

모범 사례

Provide the relevant test files and production source files together.
Prioritize security boundaries, data access, and core business logic.
Run tests and coverage between approved cleanup waves.

피하기

Do not judge test quality from coverage percentages alone.
Do not remove weak tests before identifying replacement coverage.
Do not classify mocked tests without comparing their behavior to production code.

자주 묻는 질문

Does this skill modify tests automatically?

No. It reports findings first and requires approval before cleanup changes.

Which test frameworks are supported?

The process is framework independent, with specific examples for Vitest, PGlite, SQLite, and common mocking patterns.

Can it detect tests that encode production bugs?

It compares assertions, fixtures, and source behavior to identify inconsistencies that may preserve incorrect behavior.

Does it replace code coverage tools?

No. It interprets test quality and uses coverage results as supporting evidence.

What source access does the audit require?

It needs the selected tests, related production code, and enough project structure to identify test layers.

How are findings prioritized?

Findings are ranked by production impact, test realism, duplicated coverage, and the need for replacement tests.

개발자 세부 정보

작성자

gjalla

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/gjalla/engineering/tree/774041e7ab8b8fde48418dd4cd41e417fb4d71d3/skills/gjalla-test-audit

참조

c40485c25b35e0203cf615647a1fd81ad7a69ea8

유지보수 최신성

2026. 8. 11.

사용량

0 다운로드 · 0 조회

파일 구조

📄 SKILL.md