Навыки alan-test-feature
πŸ“¦

alan-test-feature

v1.1.1 РСвизия содСрТимого r1 Высокий риск βš™οΈ Π’Π½Π΅ΡˆΠ½ΠΈΠ΅ ΠΊΠΎΠΌΠ°Π½Π΄Ρ‹πŸŒ Доступ ΠΊ ΡΠ΅Ρ‚ΠΈπŸ“ Доступ ΠΊ Ρ„Π°ΠΉΠ»ΠΎΠ²ΠΎΠΉ систСмС

Test Features and Publish Evidence Reports

Manual feature testing can miss edge cases and leave evidence scattered. This skill plans browser scenarios, captures results, uploads media, and creates a structured Alan report.

ΠŸΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΈΠ²Π°Π΅Ρ‚: Claude Codex Code(CC)
⚠️ 38 ΠŸΠ»ΠΎΡ…ΠΎ

Π£ΡΡ‚Π°Π½ΠΎΠ²ΠΈΡ‚ΡŒ с ΠΏΠΎΠΌΠΎΡ‰ΡŒΡŽ ΠΌΠΎΠ΅Π³ΠΎ АгСнта

Π‘ΠΊΠΎΠΏΠΈΡ€ΡƒΠΉΡ‚Π΅ этот запрос Π² своСго АгСнта. Он содСрТит ΠΊΠ°Π½ΠΎΠ½ΠΈΡ‡Π΅ΡΠΊΡƒΡŽ страницу Skill ΠΈ манифСст.

Запрос Π°Π³Π΅Π½Ρ‚Π°
Review the Skillstore skill "alan-test-feature" from https://skillstore.io/skills/supatest-ai-alan-test-feature.md and its manifest at https://skillstore.io/api/skills/supatest-ai-alan-test-feature/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Π’Π°Ρˆ АгСнт ΠΏΠΎ-ΠΏΡ€Π΅ΠΆΠ½Π΅ΠΌΡƒ Π΄ΠΎΠ»ΠΆΠ΅Π½ ΠΏΠΎΠΊΠ°Π·Π°Ρ‚ΡŒ ΠΏΠ»Π°Π½ ΠΈ Π·Π°ΠΏΡ€ΠΎΡΠΈΡ‚ΡŒ всС подтвСрТдСния, Ρ‚Ρ€Π΅Π±ΡƒΠ΅ΠΌΡ‹Π΅ ΠΏΠΎΠ»ΠΈΡ‚ΠΈΠΊΠΎΠΉ бСзопасности.

РСсурсы для AI-Π°Π³Π΅Π½Ρ‚ΠΎΠ²

Π˜ΡΠΏΠΎΠ»ΡŒΠ·ΡƒΠΉΡ‚Π΅ эти ссылки, ΠΊΠΎΠ³Π΄Π° AI-Π°Π³Π΅Π½Ρ‚Ρƒ, crawler ΠΈΠ»ΠΈ script Π½ΡƒΠΆΠ΅Π½ чистый контСкст вмСсто ΠΏΠΎΠ»Π½ΠΎΠΉ страницы.

Markdown-Π΄Π΅Ρ‚Π°Π»ΠΈ GET /skills/supatest-ai-alan-test-feature.md ΠŸΠΎΠ΄ΠΏΠΈΡΠ°Π½Π½Ρ‹ΠΉ manifest GET /api/skills/supatest-ai-alan-test-feature/manifest ΠŸΠΎΠ΄ΠΏΠΈΡΠ°Π½Π½Ρ‹ΠΉ lockfile GET /api/skills/supatest-ai-alan-test-feature/lockfile

ΠŸΡ€ΠΎΡ‚Π΅ΡΡ‚ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ

ИспользованиС «alan-test-feature». Test the new account settings form with standard coverage.

ΠžΠΆΠΈΠ΄Π°Π΅ΠΌΡ‹ΠΉ Ρ€Π΅Π·ΡƒΠ»ΡŒΡ‚Π°Ρ‚:

A mixed-status report covers saving valid changes, required-field validation, duplicate submission, and server failure. Two reproducible issues include screenshot evidence.

ИспользованиС «alan-test-feature». Run a light check of the updated checkout confirmation page.

ΠžΠΆΠΈΠ΄Π°Π΅ΠΌΡ‹ΠΉ Ρ€Π΅Π·ΡƒΠ»ΡŒΡ‚Π°Ρ‚:

A passing report documents navigation, purchase confirmation, persisted order details, and final visual evidence.

ИспользованиС «alan-test-feature». Test the dashboard comprehensively on desktop and mobile widths.

ΠžΠΆΠΈΠ΄Π°Π΅ΠΌΡ‹ΠΉ Ρ€Π΅Π·ΡƒΠ»ΡŒΡ‚Π°Ρ‚:

A comprehensive report summarizes responsive layouts, empty states, authorization behavior, navigation, and recoverable API failures with linked media.

Аудит бСзопасности

Высокий риск
v1 β€’ 20.08.2026 ΠžΡ‚ΠΊΡ€Ρ‹Ρ‚ΡŒ вСрсионный ΠΎΡ‚Ρ‡Π΅Ρ‚

Most backtick, localhost, device-file, and reconnaissance alerts are false positives caused by Markdown examples or bounded local testing. Confirmed risks include unpinned global installation, repository script execution, environment-file access, predictable temporary storage, and mandatory capture uploads. Media can contain credentials or private application data and is uploaded without a review gate.

1
ΠŸΡ€ΠΎΡΠΊΠ°Π½ΠΈΡ€ΠΎΠ²Π°Π½ΠΎ Ρ„Π°ΠΉΠ»ΠΎΠ²
440
ΠŸΡ€ΠΎΠ°Π½Π°Π»ΠΈΠ·ΠΈΡ€ΠΎΠ²Π°Π½ΠΎ строк
16
ΠŸΡƒΠ½ΠΊΡ‚Ρ‹ ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ
0
Π›ΠΎΠΆΠ½Ρ‹Π΅ срабатывания ΠΏΡ€ΠΎΠΈΠ³Π½ΠΎΡ€ΠΈΡ€ΠΎΠ²Π°Π½Ρ‹

ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Ρ‘Π½Π½Ρ‹Π΅ ΠΏΡ€ΠΎΠ±Π»Π΅ΠΌΡ‹ бСзопасности (13)

Высокий
SKILL.md:126
Environment file access
4. Check for `Procfile`, `.env`, `Pipfile`, `requirements.txt`, `Gemfile`
The discovery step includes checking .env while determining how to run the project. It may expose unrelated credentials even though the exact read method is not specified.
Высокий
SKILL.md:162
Environment file access
- Check `.env` or `.env.local` for `PORT` or `VITE_PORT` or similar
The skill explicitly directs the agent to inspect .env and .env.local. These files commonly contain credentials beyond the requested port value.
Высокий
SKILL.md:162
Environment variant files
- Check `.env` or `.env.local` for `PORT` or `VITE_PORT` or similar
The skill explicitly directs the agent to inspect .env and .env.local. These files commonly contain credentials beyond the requested port value.
Высокий
SKILL.md:4
Screen capture upload
description: Scope coverage, build a testing strategy, test the feature with agent-browser, capture
The workflow requires captured application screens to be uploaded and referenced from a persistent report. Sensitive UI data can leave the local environment without a review gate.
Высокий
SKILL.md:9
Screen capture upload
Analyze the current branch's changes, scope the coverage level with the user, build an explicit test
The workflow requires captured application screens to be uploaded and referenced from a persistent report. Sensitive UI data can leave the local environment without a review gate.
Высокий
SKILL.md:45
Screen capture upload
All captures (screenshots, videos) MUST be written to `/tmp/alan-captures/`.
This mandatory capture is part of the workflow that uploads every screenshot and video to S3. The image may contain credentials, personal data, or private application state.
Высокий
SKILL.md:55
Screen capture upload
> - If you are tempted to create a `reports/` or `screenshots/` folder anywhere other than `/tmp/`,
This mandatory capture is part of the workflow that uploads every screenshot and video to S3. The image may contain credentials, personal data, or private application state.
Высокий
SKILL.md:246
Screen capture upload
agent-browser --session test-feature screenshot /tmp/alan-captures/step-00-initial-state.png
This mandatory capture is part of the workflow that uploads every screenshot and video to S3. The image may contain credentials, personal data, or private application state.
ΠŸΠΎΠΊΠ°Π·Π°Ρ‚ΡŒ всС ΠΏΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Ρ‘Π½Π½Ρ‹Π΅ Π½Π°Ρ…ΠΎΠ΄ΠΊΠΈ (13)
Высокий
SKILL.md:259
Screen capture upload
agent-browser --session test-feature screenshot /tmp/alan-captures/step-NN-description.png
This mandatory capture is part of the workflow that uploads every screenshot and video to S3. The image may contain credentials, personal data, or private application state.
Высокий
SKILL.md:302
Screen capture upload
agent-browser --session test-feature screenshot /tmp/alan-captures/final-state.png
This mandatory capture is part of the workflow that uploads every screenshot and video to S3. The image may contain credentials, personal data, or private application state.
Высокий
SKILL.md:404
Screen capture upload
"screenshotUrl": "<s3Key from Phase 3 β€” e.g. sandbox-captures/org/task/step-01.png β€” omit if upload
The workflow requires captured application screens to be uploaded and referenced from a persistent report. Sensitive UI data can leave the local environment without a review gate.
Высокий
SKILL.md:413
Screen capture upload
"screenshotUrl": "<s3Key from Phase 3 showing the issue β€” omit if upload failed>"
The workflow requires captured application screens to be uploaded and referenced from a persistent report. Sensitive UI data can leave the local environment without a review gate.
Высокий
SKILL.md:426
Screen capture upload
- **screenshotUrls**: flat list of ALL screenshot s3Keys from Phase 3 (for gallery display). Use the
The workflow requires captured application screens to be uploaded and referenced from a persistent report. Sensitive UI data can leave the local environment without a review gate.
ΠŸΡƒΠ½ΠΊΡ‚Ρ‹ ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ возмоТностСй (16)

Π­Ρ‚ΠΎ Ρ€Π΅Π°Π»ΡŒΠ½Ρ‹Π΅ Π»ΠΎΠΊΠ°Π»ΡŒΠ½Ρ‹Π΅ возмоТности, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Π΅ ΠΌΠΎΠ³ΡƒΡ‚ ΠΎΠΆΠΈΠ΄Π°Ρ‚ΡŒΡΡ для этого Π½Π°Π²Ρ‹ΠΊΠ°, поэтому ΠΎΠ½ΠΈ Ρ‚Ρ€Π΅Π±ΡƒΡŽΡ‚ ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ, Π½ΠΎ Π½Π΅ ΡΡ‡ΠΈΡ‚Π°ΡŽΡ‚ΡΡ ΠΏΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Ρ‘Π½Π½Ρ‹ΠΌ врСдоносным ΠΏΠΎΠ²Π΅Π΄Π΅Π½ΠΈΠ΅ΠΌ.

Высокий
SKILL.md:9
Ruby/shell backtick execution
Analyze the current branch's changes, scope the coverage level with the user, build an explicit test
The instruction starts project processes and mandates uploading browser captures to S3. These are consequential external actions that can execute repository code and disclose application data.
Высокий
SKILL.md:34-36
Ruby/shell backtick execution
```bash
The fenced command installs an unpinned npm package globally and runs its installer. A compromised or changed package could execute arbitrary code with the agent's permissions.
Высокий
SKILL.md:130-144
Ruby/shell backtick execution
```bash
The command block starts repository-defined npm, Python, Ruby, or Docker services. Those startup paths can execute untrusted project code and alter the local environment.
Высокий
SKILL.md:328
Ruby/shell backtick execution
For each captured file, use the `mcp__alan__get_upload_url` MCP tool to get a presigned S3 URL, then
This instruction explicitly sends every captured file to S3 through a presigned URL. Captures can contain credentials, personal data, or unreleased application details.
Высокий
SKILL.md:350-354
Ruby/shell backtick execution
```bash
The fenced curl command performs the external PUT that uploads a local screenshot. This is a direct data-transfer action with no content review or approval gate.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:45
Temp directory access
All captures (screenshots, videos) MUST be written to `/tmp/alan-captures/`.
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:48
Temp directory access
mkdir -p /tmp/alan-captures
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:52
Temp directory access
> - **ONLY** write capture files to `/tmp/alan-captures/`. Never anywhere else.
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:55
Temp directory access
> - If you are tempted to create a `reports/` or `screenshots/` folder anywhere other than `/tmp/`,
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:236
Temp directory access
agent-browser --session test-feature record start /tmp/alan-captures/happy-path.webm
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:246
Temp directory access
agent-browser --session test-feature screenshot /tmp/alan-captures/step-00-initial-state.png
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:259
Temp directory access
agent-browser --session test-feature screenshot /tmp/alan-captures/step-NN-description.png
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:302
Temp directory access
agent-browser --session test-feature screenshot /tmp/alan-captures/final-state.png
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:313
Temp directory access
for f in /tmp/alan-captures/*.webm; do
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:334
Temp directory access
SIZE=$(stat -c%s "/tmp/alan-captures/step-01.png" 2>/dev/null || stat -f%z "/tmp/alan-captures/step-
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.
Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
SKILL.md:353
Temp directory access
--data-binary @/tmp/alan-captures/step-01.png
The skill mandates predictable names under a shared /tmp directory without restrictive permissions or symlink checks. Captures may be exposed or redirected on multi-user systems.

Π€Π°ΠΊΡ‚ΠΎΡ€Ρ‹ риска

βš™οΈ Π’Π½Π΅ΡˆΠ½ΠΈΠ΅ ΠΊΠΎΠΌΠ°Π½Π΄Ρ‹ (50)
SKILL.md:9 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:23 SKILL.md:27 SKILL.md:29-31 SKILL.md:31-34 SKILL.md:34-36 SKILL.md:36-39 SKILL.md:39-41 SKILL.md:41-45 SKILL.md:45-47 SKILL.md:47-49 SKILL.md:49-52 SKILL.md:52-53 SKILL.md:53 SKILL.md:54-55 SKILL.md:55 SKILL.md:65-67 SKILL.md:67-75 SKILL.md:75-81 SKILL.md:81 SKILL.md:109-112 SKILL.md:112-123 SKILL.md:123 SKILL.md:124 SKILL.md:125 SKILL.md:126 SKILL.md:127 SKILL.md:130-144 SKILL.md:144-149 SKILL.md:149-155 SKILL.md:155-162 SKILL.md:162 SKILL.md:163-164 SKILL.md:164-210 SKILL.md:210-220 SKILL.md:220-222 SKILL.md:222 SKILL.md:226-229 SKILL.md:229-235 SKILL.md:235-237 SKILL.md:237-245 SKILL.md:245-247 SKILL.md:247-254 SKILL.md:254-255 SKILL.md:255 SKILL.md:256 SKILL.md:258-260
🌐 Доступ ΠΊ сСти (5)
SKILL.md:152 SKILL.md:163 SKILL.md:221 SKILL.md:227 SKILL.md:347
πŸ“ Доступ ΠΊ Ρ„Π°ΠΉΠ»ΠΎΠ²ΠΎΠΉ систСмС (19)
SKILL.md:30 SKILL.md:110 SKILL.md:111 SKILL.md:152 SKILL.md:163 SKILL.md:314 SKILL.md:315 SKILL.md:334 SKILL.md:45 SKILL.md:48 SKILL.md:52 SKILL.md:55 SKILL.md:236 SKILL.md:246 SKILL.md:259 SKILL.md:302 SKILL.md:313 SKILL.md:334 SKILL.md:353

ΠžΠ±Π½Π°Ρ€ΡƒΠΆΠ΅Π½Π½Ρ‹Π΅ ΠΏΠ°Ρ‚Ρ‚Π΅Ρ€Π½Ρ‹

Screen capture uploadΓ—10
Аудитор:: codex
ΠŸΠΎΠ΄Π΅Π»ΠΈΡ‚ΡŒΡΡ ΠΈ Ρ†ΠΈΡ‚ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ этот ΠΎΡ‚Ρ‡Π΅Ρ‚

Π”Π΅Π»ΠΈΡ‚Π΅ΡΡŒ вСрсионным ΠΎΡ‚Ρ‡Π΅Ρ‚ΠΎΠΌ ΠΎΠ± ΠΎΡ†Π΅Π½ΠΊΠ΅, Π½Π΅ΠΉΡ‚Ρ€Π°Π»ΡŒΠ½Ρ‹ΠΌ Π·Π½Π°Ρ‡ΠΊΠΎΠΌ, встраиваСмой ΠΊΠ°Ρ€Ρ‚ΠΎΡ‡ΠΊΠΎΠΉ ΠΈ Ρ†ΠΈΡ‚Π°Ρ‚Π°ΠΌΠΈ. Skillstore ΠΏΡƒΠ±Π»ΠΈΠΊΡƒΠ΅Ρ‚ Π΄ΠΎΠΊΠ°Π·Π°Ρ‚Π΅Π»ΡŒΡΡ‚Π²Π°, Π½Π΅ Ρ€Π΅ΡˆΠ°Ρ, бСзопасСн Π»ΠΈ этот Skill.

ΠžΡ‚ΠΊΡ€Ρ‹Ρ‚ΡŒ вСрсионный ΠΎΡ‚Ρ‡Π΅Ρ‚
ΠžΡ†Π΅Π½ΠΊΠ° бСзопасности

ΠšΠΎΠΏΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ ссылку Π½Π° ΠΎΡ‚Ρ‡Ρ‘Ρ‚

https://skillstore.io/skills/supatest-ai-alan-test-feature/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Π—Π½Π°Ρ‡ΠΎΠΊ Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/supatest-ai-alan-test-feature/security.svg)](https://skillstore.io/skills/supatest-ai-alan-test-feature?utm_source=security_passport_badge)

Π—Π½Π°Ρ‡ΠΎΠΊ HTML

<a href="https://skillstore.io/skills/supatest-ai-alan-test-feature?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/supatest-ai-alan-test-feature/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

ВстраиваСмая ΠΊΠ°Ρ€Ρ‚ΠΎΡ‡ΠΊΠ°

<iframe src="https://skillstore.io/embed/skills/supatest-ai-alan-test-feature.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
АкадСмичСскиС ссылки (APA Β· BibTeX Β· CFF)

Π¦ΠΈΡ‚Π°Ρ‚Π° APA

supatest-ai. (2026). alan-test-feature security audit report (audit version 1) [Author version 1.1.1]. Skillstore. https://skillstore.io/skills/supatest-ai-alan-test-feature/audits/1

Π¦ΠΈΡ‚Π°Ρ‚Π° BibTeX

@techreport{supatest-ai-supatest-ai-alan-test-feature-2026, author = {supatest-ai}, title = {alan-test-feature security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/supatest-ai-alan-test-feature/audits/1}, note = {Author version 1.1.1} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "alan-test-feature security audit report (audit version 1)" version: "1.1.1" type: report authors: - name: "supatest-ai" date-released: "2026-08-20" url: "https://skillstore.io/skills/supatest-ai-alan-test-feature/audits/1" identifiers: - type: other value: "skillstore:supatest-ai-alan-test-feature:audit:1" description: "Skillstore immutable audit report identifier"

ΠžΡ†Π΅Π½ΠΊΠ° Skillstore

ΠŸΠΎΡ‡Π΅ΠΌΡƒ такая ΠΎΡ†Π΅Π½ΠΊΠ° Π”ΠΎΡΡ‚ΠΎΠ²Π΅Ρ€Π½ΠΎΡΡ‚ΡŒ Π΄ΠΎΠΊΠ°Π·Π°Ρ‚Π΅Π»ΡŒΡΡ‚Π²: Π‘Ρ€Π΅Π΄Π½ΠΈΠΉ
55
АрхитСктура
100
Π‘ΠΎΠΏΡ€ΠΎΠ²ΠΎΠΆΠ΄Π°Π΅ΠΌΠΎΡΡ‚ΡŒ
87
ΠšΠΎΠ½Ρ‚Π΅Π½Ρ‚
65
БообщСство
91
БоотвСтствиС спСцификации

Π§Ρ‚ΠΎ Π²Ρ‹ ΠΌΠΎΠΆΠ΅Ρ‚Π΅ ΠΏΠΎΡΡ‚Ρ€ΠΎΠΈΡ‚ΡŒ

Validate a Pull Request

Test changed user flows before review and attach visual evidence to a structured report.

Verify Acceptance Criteria

Run agreed scenarios and document passes, failures, and reproducible defects for a feature.

Review a Release Candidate

Check critical workflows, edge cases, responsiveness, and navigation before a release decision.

ΠŸΠΎΠΏΡ€ΠΎΠ±ΡƒΠΉΡ‚Π΅ эти ΠΏΡ€ΠΎΠΌΠΏΡ‚Ρ‹

Run a Light Feature Check 
Test the current feature with light coverage. Confirm the main path, capture required evidence, and create the Alan test report.
Run Standard Feature Testing 
Test [feature] with standard coverage. Include the happy path, validation failures, key error states, and a structured report.
Run Comprehensive Browser Testing 
Test [feature] comprehensively. Cover boundaries, permissions, responsiveness, navigation, and recoverable failures. Record separate videos when needed.
Design Risk-Based Change Coverage 
Analyze changes between [base branch] and HEAD. Design risk-based scenarios for [feature], execute them, and report reproducible defects with evidence.

Π›ΡƒΡ‡ΡˆΠΈΠ΅ ΠΏΡ€Π°ΠΊΡ‚ΠΈΠΊΠΈ

  • Provide acceptance criteria, test accounts, and known risks before execution.
  • Review captures for secrets and personal data before approving uploads.
  • Use stable test data and isolate tests from production systems.

Π˜Π·Π±Π΅Π³Π°Ρ‚ΡŒ

  • Do not provide production credentials or unrestricted administrative accounts.
  • Do not upload captures before checking visible data and browser state.
  • Do not treat browser testing as complete security or regression coverage.

Часто Π·Π°Π΄Π°Π²Π°Π΅ΠΌΡ‹Π΅ вопросы

What coverage levels are supported?
Light covers the main path. Standard adds key edge cases and errors. Comprehensive adds boundaries, responsiveness, navigation, and broader failure states.
Does the skill start the application?
Yes. It inspects common project files, selects a likely development command, starts the server, and checks its local port.
Which browser tool does it use?
It uses the agent-browser command-line tool for navigation, interaction, screenshots, and recording.
Are screenshots and videos required?
The current workflow requires screenshots and attempts video recording. Users should review media before any external upload.
Where is the final report created?
The skill calls the Alan report tool to create a structured artifact linked to the active task, conversation, and team.
Can it test production systems?
The workflow targets a local development server. Production testing requires separate authorization, data controls, and operational safeguards.

БвСдСния для Ρ€Π°Π·Ρ€Π°Π±ΠΎΡ‚Ρ‡ΠΈΠΊΠΎΠ²

Автор

supatest-ai

ЛицСнзия

MIT

ВСрсия Π°Π²Ρ‚ΠΎΡ€Π°

v1.1.1

РСвизия Skillstore

r1

Π Π΅ΠΏΠΎΠ·ΠΈΡ‚ΠΎΡ€ΠΈΠΉ

https://github.com/supatest-ai/alan-skills/tree/e6ebae2c86d4d3ad8597e588f3e820ab0c90658f/skills/alan-test-feature

Бсылка

bdb71a4bc34515f37772ae85fd5501f9c2ff33b0

ΠΠΊΡ‚ΡƒΠ°Π»ΡŒΠ½ΠΎΡΡ‚ΡŒ ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΊΠΈ

20.08.2026

ИспользованиС

0 Π·Π°Π³Ρ€ΡƒΠ·ΠΎΠΊ Β· 0 просмотров

Π‘Ρ‚Ρ€ΡƒΠΊΡ‚ΡƒΡ€Π° Ρ„Π°ΠΉΠ»ΠΎΠ²

πŸ“„ SKILL.md

Π‘ΠΎΠ»ΡŒΡˆΠ΅ ΠΎΡ‚ supatest-ai

ΠŸΠΎΠΊΠ°Π·Π°Ρ‚ΡŒ всС

БвязанныС Π½Π°Π²Ρ‹ΠΊΠΈ

ΠŸΠΎΠΊΠ°Π·Π°Ρ‚ΡŒ всС
πŸ“¦

senior-qa

81

Π£Π»ΡƒΡ‡ΡˆΠ΅Π½ΠΈΠ΅ QA-покрытия для Π²Π΅Π±-ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ

ΠΎΡ‚ alirezarezvani

Π‘ΠΎΠ²Ρ€Π΅ΠΌΠ΅Π½Π½Ρ‹ΠΌ ΠΊΠΎΠΌΠ°Π½Π΄Π°ΠΌ Π½ΡƒΠΆΠ½Π° понятная стратСгия тСстирования ΠΈ практичная автоматизация Π±Π΅Π· замСдлСния поставки. Π­Ρ‚ΠΎΡ‚ Π½Π°Π²Ρ‹ΠΊ ΠΏΠΎΠΌΠΎΠ³Π°Π΅Ρ‚ Claude, Codex ΠΈ Claude Code ΠΏΠ»Π°Π½ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ тСсты, Π°Π½Π°Π»ΠΈΠ·ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ ΠΏΠΎΠΊΡ€Ρ‹Ρ‚ΠΈΠ΅ ΠΈ ΡΠΎΠ·Π΄Π°Π²Π°Ρ‚ΡŒ каркасы QA-процСссов.

Кодинг ΠΈ Ρ€Π°Π·Ρ€Π°Π±ΠΎΡ‚ΠΊΠ° ΠŸΡ€ΠΎΡΠΌΠΎΡ‚Ρ€
πŸ“¦

fresh-eyes-review

79

ΠŸΡ€ΠΎΠ²Π΅Ρ€ΠΊΠ° ΠΊΠΎΠ΄Π° ΠΏΠ΅Ρ€Π΅Π΄ ΠΊΠΎΠΌΠΌΠΈΡ‚ΠΎΠΌ

ΠΎΡ‚ 2389-research

ΠšΠΎΠΌΠ°Π½Π΄Ρ‹ Π²Ρ‹ΠΏΡƒΡΠΊΠ°ΡŽΡ‚ Π±Π°Π³ΠΈ, ΠΊΠΎΠ³Π΄Π° слишком быстро Π΄ΠΎΠ²Π΅Ρ€ΡΡŽΡ‚ Ρ„ΠΈΠ½Π°Π»ΡŒΠ½Ρ‹ΠΌ измСнСниям. Π­Ρ‚ΠΎΡ‚ Π½Π°Π²Ρ‹ΠΊ добавляСт сфокусированноС ΠΏΡ€Π΅Π΄ΠΊΠΎΠΌΠΌΠΈΡ‚Π½ΠΎΠ΅ Ρ€Π΅Π²ΡŒΡŽ бСзопасности, Π»ΠΎΠ³ΠΈΠΊΠΈ, бизнСс-ΠΏΡ€Π°Π²ΠΈΠ» ΠΈ ΠΏΡ€ΠΎΠΈΠ·Π²ΠΎΠ΄ΠΈΡ‚Π΅Π»ΡŒΠ½ΠΎΡΡ‚ΠΈ.

Кодинг ΠΈ Ρ€Π°Π·Ρ€Π°Π±ΠΎΡ‚ΠΊΠ° ΠŸΡ€ΠΎΡΠΌΠΎΡ‚Ρ€
πŸ“¦

testing-test-writing

79

ΠŸΠΈΡˆΠΈΡ‚Π΅ сфокусированныС повСдСнчСскиС тСсты

ΠΎΡ‚ EIS-ITS

ΠšΠΎΠΌΠ°Π½Π΄Ρ‹ часто Π΄ΠΎΠ±Π°Π²Π»ΡΡŽΡ‚ Ρ…Ρ€ΡƒΠΏΠΊΠΈΠ΅ тСсты, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Π΅ ΠΎΡ‚Ρ€Π°ΠΆΠ°ΡŽΡ‚ Π΄Π΅Ρ‚Π°Π»ΠΈ Ρ€Π΅Π°Π»ΠΈΠ·Π°Ρ†ΠΈΠΈ вмСсто повСдСния ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Ρ. Π­Ρ‚ΠΎΡ‚ Π½Π°Π²Ρ‹ΠΊ ΠΏΠΎΠΌΠΎΠ³Π°Π΅Ρ‚ Claude, Codex ΠΈ Claude Code ΠΏΠΈΡΠ°Ρ‚ΡŒ сфокусированныС тСсты для критичСски Π²Π°ΠΆΠ½Ρ‹Ρ… Ρ€Π°Π±ΠΎΡ‡ΠΈΡ… процСссов.

Кодинг ΠΈ Ρ€Π°Π·Ρ€Π°Π±ΠΎΡ‚ΠΊΠ° ΠŸΡ€ΠΎΡΠΌΠΎΡ‚Ρ€
πŸ“¦

code-review-excellence

79

Π£Π»ΡƒΡ‡ΡˆΠ°ΠΉΡ‚Π΅ Ρ€Π΅Π²ΡŒΡŽ ΠΊΠΎΠ΄Π° с ΠΏΠΎΠΌΠΎΡ‰ΡŒΡŽ структурированной ΠΎΠ±Ρ€Π°Ρ‚Π½ΠΎΠΉ связи

ΠΎΡ‚ sickn33

РСвью ΠΊΠΎΠ΄Π° ΠΌΠΎΠ³ΡƒΡ‚ ΡƒΠΏΡƒΡΠΊΠ°Ρ‚ΡŒ Π²Π°ΠΆΠ½Ρ‹Π΅ риски ΠΈΠ»ΠΈ ΡΡ‚Π°Π½ΠΎΠ²ΠΈΡ‚ΡŒΡΡ слоТными для практичСского примСнСния. Π­Ρ‚ΠΎΡ‚ Π½Π°Π²Ρ‹ΠΊ Π΄Π°Π΅Ρ‚ Claude, Codex ΠΈ Claude Code структурированный ΠΌΠ΅Ρ‚ΠΎΠ΄ Ρ€Π΅Π²ΡŒΡŽ с понятной ΡΠ΅Ρ€ΡŒΠ΅Π·Π½ΠΎΡΡ‚ΡŒΡŽ, обоснованиСм ΠΈ ΡƒΡ‚ΠΎΡ‡Π½ΡΡŽΡ‰ΠΈΠΌΠΈ вопросами.

Кодинг ΠΈ Ρ€Π°Π·Ρ€Π°Π±ΠΎΡ‚ΠΊΠ° ΠŸΡ€ΠΎΡΠΌΠΎΡ‚Ρ€
πŸ“¦

verification-before-completion

79

ΠŸΡ€ΠΎΠ²Π΅Ρ€ΡΠΉΡ‚Π΅ заявлСния ΠΎ Π·Π°Π²Π΅Ρ€ΡˆΠ΅Π½ΠΈΠΈ ΠΏΠ΅Ρ€Π΅Π΄ ΠΎΡ‚Ρ‡Π΅Ρ‚ΠΎΠΌ

ΠΎΡ‚ CodingCossack

ЗаявлСния ΠΎ Π·Π°Π²Π΅Ρ€ΡˆΠ΅Π½ΠΈΠΈ ΠΌΠΎΠ³ΡƒΡ‚ Π±Ρ‹Ρ‚ΡŒ ΠΎΡˆΠΈΠ±ΠΎΡ‡Π½Ρ‹ΠΌΠΈ, ΠΊΠΎΠ³Π΄Π° Π°Π³Π΅Π½Ρ‚Ρ‹ ΠΏΠΎΠ»Π°Π³Π°ΡŽΡ‚ΡΡ Π½Π° ΠΏΠ°ΠΌΡΡ‚ΡŒ ΠΈΠ»ΠΈ ΡƒΠ²Π΅Ρ€Π΅Π½Π½ΠΎΡΡ‚ΡŒ. Π­Ρ‚ΠΎΡ‚ Π½Π°Π²Ρ‹ΠΊ Ρ‚Ρ€Π΅Π±ΡƒΠ΅Ρ‚ свСТих Π΄ΠΎΠΊΠ°Π·Π°Ρ‚Π΅Π»ΡŒΡΡ‚Π² ΠΏΠ΅Ρ€Π΅Π΄ ΠΎΡ‚Ρ‡Π΅Ρ‚ΠΎΠΌ ΠΎΠ± успСхС.

Кодинг ΠΈ Ρ€Π°Π·Ρ€Π°Π±ΠΎΡ‚ΠΊΠ° ΠŸΡ€ΠΎΡΠΌΠΎΡ‚Ρ€
πŸ“¦

requesting-code-review

79

Π—Π°ΠΏΡ€Π°ΡˆΠΈΠ²Π°ΠΉΡ‚Π΅ сфокусированныС Ρ€Π΅Π²ΡŒΡŽ ΠΊΠΎΠ΄Π°

ΠΎΡ‚ DMJGilbert

РСвью ΠΊΠΎΠ΄Π° часто Π½Π΅ Ρ…Π²Π°Ρ‚Π°Π΅Ρ‚ контСкста, Ρ‡Ρ‚ΠΎ замСдляСт ΠΎΠ±Ρ€Π°Ρ‚Π½ΡƒΡŽ связь ΠΈ ΠΏΡ€ΠΈΠ²ΠΎΠ΄ΠΈΡ‚ ΠΊ пропуску Π²Π°ΠΆΠ½Ρ‹Ρ… рисков. Π­Ρ‚ΠΎΡ‚ Π½Π°Π²Ρ‹ΠΊ ΠΏΠΎΠΌΠΎΠ³Π°Π΅Ρ‚ ΡΡ‚Ρ€ΡƒΠΊΡ‚ΡƒΡ€ΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ запросы Π½Π° Ρ€Π΅Π²ΡŒΡŽ ΠΈ ΠΎΠ±Ρ€Π°Π±ΠΎΡ‚ΠΊΡƒ ΠΎΡ‚Π²Π΅Ρ‚ΠΎΠ² для Claude, Codex ΠΈ Claude Code.

Кодинг ΠΈ Ρ€Π°Π·Ρ€Π°Π±ΠΎΡ‚ΠΊΠ° ΠŸΡ€ΠΎΡΠΌΠΎΡ‚Ρ€