Skills scenario-testing

📦

scenario-testing

Name: scenario-testing
Author: 2389-research

Content revision r1 Medium Risk ⚙️ External commands

Validate Features with Scenario Tests

Feature work can pass shallow tests while failing against real systems. This skill guides Claude, Codex, and Claude Code to prove behavior with scenario tests and documented real-dependency checks.

Supports: Claude Codex Code(CC)

📊 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "scenario-testing" from https://skillstore.io/skills/2389-research-scenario-testing.md and its manifest at https://skillstore.io/api/skills/2389-research-scenario-testing/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/2389-research-scenario-testing.md Signed manifest GET /api/skills/2389-research-scenario-testing/manifest Signed lockfile GET /api/skills/2389-research-scenario-testing/lockfile

Test it

Using "scenario-testing". Validate a user registration workflow before release.

Expected outcome:

A .scratch/ scenario plan that uses the real database, real auth service in test mode, expected success criteria, and cleanup notes.

Using "scenario-testing". Convert a recurring checkout validation into shared coverage.

Expected outcome:

A documented scenario pattern with a clear given, when, then flow and a list of business behavior it validates.

Using "scenario-testing". Review a completed bug fix for missing validation.

Expected outcome:

A gap report that names missing real-dependency checks, invalid mocks, and the scenario needed before declaring the fix complete.

Security Audit

Medium Risk

v7 • 7/4/2026 Open versioned report

All static analyzer matches for Ruby or shell backtick execution are false positives caused by Markdown inline-code formatting. The system reconnaissance matches are also false positives, but the skill does have a medium contextual risk because it encourages real credential requests and real service execution without clear safeguards.

Files scanned

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:48 SKILL.md:72

Encourages Real Credential Requests

The skill requires external APIs to hit actual services and says to ask a human partner for real API credentials. This guidance can pressure users to disclose credentials and run costly or sensitive external operations without explicit safeguards.

The cited lines explicitly require real services and direct users to request real credentials. The risk is contextual because sandbox mode is mentioned, but clear secret handling and approval guardrails are missing.

Risk Factors

⚙️ External commands (8)

SKILL.md:32 SKILL.md:37 SKILL.md:39 SKILL.md:78 SKILL.md:80 SKILL.md:81 SKILL.md:85 SKILL.md:88

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/2389-research-scenario-testing/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/2389-research-scenario-testing/security.svg)](https://skillstore.io/skills/2389-research-scenario-testing?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/2389-research-scenario-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/2389-research-scenario-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/2389-research-scenario-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

2389-research. (2026). scenario-testing security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/2389-research-scenario-testing/audits/7

BibTeX citation

@techreport{2389-research-2389-research-scenario-testing-2026,
  author = {2389-research},
  title = {scenario-testing security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/2389-research-scenario-testing/audits/7},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "scenario-testing security audit report (audit version 7)"
version: "unspecified"
type: report
authors:
  - name: "2389-research"
date-released: "2026-07-04"
url: "https://skillstore.io/skills/2389-research-scenario-testing/audits/7"
identifiers:
  - type: other
    value: "skillstore:2389-research-scenario-testing:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Validate Backend Feature Behavior

Create a real dependency scenario before marking a new API, workflow, or database-backed change as complete.

Turn Bug Fixes into Repeatable Coverage

Reproduce a reported failure, verify the fix with a scenario, and document the pattern for future regression checks.

Guide AI Agents During Delivery

Keep Claude, Codex, or Claude Code focused on proving working behavior instead of stopping at isolated unit tests.

Try These Prompts

Create a First Scenario

Use scenario-testing to design a .scratch/ scenario for this feature. Include the real dependencies it must exercise and the pass condition.

Validate a Bug Fix

Use scenario-testing to reproduce this bug with real dependencies, verify the fix, and list what makes the scenario independent.

Promote a Scenario Pattern

Use scenario-testing to extract the validated scenario into a scenarios.jsonl entry with name, given, when, then, and validates fields.

Audit Release Readiness

Use scenario-testing to review this change set for missing real-dependency scenarios, invalid mock usage, and unresolved validation gaps.

Best Practices

Use sandbox or test-mode services when real external systems are required.
Keep each scenario independent so it can run alone and in parallel.
Move stable lessons from scratch scenarios into committed scenario documentation.

Avoid

Treating mocked unit tests as proof that a feature works end to end.
Running scenarios that depend on hidden state from earlier test executions.
Requesting or exposing production secrets instead of approved test credentials.

Frequently Asked Questions

Does this skill write test code for me?

It gives process guidance and scenario structure. The agent still adapts implementation details to your project and test framework.

Can I use mocks with this skill?

The skill rejects mocks as final validation. Use real dependencies or approved sandbox equivalents for completion evidence.

What is .scratch/ used for?

.scratch/ is a temporary workspace for scenario experiments. The skill expects it to remain ignored by version control.

What should go into scenarios.jsonl?

Put repeatable scenario patterns there after they prove useful. Include the behavior, setup, action, expected result, and validation purpose.

Does this require production services?

No. Use sandbox, test-mode, or staging services when possible, and get explicit approval before touching real external systems.

Which tools can use this skill?

The report lists compatibility with Claude, Codex, and Claude Code.

Developer Details

Author

2389-research

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/2389-research/claude-plugins/tree/main/scenario-testing/skills

Ref

14dc8f201a64f8d30fd131d7f036cd5e788be523

Maintenance freshness

7/20/2026

Usage

12 downloads · 192 views

File structure

📄 SKILL.md