Skills test-engineer
📦

test-engineer

Content revision r2 High Risk ⚙️ External commands

Build and Run Complete Software Tests

Manual test design and fragmented tools slow reliable releases. This skill plans, writes, runs, and reports automated, API, performance, and CI tests.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "test-engineer" from https://skillstore.io/skills/zl2023github-test-engineer.md and its manifest at https://skillstore.io/api/skills/zl2023github-test-engineer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "test-engineer". Design tests for account login with lockout after five failed attempts.

Expected outcome:

  • P0: Valid credentials create an authenticated session.
  • P0: Five failed attempts lock the account for the configured duration.
  • P1: Locked accounts remain blocked when correct credentials are submitted.

Using "test-engineer". Summarize an API test where user creation returned an unexpected conflict.

Expected outcome:

Failed: duplicate email handling returned 500 instead of 409. Reproduction is consistent, and server logs should be checked for constraint mapping.

Using "test-engineer". Report a staging load test targeting 200 requests per second.

Expected outcome:

The test reached 203 requests per second. P95 latency was 420 milliseconds, and the 1.8 percent error rate exceeded the threshold.

Security Audit

High Risk
v4 • 7/24/2026 Open versioned report

All 19 static findings are false positives caused by Markdown formatting and multilingual prose. The skill still directs active API and load testing without authorization or production safeguards. Add explicit consent, scope, rate, and environment checks before publication.

1
Files scanned
216
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

High
Active Testing Lacks Authorization Guardrails
The skill directs real API calls and performance load tests without requiring target ownership, production approval, scope, or traffic limits.
The workflow explicitly requires actual API and load-test execution. No authorization, environment, or rate-limit check appears in that workflow.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/zl2023github-test-engineer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zl2023github-test-engineer/security.svg)](https://skillstore.io/skills/zl2023github-test-engineer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zl2023github-test-engineer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zl2023github-test-engineer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zl2023github-test-engineer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

zl2023github. (2026). test-engineer security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zl2023github-test-engineer/audits/4

BibTeX citation

@techreport{zl2023github-zl2023github-test-engineer-2026, author = {zl2023github}, title = {test-engineer security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/zl2023github-test-engineer/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "test-engineer security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "zl2023github" date-released: "2026-07-24" url: "https://skillstore.io/skills/zl2023github-test-engineer/audits/4" identifiers: - type: other value: "skillstore:zl2023github-test-engineer:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Create a Regression Suite

Turn feature requirements into prioritized cases and maintainable automated tests for repeated release checks.

Diagnose Test Failures

Run focused unit or API tests, inspect failures, and produce reproducible defect reports.

Add Quality Gates

Configure CI testing, reports, and approved performance checks for dependable delivery workflows.

Try These Prompts

Design Feature Tests
Create test cases for [feature]. Include normal flows, boundaries, failure paths, prerequisites, steps, expected results, and priorities.
Add Automated Tests
Review [project or module]. Write and run [framework] tests for [behavior], then summarize passes, failures, and uncovered risks.
Build a Browser Suite
Create and run a Playwright suite for [workflow]. Use page objects, isolated data, stable selectors, and failure evidence.
Validate Performance in CI
Design an authorized performance test for [staging endpoint] with [limits]. Run it, analyze percentiles and errors, then define CI thresholds.

Best Practices

  • Confirm the stack, scope, environment, credentials, and authorization before running tests.
  • Use isolated test data, stable selectors, mocks, and deterministic setup and cleanup.
  • Report exact commands, environment details, results, failures, and remaining coverage gaps.

Avoid

  • Do not run load or security tests against production without explicit approval and limits.
  • Do not install dependencies, start containers, or change CI files without user confirmation.
  • Do not hide failures by weakening assertions, deleting tests, or changing expected behavior.

Frequently Asked Questions

Which test types does this skill support?
It supports test planning, unit, UI, mobile, API, performance, CI, defect analysis, and reporting workflows.
Which frameworks can it use?
It covers pytest, JUnit, Jest, Selenium, Playwright, Cypress, Appium, requests, REST Assured, Supertest, k6, Locust, and wrk.
Can it run generated tests?
Yes, when the required tools, project access, environment, and user authorization are available.
Can it configure CI pipelines?
Yes. It can create configurations for GitHub Actions, GitLab CI, or Jenkins and integrate common test reports.
Does it support production load testing?
Production testing requires explicit ownership approval, strict traffic limits, monitoring, and rollback planning. Staging is the preferred target.
What information produces the best results?
Provide requirements, technology stack, repository context, environment details, test data rules, expected behavior, and success thresholds.

Developer Details

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

88a8e9a07f4c54ab105c1c41b6267c287146b07b

Maintenance freshness

7/26/2026

Usage

3 downloads · 2 views

File structure

📄 SKILL.md

More from zl2023github

View all
View all