Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Echovic/Qa Test Strategy — measured AI agent skill | DecimalAI

echovic/qa-test-strategy

SkillScore91Maintained

测试策略和测试金字塔原则，定义单元测试、集成测试、E2E测试的分布和覆盖要求

Testingby echovic

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

QA & Test Engineering pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/echovic-qa-test-strategy/SKILL.md

decimalai skills pull echovic-qa-test-strategy --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/echovic-qa-test-strategy/SKILL.md https://app.decimal.ai/s/echovic-qa-test-strategy/SKILL.md

Raw file: /s/echovic-qa-test-strategy/SKILL.md ↗ · machine-readable summary at /s/echovic-qa-test-strategy.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 1h ago

Yes — +41% lift+20% tokens0% turns91% of whole cases pass with skill (20/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-03	✗→✓	▲ Improved	-6%	0%
case-01	✗→✓	▲ Improved	29%	0%
case-02	✗→✓	▲ Improved	6%	0%
case-10	✗→✓	▲ Improved	-4%	0%
case-04	✗→✓	▲ Improved	16%	0%

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

echovic / boss-skill

skill/skills/qa/test-strategy/SKILL.md

View on GitHub ↗

License MITImported 8/3/2026Version v1

Skill contents

SKILL.md

测试策略与测试金字塔

测试金字塔原则

          /\
         /  \
        / E2E \          ← ~10%：端到端用户流程【必须编写】
       /--------\
      /  集成测试  \       ← ~20%：组件/服务/API 交互
     /--------------\
    /    单元测试     \    ← ~70%：函数/组件/服务逻辑
   /--------------------\

E2E 测试是强制要求

每个项目必须编写 E2E 测试，最少覆盖：

创建流程
编辑流程
删除流程
列表展示
核心业务流程

前端 vs 后端测试分布

| 层级 | 前端测试 | 后端测试 | |------|----------|----------| | 单元测试 | 组件渲染、Hooks、工具函数 | Service 层、业务逻辑、工具类 | | 集成测试 | 组件交互、状态管理、API 调用 | API 端点、数据库操作、服务间调用 | | E2E 测试 | UI 用户流程 | API 完整流程、跨服务调用 |

QA Attack Protocol

重放核心用户路径：证明核心用户路径真实可用
捕获真实 payload 与服务端响应：验证请求 payload、服务端响应和 schema 一致性
攻击认证授权：覆盖匿名、授权、非授权、过期、越权
攻击数据边界：empty state、pagination、第二页、旧数据、illegal enum、long input、double submit
攻击业务一致性：核对界面展示与服务端业务常量一致
验证产物类功能：验证核心产物、记录或状态存在、可展示、可继续用于下游流程
标记未验证路径：若核心用户路径只由 Mock 或桩数据证明，必须标记为未验证，不能作为发布证据

安全测试

| 测试类型 | 测试内容 | 示例 | |----------|----------|------| | SQL 注入 | 参数化查询验证 | ' OR '1'='1 | | XSS | 输出转义验证 | <script>alert(1)</script> | | CSRF | Token 验证 | 跨站请求测试 | | 认证 | Token 有效性 | 过期/伪造 Token | | 授权 | 权限边界 | 越权访问测试 | | 输入验证 | 边界值/格式 | 超长/特殊字符 |

性能测试

| 指标 | 前端目标 | 后端目标 | |------|----------|----------| | 首屏加载 | < 3s | - | | API P50 | - | < 100ms | | API P99 | - | < 500ms | | 并发用户 | - | ≥ 100 | | 内存泄漏 | 无 | 无 |

Want to see if echovic/qa-test-strategy would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.