メニュー
API testing skill using Postman and Newman, covering collections, environments, pre-request scripts, test scripts, and CI/CD integration with Newman.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/PramodDutta/qaskills --skill postman-api-testingコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
Use when publishing SEO blog articles to qaskills.sh, e.g. "publish today's articles", "daily SEO batch", "write 10 articles from keyword research", "add a blog post", or any request that creates files under packages/web/src/app/blog/posts.
Generate test data from the schemas you already have. Read OpenAPI, JSON Schema, SQL DDL, or TypeScript models and produce deterministic factories, boundary and negative cases, relational datasets with valid foreign keys, cleanup scripts, and PII-safe synthetic data. Production records never leave the machine.
Analyze a git diff, map affected risks, select the tests that matter, detect coverage gaps on changed lines, run configurable quality gates, and produce a go/no-go release report with cited evidence. Recommends only; never merges or deploys.
SOC 職業分類に基づく
SKILL.md を表示中
| name | Postman API Testing |
| description | API testing skill using Postman and Newman, covering collections, environments, pre-request scripts, test scripts, and CI/CD integration with Newman. |
| version | 1.0.0 |
| author | thetestingacademy |
| license | MIT |
| tags | ["postman","newman","api-testing","rest","collections","ci-cd"] |
| testingTypes | ["api"] |
| frameworks | ["postman"] |
| languages | ["javascript"] |
| domains | ["api"] |
| agents | ["claude-code","cursor","github-copilot","windsurf","codex","aider","continue","cline","zed","bolt"] |
You are an expert QA engineer specializing in API testing with Postman and Newman. When the user asks you to create, review, or debug Postman collections and test scripts, follow these detailed instructions.
postman/
collections/
users-api.postman_collection.json
products-api.postman_collection.json
auth-api.postman_collection.json
e2e-workflows.postman_collection.json
environments/
local.postman_environment.json
staging.postman_environment.json
production.postman_environment.json
globals/
global-variables.postman_globals.json
data/
users.csv
products.json
scripts/
run-tests.sh
newman-config.js
API Collection
├── Auth
│ ├── Login
│ ├── Register
│ ├── Refresh Token
│ └── Logout
├── Users
│ ├── Create User
│ ├── Get User by ID
│ ├── Update User
│ ├── Delete User
│ └── List Users
├── Products
│ ├── Create Product
│ ├── Get Product
│ ├── Search Products
│ └── Delete Product
└── Workflows
├── User Registration Flow
└── Complete Purchase Flow
{
"name": "Staging",
"values": [
{ "key": "baseUrl", "value": "https://staging-api.example.com", "enabled"
// Generate unique email for user creation
const timestamp = Date.now();
pm.variables.set("uniqueEmail", `test-${timestamp}@example.com`);
pm.variables.set("uniqueName", `TestUser_${timestamp}`);
pm.variables.set("requestId", pm.variables.replaceIn("{{$guid}}"));
// Generate random data
pm.variables.set("randomPrice", (Math.random() * 100 + 1).toFixed(2));
pm.variables.set("randomQuantity", Math.floor(Math.random() * 10) + 1);
// Pre-request script to ensure we have a valid token
const tokenExpiry = pm.environment.get("tokenExpiry");
const currentTime = Date.now();
if (!tokenExpiry || currentTime > parseInt(tokenExpiry)) {
// Token is expired or missing, get a new one
const loginRequest = {
url: `${pm.environment.get("baseUrl")}/api/auth/login`,
method: "POST",
header: {
"Content-Type": "application/json",
},
body: {
mode: "raw",
raw: JSON.stringify({
email: pm.environment.get("adminEmail"),
password: pm.environment.get("adminPassword"),
}),
},
};
pm.sendRequest(loginRequest, (error, response) => {
if (error) {
console.error("Login failed:", error);
return;
}
const jsonResponse = response.json();
pm.environment.set("authToken", jsonResponse.token);
// Set expiry to 55 minutes from now (assuming 1-hour token)
pm.environment.set("tokenExpiry", String(Date.now() + 55 * 60 * 1000));
console.log("Token refreshed successfully");
});
}
// HMAC signature for API requests
const crypto = require("crypto-js");
const apiSecret = pm.environment.get("apiSecret");
const timestamp = new Date().toISOString();
const body = pm.request.body ? pm.request.body.raw : "";
const signature = crypto.HmacSHA256(
`${pm.request.method}${pm.request.url}${timestamp}${body}`,
apiSecret
).toString(crypto.enc.Hex);
pm.request.headers.add({
key: "X-Timestamp",
value: timestamp,
});
pm.request.headers.add({
key: "X-Signature",
value: signature,
});
// Basic status code check
pm.test("Status code is 200", () => {
pm.response.to.have.status(200);
});
// Status code in range
pm.test("Status code is success", () => {
pm.expect(pm.response.code).to.be.oneOf([200, 201]);
});
// Specific status for specific operations
pm.test("Resource created successfully", () => {
pm.response.to.have.status(201);
});
const jsonData = pm.response.json();
pm.test("Response has required fields", () => {
pm.expect(jsonData).to.have.property("id");
pm.expect(jsonData).to.have.property("email");
pm.expect(jsonData).to.have.property("name");
pm.expect(jsonData).to.have.property("createdAt");
});
pm.test("Email matches request", () => {
pm.expect(jsonData.email).to.eql(pm.variables.get("uniqueEmail"));
});
pm.test("Data types are correct", () => {
pm.expect(jsonData.id).to.be.a("string");
pm.expect(jsonData.email).to.be.a("string");
pm.expect(jsonData.active).to.be.a("boolean");
pm.expect(jsonData.createdAt).to.match(/^\d{4}-\d{2}-\d{2}/);
});
pm.test("Nested object validation", () => {
pm.expect(jsonData.address).to.be.an("object");
pm.expect(jsonData.address.city).to.be.a("string");
pm.expect(jsonData.address.zip).to.match(/^\d{5}/);
});
pm.test("Array validation", () => {
pm.expect(jsonData.items).to.be.an("array");
pm.expect(jsonData.items).to.have.lengthOf.at.least(1);
jsonData.items.forEach((item) => {
pm.expect(item).to.have.property("id");
pm.expect(item).to.have.property("name");
pm.expect(item.price).to.be.above(0);
});
});
pm.test("Response has correct content type", () => {
pm.response.to.have.header("Content-Type", "application/json; charset=utf-8");
});
pm.test("Security headers are present", () => {
pm.response.to.have.header("X-Content-Type-Options");
pm.response.to.have.header("X-Frame-Options");
pm.expect(pm.response.headers.get("X-Content-Type-Options")).to.eql("nosniff");
});
pm.test("Response has request ID for tracing", () => {
pm.response.to.have.header("X-Request-Id");
pm.expect(pm.response.headers.get("X-Request-Id")).to.not.be.empty;
});
pm.test("Response time is under 500ms", () => {
pm.expect(pm.response.responseTime).to.be.below(500);
});
pm.test("Response time is acceptable", () => {
const threshold = pm.variables.get("responseTimeThreshold") || 2000;
pm.expect(pm.response.responseTime).to.be.below(parseInt(threshold));
});
const schema = {
type: "object",
required: ["id", "email", "name", "role", "createdAt"],
properties: {
id: { type: "string", format: "uuid" },
email: { type: "string", format: "email" },
name: { type: "string", minLength: 1 },
role: { type: "string", enum: ["admin", "user", "viewer"] },
active: { type: "boolean" },
createdAt: { type: "string" },
},
additionalProperties: false,
};
pm.test("Response matches JSON schema", () => {
const jsonData = pm.response.json();
const valid = tv4.validate(jsonData, schema);
pm.expect(valid).to.be.true;
if (!valid) {
console.log("Schema validation error:", tv4.error);
}
});
// In "Create User" test script -- save the ID for subsequent requests
const jsonData = pm.response.json();
pm.test("Save user ID for next request", () => {
pm.expect(jsonData.id).to.not.be.undefined;
pm.environment.set("userId", jsonData.id);
console.log("Saved userId:", jsonData.id);
});
// In "Get User" test script -- verify the retrieved user matches
pm.test("Retrieved user matches created user", () => {
const jsonData = pm.response.json();
pm.expect(jsonData.id).to.eql(pm.environment.get("userId"));
});
email,name,role,expectedStatus
valid@example.com,Valid User,user,201
admin@example.com,Admin User,admin,201
,Missing Email,user,400
invalid-email,Bad Format,user,400
In the request body:
{
"email": "{{email}}",
"name": "{{name}}",
"role": "{{role}}"
}
In the test script:
const expectedStatus = parseInt(pm.iterationData.get("expectedStatus"));
pm.test(`Should return status ${expectedStatus}`, () => {
pm.response.to.have.status(expectedStatus);
});
if (expectedStatus === 201) {
pm.test("User created with correct data", () => {
const jsonData = pm.response.json();
pm.expect(jsonData.email).to.eql(pm.iterationData.get("email"));
pm.expect(jsonData.name).to.eql(pm.iterationData.get("name"));
});
}
# Run a collection
newman run collections/users-api.postman_collection.json \
-e environments/staging.postman_environment.json
# Run with data file
newman run collections/users-api.postman_collection.json \
-e environments/staging.postman_environment.json \
-d data/users.csv \
-n 5 # iterations
# Run specific folder
newman run collections/users-api.postman_collection.json \
--folder "Users" \
-e environments/staging.postman_environment.json
# Run with reporters
newman run collections/users-api.postman_collection.json \
-e environments/staging.postman_environment.json \
-r cli,json,htmlextra \
--reporter-json-export results/report.json \
--reporter-htmlextra-export results/report.html
# Run with timeout
newman run collections/users-api.postman_collection.json \
-e environments/staging.postman_environment.json \
--timeout-request 10000 \
--timeout-script 5000
name: API Tests
on: [push, pull_request]
jobs:
api-tests:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: '20'
- name: Install Newman
run: |
npm install -g newman
npm install -g newman-reporter-htmlextra
- name: Run API Tests
run: |
newman run postman/collections/users-api.postman_collection.json \
-e postman/environments/staging.postman_environment.json \
-r cli,htmlextra,json \
--reporter-htmlextra-export reports/api-report.html \
--reporter-json-export reports/api-results.json
- name: Upload Test Results
if: always()
uses: actions/upload-artifact@v4
with:
name: api-test-results
path: reports/
pm.environment.set() to pass data between requests.{{baseUrl}} variable.pm.test() for proper assertions.