用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/FlorianBruniaux/claude-code-ultimate-guide --skill qa命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
Comprehensive security audit with scored posture assessment
Quick configuration security check against known threats database
Delegate threat-intelligence research and updates to AgentSec, then validate the guide and landing mirrors.
基于 SOC 职业分类
正在显示 SKILL.md
| name | qa |
| description | Systematic QA testing of a web application: diff-aware, tiered, with fix-and-verify loop |
| argument-hint | [path] [--thorough] |
| effort | high |
| disable-model-invocation | true |
Systematically test a web application for bugs, then fix and verify each issue found.
Three tiers of thoroughness. Diff-aware scoping tests what actually changed.
Determine which pages and features to test.
Diff-aware mode (default): Identify affected routes from the current branch changes.
# Files changed in this branch
git diff --name-only origin/main...HEAD 2>/dev/null || git diff --name-only HEAD~5
# Identify affected routes from changed files
# e.g., changes in src/pages/dashboard/ → test /dashboard
# changes in api/payments/ → test payment flows
Full mode (/qa --full): Test the entire application, starting with critical paths.
Explicit scope (/qa /dashboard /settings): Test specified pages only.
| Tier | Flag | Scope | Use when |
|---|---|---|---|
| Quick | --quick | Critical + High severity only | Pre-commit fast check |
| Standard | (default) | + Medium severity | Pre-PR review |
| Exhaustive | --exhaustive | + Low + cosmetic | Release candidate |
Before testing, ensure you can commit fixes atomically.
git status --short
If there are uncommitted changes: stash them first (git stash), or commit them. Testing on a dirty tree makes it impossible to isolate fix commits.
For each page in scope, systematically check all categories relevant to the selected tier.
Use whatever browser tooling is available:
For each page, cover:
1. Load the page: does it render without errors?
2. Check console: any uncaught errors, failed requests, warnings?
3. Test primary user action: the core thing this page is for
4. Test empty state: what shows when there's no data?
5. Test error state: what happens when an action fails?
6. Test on narrow viewport: does it break below 375px?
Visual (layout, spacing, typography, colors, responsiveness) Functional (broken interactions, missing features, wrong behavior) UX (confusing flows, missing feedback, poor error messages) Content (typos, wrong copy, placeholder text in production) Performance (slow page loads, layout shifts, unoptimized images) Console (JavaScript errors, failed network requests, deprecation warnings) Accessibility (missing alt text, keyboard traps, missing labels, contrast)
| Severity | Criteria | Examples |
|---|---|---|
| Critical | Feature completely broken or data loss risk | 500 error, blank page, form that loses data |
| High | Major feature degraded, significant UX harm | Wrong data shown, broken primary CTA, mobile layout broken |
| Medium | Minor feature issue, noticeable but workaround exists | Visual glitch, confusing empty state, slow load |
| Low | Cosmetic, barely noticeable | Minor spacing, minor copy issue, low-severity console warning |
Quick tier: Critical + High only Standard tier: Critical + High + Medium Exhaustive tier: All severities
Track each issue with a unique ID.
ISSUE-001
Severity: [Critical / High / Medium / Low]
Category: [Visual / Functional / UX / Content / Performance / Console / Accessibility]
Page: [URL or route]
Finding: [What is wrong, specific not vague]
Steps: [How to reproduce]
Expected: [What should happen]
Evidence: [Screenshot path or console output]
For each Critical and High issue (and Medium/Low in Standard/Exhaustive tiers):
git add <changed-files>
git commit -m "fix: <brief description of what was fixed>"
Do not batch multiple fixes in one commit. Each fix must be individually revertable.
QA REPORT
════════════════════════════════════════
Branch: [current branch]
Scope: [pages tested]
Tier: [Quick / Standard / Exhaustive]
Duration: [time taken]
HEALTH SCORES
─────────────────────────────────────────
Visual [PASS / WARN / FAIL] [N issues]
Functional [PASS / WARN / FAIL] [N issues]
UX [PASS / WARN / FAIL] [N issues]
Content [PASS / WARN / FAIL] [N issues]
Performance [PASS / WARN / FAIL] [N issues]
Console [PASS / WARN / FAIL] [N issues]
Accessibility [PASS / WARN / FAIL] [N issues]
ISSUES FOUND: N (X critical, Y high, Z medium, W low)
ISSUES FIXED: N
ISSUES REMAINING: N
─────────────────────────────────────────
ISSUE-001 [FIXED | OPEN]
Severity: High
Category: Functional
Page: /dashboard
Finding: Save button does nothing when form has validation errors, no feedback shown
Fix: Added error toast notification (commit abc1234)
ISSUE-002 [OPEN]
Severity: Medium
Category: Visual
Page: /settings
Finding: Input fields overflow container below 375px viewport
...
─────────────────────────────────────────
SHIP READINESS
Critical issues: [0 remaining / N remaining (BLOCKER)]
High issues: [0 remaining / N remaining (CONCERN)]
VERDICT: [READY TO SHIP / NOT READY: address critical and high issues first]
════════════════════════════════════════
/qa # Standard tier, diff-aware scope
/qa --quick # Quick tier (critical + high only)
/qa --exhaustive # Full coverage including cosmetic issues
/qa --full # Standard tier, test entire app (not just diff)
/qa /dashboard /settings # Test specific pages
/qa https://staging.app.com # Test a specific URL
/investigate: root-cause analysis when QA finds a complex bug/ship: pre-deploy checklist (run after QA passes)/canary: post-deploy monitoring (run after shipping)$ARGUMENTS