跳到主要内容
知仓学习社ZHICANG

agent-qa-authoring

Create, edit, validate, and run Agent QA tests, suites, and hooks through MCP or CLI while preserving canonical IDs and schema contracts.

写文件严重 0 · 高危 1sickn33/agentic-awesome-skills

它会碰到什么

扫了多少2 个文本文件,6 KB
它会碰到什么写文件
命中总数1 处
命中统计严重 0 · 高 1 · 中 0 · 低 0
逐条看命中(1 条严重或高危)
  • references/agent-qa-contracts.json:27identity-config-write
    "hooks": {

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Agent QA Authoring

Overview

Author Agent QA tests, suites, and hooks without inventing schema fields or identifiers. Prefer Agent QA's MCP tools, use the bundled contract reference for exact fields, and validate every definition before saving or running it.

When to Use

  • Creating or editing an Agent QA test, suite, or hook.
  • Validating Agent QA YAML or canonical IDs.
  • Running a newly authored Agent QA definition through MCP or CLI.
  • Investigating which Agent QA configuration fields or workspace patterns apply.

Preconditions and Approval Boundary

  • Work only in a configured Agent QA workspace that the user has authorized.
  • Inspect the requested scope before any create, update, delete, or test-run operation.
  • Obtain explicit confirmation before deleting a definition or running a test that can change external application state.
  • Keep credentials out of definitions and output; use the workspace's configured secret handling.

Workflow

  1. Discover the local surface with agent_qa_discover.
  2. Inspect active config with agent_qa_get_config, especially targets, devices, providers, and services.mcp.
  3. Load references/agent-qa-contracts.json when exact schema fields or ID contracts are needed.
  4. Generate every new ID with Agent QA tooling:
  • MCP: agent_qa_generate_id
  • CLI fallback: agent-qa ids generate <test|suite|hook|run|observation>
  • If neither surface is already installed, stop and ask the user to approve

an exact Agent QA installation. Do not fetch and execute the package at

runtime through npx or another moving package reference.

  1. Never hand-write IDs. Validate existing IDs with agent_qa_validate_id or agent-qa ids validate <type> <id> --json.
  2. Validate definitions before saving:
  • Tests: agent_qa_validate_test or agent_qa_validate_definition with kind: "test"
  • Suites: agent_qa_validate_suite or agent_qa_validate_definition with kind: "suite"
  • Hooks: agent_qa_validate_definition with kind: "hooks"
  1. Prefer MCP authoring mutations:
  • Tests: agent_qa_create_test, agent_qa_update_test, agent_qa_delete_test
  • Suites: agent_qa_create_suite, agent_qa_update_suite, agent_qa_delete_suite
  • Hooks: agent_qa_create_hook, agent_qa_update_hook, agent_qa_delete_hook
  1. Use CLI or YAML fallback only when MCP is unavailable. Keep file paths matched by workspace.testMatch or workspace.suiteMatch.

Required ID Contracts

  • Test IDs: t_ plus 10 id-agent words.
  • Suite IDs: s_ plus 10 id-agent words.
  • Hook IDs: h_ plus 10 id-agent words.
  • Run IDs: r_ plus 10 id-agent words.
  • Observation IDs: obs_ plus 10 id-agent words.

Before Running

  • Validate YAML first.
  • Prefer agent_qa_enqueue_test_run and agent_qa_enqueue_suite_run over shelling out.
  • If using the CLI fallback, run only after validation succeeds.
  • Reconfirm the target and environment when a test may mutate real data or trigger external actions.

Example

User: Add an Agent QA checkout test for the staging target and validate it, but do not run it yet.

Expected handling: discover the workspace, inspect the staging target, generate the test ID,
create the smallest valid definition, validate it, and stop before enqueueing a run.

Limitations

  • Requires an installed and configured Agent QA workspace plus any browser, mobile, model-provider, or application dependencies used by the selected target.
  • Does not infer undocumented config keys, selectors, UI states, credentials, or test data.
  • MCP availability and permissions vary by workspace; state which CLI or YAML fallback was used.
  • Validation proves schema compatibility, not that the application behavior or external environment is safe to exercise.

Do Not

  • Do not invent config keys or use legacy root config buckets.
  • Do not hand-write IDs.
  • Do not mutate files outside configured workspace patterns.
  • Do not run destructive or production-facing scenarios without the user's explicit scope and confirmation.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

同名技能的其他版本

有 3 个不同仓库或目录里都有叫 agent-qa-authoring 的技能。它们内容并不相同,别混用: