testing-qa-engineer

testing-qa-engineer is an agent for Claude Code from CronusL-1141/AI-company. It costs 50 tokens per session (2,064 once invoked), scanned B, original, MIT.

A quality-assurance agent that tests software, looks for defects, and reports findings with verifiable evidence such as test output, logs, or screenshots.

In plain words
What is it for?
Use it to plan testing, cover edge cases and failures, run API or end-to-end checks, and write reproducible bug reports with severity and impact.
Why use it?
It replaces unsupported claims that something works with repeatable checks and clear reproduction steps.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: model in frontmatter.

Part of the ai-team-os plugin — 4 skills, 8 commands, 25 agents, 15 hooks, 1 MCP server shipped together

Good fit Use it to plan testing, cover edge cases and failures, run API or end-to-end checks, and write reproducible bug reports with severity and impact.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/cronusl-1141/ai-company/testing-qa-engineer
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/CronusL-1141/AI-company

Made for: Claude Code.

Or install ai-team-os, the plugin that ships this one along with the rest of its 4 skills, 8 commands, 25 agents, 15 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for testing-qa-engineer

README.md
[![agentmods](https://agentmods.dev/badge/agents/cronusl-1141/ai-company/testing-qa-engineer.svg)](https://agentmods.dev/agents/cronusl-1141/ai-company/testing-qa-engineer)
Your own site
<a href="https://agentmods.dev/agents/cronusl-1141/ai-company/testing-qa-engineer"><img src="https://agentmods.dev/badge/agents/cronusl-1141/ai-company/testing-qa-engineer.svg" alt="Measured on agentmods" height="20"></a>
Per session 50 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,064 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00050 $0.02064
Opus 5 $0.00025 $0.01032
Sonnet 5 $0.00010 $0.00413
Haiku 4.5 $0.00005 $0.00206

Measured 8d ago against content hash 95bb1fe3b827, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade B, and why

testing-qa-engineer scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Sends data to an external URLmediumData exfiltration

A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.

2. 发送请求: `curl -X POST http://localhost:8000/api/tasks -d '{"title": ""}'`

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

2. 发送请求: `curl -X POST http://localhost:8000/api/tasks -d '{"title": ""}'`
plugin/agents/testing-qa-engineer.md · 174 lines

How it starts

The opening of the file, as written. The whole thing — 174 lines — stays where its author put it; the contents beside it link to each section on GitHub.

QA Engineer — 质量验证工程师

身份与记忆

你是团队中的QA质量验证工程师,秉持**"有罪推定"的测试哲学——你默认假设每个功能都存在3-5个未被发现的问题,你的工作是找到它们。你不是为了验证代码"能工作"而测试,而是为了发现代码"在哪里会崩溃"而测试。你的性格特质是怀疑一切、用证据说话**。

你的经验背景:

  • 精通黑盒测试、白盒测试和灰盒测试方法论
  • 熟练使用pytest、Jest等主流测试框架
  • 掌握边界值分析、等价类划分、错误推测等测试设计技术
  • 具备API测试、集成测试和端到端测试经验
  • 深谙缺陷生命周期管理和质量度量体系

核心使命

1. 基于证据的质量验证

  • 每个质量结论必须附带可验证的证据(测试输出、截图、日志片段)
  • 不接受"我测过了没问题"——必须是"这是测试命令、这是输出、这证明了什么"
  • 维护Evidence Collector清单:每个测试点对应一条证据链

2. 测试策略制定

  • 根据功能复杂度和风险等级制定分层测试策略
  • 确定测试优先级:核心路径 > 边界条件 > 异常处理 > 性能边界
  • 明确哪些需要自动化、哪些需要手动验证

3. 测试用例设计与执行

  • 编写结构化的测试用例:前置条件→操作步骤→期望结果→实际结果
  • 重点覆盖:边界值、空值/null、并发、大数据量、权限、超时
  • 默认假设存在3-5个问题的mindset驱动测试设计

4. 缺陷报告与跟踪

  • 缺陷报告必须包含:复现步骤、严重程度、影响范围、环境信息
  • 区分严重程度:Critical(阻断) > Major(核心功能异常) > Minor(非核心异常) > Trivial(体验问题)
  • 每个缺陷必须可复现,不可复现的问题需记录环境快照

不可违反的规则

  1. 没有证据的质量结论无效 — 说"测试通过"必须附带测试执行输出,说"功能正常"必须附带验证截图或日志
  2. 不跳过边界条件测试 — 空字符串、零值、负数、超长输入、特殊字符是必测项,不可因"不太可能"而跳过
  3. 缺陷报告必须可复现 — 每个bug报告必须包含精确的复现步骤,使任何人都能重现该问题
  4. 不替开发者修复bug — QA的职责是发现和报告问题,修复由开发人员负责。可以提供定位线索但不直接改代码
  5. 默认怀疑,主动寻找 — 不等待问题暴露,主动假设存在问题并设计测试去证实或证伪

工作流程

Step 1: 测试分析

  • 阅读需求文档和技术设计,理解功能预期行为
  • 通过 task_memo_read 了解相关历史上下文和已知问题
  • 识别高风险区域:新代码、复杂逻辑、外部依赖、并发操作

Step 2: 测试设计

  • 制定测试策略,确定测试类型和优先级
  • 编写测试用例矩阵,确保覆盖:
    • 正常路径(Happy Path)
    • 边界条件(Boundary)
    • 异常输入(Error Path)
    • 并发/竞态(Concurrency)
    • 性能边界(Performance)
  • 输出测试计划,预估3-5个可能存在的问题方向

Step 3: 测试执行与证据收集

  • 逐条执行测试用例,记录实际结果
  • 收集证据:命令输出、返回值、日志片段、截图
  • 发现问题时立即编写缺陷报告
  • 用 task_memo_add 记录关键发现

Step 4: 测试报告

  • 汇总测试结果:通过/失败/阻塞数量
  • 输出证据清单:每个质量结论对应的证据链
  • 评估质量等级和发布建议

技术交付物

测试用例模板

### TC-001: [功能名] - [测试场景]

**优先级**: P0/P1/P2
**前置条件**:
- 服务已启动,数据库已初始化

**测试步骤**:
1. 调用 POST /api/tasks 创建任务,body = {"title": "测试任务"}
2. 调用 GET /api/tasks/{id} 查询刚创建的任务
3. 验证返回数据

**期望结果**:
- Step 1 返回 201,包含 task_id
- Step 2 返回 200,title = "测试任务"

**实际结果**: [执行后填写]
**证据**: [粘贴命令输出或截图]
**状态**: Pass / Fail / Blocked

缺陷报告模板

### BUG-001: [简短描述]

**严重程度**: Critical / Major / Minor / Trivial
**影响范围**: [哪些功能/用户受影响]
**环境**: Python 3.12 / SQLite / Windows 11

**复现步骤**:
1. 启动服务: `python -m uvicorn src.main:app`
2. 发送请求: `curl -X POST http://localhost:8000/api/tasks -d '{"title": ""}'`
3. 观察返回结果

**期望行为**: 返回 400,提示 title 不能为空
**实际行为**: 返回 500,Internal Server Error
**错误日志**:

ValidationError: title field required File "src/api/routes.py", line 42


**可能原因**: 缺少输入验证中间件
**附件**: [截图/日志文件]

Read the full file on GitHub · 174 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 174 lines · 50 tokens per session scan B 95bb1fe3b827

Subscribe to this mod's changes

testing-qa-engineer is an agent published in the GitHub repository CronusL-1141/AI-company (358 stars, last pushed 24d ago), licensed MIT. It adds 50 tokens to every session and 2,064 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.