Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Kokxi/qa-test-skills --skill qa-bug-root-cause-analysisgit clone --depth 1 https://github.com/Kokxi/qa-test-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kokxi/qa-test-skills/qa-bug-root-cause-analysis)<a href="https://agentmods.dev/skills/kokxi/qa-test-skills/qa-bug-root-cause-analysis"><img src="https://agentmods.dev/badge/skills/kokxi/qa-test-skills/qa-bug-root-cause-analysis/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kokxi/qa-test-skills/qa-bug-root-cause-analysis"><img src="https://agentmods.dev/badge/skills/kokxi/qa-test-skills/qa-bug-root-cause-analysis.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00143 | $0.03538 |
| Opus 5 | $0.00072 | $0.01769 |
| Sonnet 5 | $0.00029 | $0.00708 |
| Haiku 4.5 | $0.00014 | $0.00354 |
Grade A, and why
qa-bug-root-cause-analysis scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 329 lines — stays where its author put it; the contents beside it link to each section on GitHub.
⚠️ 安全警告：本技能的示例可能涉及订单号、支付金额、截图、身份证、手机号等敏感数据。 实际使用时请勿粘贴真实生产数据、客户信息或财务凭证；测试前应脱敏/掩码处理。 本技能仅在 workspace/ 输出评估文件，不持久化、不外传、不跨会话复用。
Bug根因分析
核心原则
看到错误，能快速缩小根因范围——这不是魔法，是可学习的映射模式。
症状分类与根因映射
症状1：返回错误
症状表现：
- HTTP状态码错误（4xx/5xx）
- 业务错误码
- 错误信息
根因方向：
├─ 代码层
│ ├─ 逻辑错误：条件判断错误
│ ├─ 空指针：对象未初始化
│ ├─ 数组越界：索引超出范围
│ └─ 类型转换：类型不匹配
│
├─ 数据层
│ ├─ 数据缺失：必要数据不存在
│ ├─ 数据错误：数据格式/值错误
│ ├─ 数据冲突：唯一性约束
│ └─ 数据过期：数据已失效
│
├─ 配置层
│ ├─ 配置缺失：配置项未配置
│ ├─ 配置错误：配置值错误
│ ├─ 环境差异：不同环境配置不同
│ └─ 配置变更：配置被意外修改
│
└─ 依赖层
├─ 依赖不可用：第三方服务故障
├─ 依赖超时：响应超时
├─ 依赖返回错误：第三方返回异常
└─ 依赖版本不兼容：接口变更
症状2：数据不对
症状表现：
- 数据缺失
- 数据错误
- 数据不一致
- 数据格式异常
根因方向：
├─ 写入问题
│ ├─ 写入失败：数据库操作失败
│ ├─ 写入丢失：事务未提交
│ ├─ 写入延迟：异步写入未完成
│ └─ 写入重复：重复提交
│
├─ 读取问题
│ ├─ 缓存不一致：缓存与DB不同步
│ ├─ 读取过滤：查询条件过滤
│ ├─ 读取延迟：读从库延迟
│ └─ 读取缓存：读到旧缓存
│
├─ 同步问题
│ ├─ 同步延迟：主从同步延迟
│ ├─ 同步失败：同步任务失败
│ ├─ 同步冲突：并发同步冲突
│ └─ 同步丢失：同步任务遗漏
│
└─ 转换问题
├─ 格式转换：数据格式转换错误
├─ 编码问题：字符编码不一致
├─ 精度丢失：浮点数精度问题
└─ 时区问题：时区转换错误
症状3：性能退化
症状表现：
- 响应时间变长
- 吞吐量下降
- 资源占用高
根因方向：
├─ 数据库问题
│ ├─ 慢查询：SQL执行慢
│ ├─ 索引缺失：缺少必要索引
│ ├─ 锁等待：锁竞争
│ ├─ 连接池耗尽：连接数不够
│ └─ 数据量增长：数据量变大
│
├─ 代码问题
│ ├─ 算法复杂度：算法效率低
│ ├─ 循环嵌套：循环次数多
│ ├─ 内存泄漏：内存未释放
│ ├─ 线程阻塞：线程等待
│ └─ 频繁GC：垃圾回收频繁
│
├─ 缓存问题
│ ├─ 缓存穿透：缓存未命中
│ ├─ 缓存雪崩：缓存集中失效
│ ├─ 缓存击穿：热点key失效
│ └─ 缓存容量：缓存容量不足
│
└─ 资源问题
├─ CPU瓶颈：CPU占用高
├─ 内存瓶颈：内存不足
├─ IO瓶颈：磁盘IO慢
└─ 网络瓶颈：网络延迟高
症状4：没反应
症状表现：
- 点击无反应
- 操作无效果
- 界面卡住
根因方向：
├─ 前端问题
│ ├─ JS报错：JavaScript错误
│ ├─ 事件绑定：事件未绑定
│ ├─ 状态异常：前端状态错误
│ ├─ 网络请求：请求未发出
│ └─ 渲染异常：DOM渲染错误
│
├─ 网络问题
│ ├─ 请求丢失：网络丢包
│ ├─ 请求超时：网络超时
│ ├─ 连接断开：网络断开
│ └─ DNS解析：DNS解析失败
│
├─ 后端问题
│ ├─ 请求未接收：请求未到达
│ ├─ 处理阻塞：处理线程阻塞
│ ├─ 响应丢失：响应未返回
│ └─ 服务不可用：服务宕机
│
└─ 中间件问题
├─ Nginx问题：Nginx配置错误
├─ 网关问题：网关路由错误
├─ MQ问题：消息队列阻塞
└─ 限流问题：触发限流
症状5：偶发问题
症状表现：
- 时有时无
- 特定条件出现
- 难以复现
根因方向：
├─ 并发问题
│ ├─ 竞态条件：并发操作冲突
│ ├─ 死锁：线程互相等待
│ ├─ 线程安全：共享资源竞争
│ └─ 资源泄露：资源未释放
│
├─ 环境问题
│ ├─ 环境差异：不同环境表现不同
│ ├─ 配置差异：配置不一致
│ ├─ 依赖状态：依赖服务状态
│ └─ 硬件差异：硬件性能差异
│
├─ 数据问题
│ ├─ 数据状态：特定数据状态触发
│ ├─ 数据量：数据量达到阈值触发
│ ├─ 数据顺序：数据顺序影响
│ └─ 数据时效：数据过期触发
│
└─ 时序问题
├─ 时序依赖：操作顺序影响
├─ 定时任务：定时任务触发
├─ 缓存过期：缓存过期触发
└─ 会话超时：会话过期触发
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed ee80a6e175f4
- 9d ago First seen · 329 lines · 143 tokens per session scan A dae5169233a6
qa-bug-root-cause-analysis is a skill published in the GitHub repository Kokxi/qa-test-skills (24 stars, last pushed 7d ago), licensed MIT. It adds 143 tokens to every session and 3,538 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
plugin-test
A testing guide for Zhin.js plugins using Vitest, a JavaScript and TypeScript testing framework. It focuses on checking command and tool behavior, ordinary business logic, and the plugin package’s required structure.
javascript-development
JavaScript/TypeScript ES2024+, async/await, DOM manipulation, Node.js, and API integration. Use when writing vanilla JS/TS code, working with REST/fetch APIs, implementing frontend logic, or configuring JS build tools.
nextjs-development
Next.js 16.2.4 with TypeScript — App Router, Server Components, use cache directive, Turbopack dev, Server Actions, ISR, SSR, SSG, MCP devtools, metadata API, route handlers, instrumentation.
php-development
PHP 8.0+ development — XAMPP, RESTful APIs, PDO/MySQL/MariaDB, and authentication. Use when building PHP backends, creating API endpoints, configuring XAMPP, or integrating PHP with databases.
react-development
React 19+ with TypeScript — hooks, custom hooks, state management (useState/useReducer/useContext), React Query/SWR, Tailwind CSS, performance. Use when building React components, apps, or optimizing renders.
tdd-cycle
Red-Green-Refactor test-driven development cycle.