Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Kokxi/qa-test-skills --skill qa-ci-cd-testinggit clone --depth 1 https://github.com/Kokxi/qa-test-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kokxi/qa-test-skills/qa-ci-cd-testing)<a href="https://agentmods.dev/skills/kokxi/qa-test-skills/qa-ci-cd-testing"><img src="https://agentmods.dev/badge/skills/kokxi/qa-test-skills/qa-ci-cd-testing/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/kokxi/qa-test-skills/qa-ci-cd-testing"><img src="https://agentmods.dev/badge/skills/kokxi/qa-test-skills/qa-ci-cd-testing.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00204 | $0.01871 |
| Opus 5.5 | $0.00082 | $0.00748 |
| Sonnet 5.5 | $0.00041 | $0.00374 |
| Haiku 4.5 | $0.00020 | $0.00187 |
Grade A, and why
qa-ci-cd-testing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 26d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
⚠️ 本技能单独使用效果有限，建议配合完整技能集（12 步工作流）使用。安装：npx skills add Kokxi/qa-test-skills
⚠️ 安全警告：本技能的示例可能涉及 CI/CD 流水线配置、发布操作和部署环境。 实际使用时请勿在未授权的生产环境执行发布或部署，先确认灰度策略和回滚方案。 本技能仅在 workspace/ 输出评估文件，不持久化、不外传、不跨会话复用。
持续测试实践
核心原则
测试左移（提前测试）、测试右移（线上验证）、快速反馈。
深度要求（参考值）
关键指标：根据项目复杂度设计质量门禁策略
| 复杂度 | 流水线阶段 | 质量门禁阈值 | 说明 |
|---|---|---|---|
| 简单项目 | 2-3个阶段 | 单元测试通过率≥80% | 标准CI流程 |
| 中等项目 | 4-5个阶段 | 单元≥90%+接口通过率≥95% | 含集成测试 |
| 复杂项目 | 6-8个阶段 | 全链路≥95%+性能阈值 | 含全量自动化+安全扫描 |
测试左移
左移策略
需求阶段：
├─ 需求评审：测试参与需求评审
├─ 验收标准：明确验收条件
├─ 可测试性：评估可测试性
└─ 测试计划：制定测试计划
开发阶段：
├─ 代码评审：测试视角的CR
├─ 单元测试：开发编写单元测试
├─ 接口测试：测试编写接口测试
└─ 冒烟测试：开发自测通过
集成阶段：
├─ 接口自动化：自动执行接口测试
├─ 集成测试：自动执行集成测试
└─ 冒烟测试：自动执行冒烟测试
左移实践
实践1：需求可测试性评估
├─ 验收条件是否明确？
├─ 是否可自动化验证？
├─ 测试数据是否可准备？
└─ 测试环境是否可搭建？
实践2：代码评审检查点
├─ 业务逻辑是否正确？
├─ 异常处理是否完善？
├─ 日志记录是否完整？
└─ 测试代码是否同步？
实践3：单元测试覆盖
├─ 核心逻辑单元测试
├─ 分支覆盖
├─ 边界覆盖
└─ 异常覆盖
测试右移
右移策略
发布阶段：
├─ 灰度发布：按比例放量
├─ 监控告警：实时监控
├─ 快速回滚：问题时快速回滚
└─ 线上验证：验证发布效果
线上阶段：
├─ 业务监控：业务指标监控
├─ 技术监控：技术指标监控
├─ 用户反馈：用户问题收集
└─ 混沌工程：主动注入故障
右移实践
实践1：灰度发布
├─ 用户灰度：按用户比例
├─ 流量灰度：按流量比例
├─ 地域灰度：按地域
└─ 监控验证：实时监控
实践2：线上监控
├─ 业务监控：订单量、成功率
├─ 技术监控：错误率、响应时间
├─ 资源监控：CPU、内存、磁盘
└─ 告警通知：异常告警
实践3：混沌工程
├─ 故障注入：模拟故障
├─ 韧性验证：验证系统韧性
├─ 恢复测试：验证恢复能力
└─ 改进优化：持续改进
加载时机
| 什么时候读 | 读哪个 |
|---|---|
| 设计流水线分层卡点时 | references/pipeline-design.md |
CI/CD 流水线设计的完整内容已下沉至references/pipeline-design.md，避免每次触发都占用上下文。
输出示例
团队需要将测试接入CI/CD流水线 → 设计流水线阶段：提交触发→单元测试→接口测试→UI测试→质量门禁→报告 → 左移：需求阶段定义验收标准，开发阶段推动单元测试 → 右移：灰度发布监控指标，线上质量监控告警
现有CI/CD测试效率低下（跑一次1小时） → 优化策略：分层并行执行、增量测试、智能用例筛选
检查清单
持续测试实践完成后检查：
- 测试左移是否实施？
- 测试右移是否规划？
- CI/CD流水线是否设计？
- 质量门禁是否定义？
- 工具选型是否完成？
- 监控告警是否配置？
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 26d ago Changed · -91 lines · +69 tokens per session ed501c43c8bc
- 1mo ago Changed 36f5bdfad08c
- 1mo ago First seen · 245 lines · 135 tokens per session scan A 9e790be0a83d
qa-ci-cd-testing is a skill published in the GitHub repository Kokxi/qa-test-skills (33 stars, last pushed 26d ago), licensed MIT. It adds 204 tokens to every session and 1,871 once invoked, about $0.0008 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cloudflare-workers-testing
Comprehensive testing guide for Cloudflare Workers using Vitest and @cloudflare/vitest-pool-workers. Use for test setup, binding mocks (D1/KV/R2/DO), integration tests, or encountering test failures, mock errors, coverage issues.
test-migration
Migrate a test suite from one framework to another, incrementally and without losing coverage. Covers Selenium→Playwright, Cypress→Playwright, Jest→Vitest, Mocha→Vitest, and Protractor→Playwright, with parallel CI running, locator/assertion translation, and a coverage-parity track. Use when: "migrate tests," "switch…
unit-testing
Write effective unit tests with Jest, Vitest, or pytest. Covers the test-doubles taxonomy (stub/spy/mock/fake), Arrange-Act-Assert, coverage threshold configuration and CI gating, snapshot testing, fake timers, and mutation testing with Stryker/mutmut. Use when: "unit test," "Jest," "Vitest," "pytest," "mock,"…
Code Coverage Analysis
Measure and enforce test coverage with Istanbul/nyc, c8, Jest, and Vitest. Covers branch versus line coverage, per-directory thresholds, CI gates, and correctly excluding generated code from reports.
matlab-testing-ci
MATLAB testing, validation, and CI workflow for matlab.unittest, MATLAB Test, Simulink Test, coverage, artifact generation, GitHub Actions, and open-source reproducibility. Use whenever MATLAB work needs verification, regression tests, CI, GitHub publication, or acceptance criteria.
matlab-run-tests
Run MATLAB test suites and analyze results, including test filtering, parallel execution, result diagnostics, code coverage collection, gap analysis, and CI/CD with buildtool. Use when running tests, filtering test suites, analyzing test failures, checking, collecting, or analyzing coverage, justifying uncovered code…