Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Kokxi/qa-test-skills --skill qa-test-env-datagit clone --depth 1 https://github.com/Kokxi/qa-test-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kokxi/qa-test-skills/qa-test-env-data)<a href="https://agentmods.dev/skills/kokxi/qa-test-skills/qa-test-env-data"><img src="https://agentmods.dev/badge/skills/kokxi/qa-test-skills/qa-test-env-data.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00127 | $0.02503 |
| Opus 5 | $0.00063 | $0.01252 |
| Sonnet 5 | $0.00025 | $0.00501 |
| Haiku 4.5 | $0.00013 | $0.00250 |
Grade A, and why
qa-test-env-data scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 242 lines — stays where its author put it; the contents beside it link to each section on GitHub.
测试环境与数据管理
核心原则
环境挂了、数据不对是测试最常见的阻塞——需要系统性管理。
⚠️ 安全警告:使用本技能前必须确认以下条件
环境确认: 执行任何环境变更(重启、修复、清理)前,必须先确认目标环境确切标识(名称/地址),并验证该环境为已授权的非生产环境。严禁对生产环境执行未经审批的操作。
数据备份: 任何数据清理操作(删除、归档、重置)前,必须先备份或确认已有备份可用。建议先在低风险环境进行试运行(dry-run)。
审批要求: 涉及数据修改、环境重启、配置变更的操作,必须获得相关团队负责人的明确审批,并记录操作日志。
爆炸半径: 批量操作前先在小范围验证,确认不影响其他团队。涉及共享环境时需与相关团队协调时间窗口。
禁止场景: 禁止在未确认环境身份的情况下执行变更操作、禁止在无备份的情况下执行数据清理、禁止在未通知相关团队的情况下重启共享环境。
测试环境管理
环境分层
环境层级:
├─ 开发环境(DEV)
│ ├─ 用途:开发自测
│ ├─ 数据:开发造数
│ └─ 稳定性:不稳定
│
├─ 集成环境(SIT)
│ ├─ 用途:集成测试
│ ├─ 数据:测试数据
│ └─ 稳定性:较稳定
│
├─ 预发环境(UAT)
│ ├─ 用途:用户验收
│ ├─ 数据:准生产数据
│ └─ 稳定性:稳定
│
└─ 生产环境(PROD)
├─ 用途:线上运行
├─ 数据:真实数据
└─ 稳定性:高稳定
环境健康检查
检查清单:
├─ 服务状态
│ ├─ 应用服务是否正常?
│ ├─ 数据库是否正常?
│ ├─ 缓存是否正常?
│ └─ 消息队列是否正常?
│
├─ 依赖服务
│ ├─ 第三方服务是否可用?
│ ├─ 内部服务是否可用?
│ └─ 网络是否通畅?
│
├─ 配置检查
│ ├─ 配置是否正确?
│ ├─ 环境变量是否设置?
│ └─ 功能开关是否正确?
│
└─ 数据检查
├─ 数据是否完整?
├─ 数据是否一致?
└─ 测试数据是否就绪?
环境问题处理
常见问题:
├─ 服务不可用
│ ├─ 检查:服务日志、端口、进程
│ ├─ 处理:重启服务、检查配置
│ └─ 预防:健康检查、监控告警
│
├─ 网络不通
│ ├─ 检查:ping、telnet、防火墙
│ ├─ 处理:检查网络配置、开放端口
│ └─ 预防:网络监控、冗余设计
│
├─ 配置错误
│ ├─ 检查:配置文件、环境变量
│ ├─ 处理:修正配置、重启服务
│ └─ 预防:配置管理、版本控制
│
└─ 数据异常
├─ 检查:数据完整性、一致性
├─ 处理:数据修复、数据恢复
└─ 预防:数据备份、数据监控
测试数据管理
数据准备方法
数据准备方法:
├─ 手动造数
│ ├─ 适用:少量数据、复杂数据
│ ├─ 工具:数据库客户端、管理后台
│ └─ 优点:灵活、精确
│
├─ 脚本造数
│ ├─ 适用:批量数据、重复数据
│ ├─ 工具:SQL脚本、Python脚本
│ └─ 优点:高效、可复用
│
├─ 数据工厂
│ ├─ 适用:标准化数据、大量数据
│ ├─ 工具:Faker、Mockaroo、自研
│ └─ 优点:标准化、可扩展
│
└─ 接口造数
├─ 适用:业务数据、流程数据
├─ 工具:Postman、自研脚本
└─ 优点:业务真实、流程完整
数据脱敏
📌 本节与 qa-test-data-engineering「数据脱敏」内容同步,修改时请同步更新。完整版含 Python 实现代码见 qa-test-data-engineering。
脱敏规则:
├─ 个人信息
│ ├─ 手机号:138****1234
│ ├─ 身份证:110***********1234
│ ├─ 邮箱:test****@example.com
│ └─ 姓名:*三
│
├─ 敏感数据
│ ├─ 银行卡:6222****1234
│ ├─ 密码:******
│ ├─ Token:****
│ └─ 地址:北京市***
│
└─ 脱敏方法
├─ 替换法:用*替换部分字符
├─ 加密法:用加密算法处理
├─ 截断法:只保留部分字符
└─ 随机法:用随机值替换
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed 94e8cfe5bc8c
- 8d ago First seen · 242 lines · 127 tokens per session scan A 9086aee4cafd
qa-test-env-data is a skill published in the GitHub repository Kokxi/qa-test-skills (24 stars, last pushed 6d ago), licensed MIT. It adds 127 tokens to every session and 2,503 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
agent-harness-fault-injection
Use when an agent workflow needs deterministic recovery evidence for sandbox, MCP/tool, worker, checkpoint, memory, or orchestration failures.
octocode-benchmark
Use when planning, running, grading, or reporting the by-hand Octocode research benchmark — pairwise matchups (Octocode anchor vs one baseline: gh+RTK, gh+Headroom, or plain gh) over markdown questions, with a fresh isolated runner agent per (question, arm, pass), one blind judge per question grading two answers X/Y…
octocode-graph-eval
Use when you need a measurable keep/discard loop — goal→KPI, baseline vs target, held-out checks, eval suites, or don't-stop-till-done against a runnable sensor. Not for ordinary ship checks where 'tests passed' is enough.
plugin-test
A testing guide for Zhin.js plugins using Vitest, a JavaScript and TypeScript testing framework. It focuses on checking command and tool behavior, ordinary business logic, and the plugin package’s required structure.
modernize-test-starter
Modernize QUnit unit tests and OPA5 integration tests to the UI5 Test Starter concept. Use this skill when: The linter reports prefer-test-starter for .qunit.html or .qunit.js files Test HTML files use manual sap-ui-core.js bootstrapping instead of Test Starter's runTest.js/createSuite.js Test JS files use…
javascript-development
JavaScript/TypeScript ES2024+, async/await, DOM manipulation, Node.js, and API integration. Use when writing vanilla JS/TS code, working with REST/fetch APIs, implementing frontend logic, or configuring JS build tools.