flowforge-testing

A workflow for creating and running executable tests for Flow Forge APIs from requirements, API documents, data tables, or business rules.

In plain words
What is it for?
It helps generate, update, validate, run, and investigate Flow Forge test cases stored in YAML or Excel.
Why use it?
It provides checks for the required project setup and configuration before tests are generated or executed.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/remon-16/flow-forge/flowforge-testing
Any agent
npx skills add Remon-16/flow-forge --skill flowforge-testing
Clone the repo
git clone --depth 1 https://github.com/Remon-16/flow-forge

Made for: Claude Code, Codex.

Per session 90 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,867 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00090 $0.02867
Opus 5 $0.00045 $0.01434
Sonnet 5 $0.00018 $0.00573
Haiku 4.5 $0.00009 $0.00287

Measured 2d ago against content hash 3db64ba634d2, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

flowforge-testing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 9 executable files (scripts/ff_tool.py, scripts/i18n/__init__.py, scripts/i18n/loader.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

flowforge-testing/SKILL.md · 261 lines

How it starts

The opening of the file, as written. The whole thing — 261 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Flow Forge Test Case Generation & Execution

1. Preflight

  1. Locate the flow-forge repository root: prefer flowforge_root from flowforge.config.yaml; otherwise use the parent directory of this skill. Verify the python/ and shared/ layout exists.
  2. Load flowforge.config.yaml. If it does not exist, copy it from flowforge.config.yaml.example and ask the user for the key settings (language, Python environment, executor defaults).
  3. Resolve the Python interpreter by running scripts/resolve_python.py. Resolution order: python_path (explicit) -> configured mode (conda/venv/system) -> automatic detection. The chosen interpreter must be able to import requests, openpyxl and yaml.
  4. If dependencies are missing, ask the user to install them in the configured environment (for example conda activate api_test && pip install -r python/requirements.txt). Never install packages into the conda base environment.
  5. Check the executor configuration (python/env.yml and python/env-{envName}.yml). Fill in missing app baseURL, login settings and processor_configs entries from the user's deployment notes or documentation. If credentials are still missing, ask the user once for them; never guess or fabricate credentials.
  6. Prepare middleware when needed: run python/tools/h2/init_h2.py for H2; start the system-under-test or middleware services as background subprocesses and record their PIDs so the main flow never blocks. If a service cannot be started automatically, report it to the user.

2. Inputs

  • Requirement documents: .md / .txt / .pdf, one or more. Analyze each document separately, then merge and deduplicate by content (business flows, roles, constraints, exceptions).
  • API documents: OpenAPI 3.0 (JSON/YAML) or Markdown tables, one or more. Merge and deduplicate interfaces by (path, method).
  • Optional supplementary inputs: table structures/DDL, business rules, existing test cases, middleware connection information, deployment notes. Use them during requirement analysis and case generation; do not output them as separate artifacts.

Read the full file on GitHub · 261 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 261 lines · 90 tokens per session scan A 3db64ba634d2

Subscribe to this mod's changes

flowforge-testing is a skill published in the GitHub repository Remon-16/flow-forge (11 stars, last pushed 26d ago), licensed MIT. It adds 90 tokens to every session and 2,867 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

API Test Suite Generator

Automatically generate comprehensive API test suites from OpenAPI specifications covering CRUD operations, error handling, authentication, pagination, and edge cases.

PramodDutta/qaskills · 29 tokens

api-test-E10

当前 test-automation 项目内置的接口自动化编写 skill,物理位置 .claude/skills/api-test-E10/。用于在 \test-automation\E10自动化\接口自动化测试 中新增、维护、补齐、迁移接口测试方法与 pytest 用例。触发场景包括:新增接口方法、新增接口测试用例、参考 Java Controller 源码或 Jacoco 报告补齐未覆盖接口、维护已有接口方法与用例、补齐参数化、修复接口断言、按指定位置插入代码、按 URL 查重复实现、处理 UTF-8 中文编码、执行 pytest 并根据真实报错循环修复直到通过。运行时产物统一放在项目根 apitestdwptemp/…

buer2233/ai-api-test-skill · 179 tokens

impeccable

Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface. Covers websites, landing pages, dashboards, product UI, app shells, components, forms, settings, onboarding, and empty states.…

fancy1108/Clutch · 189 tokens

cuml-machine-learning

Use for GPU-accelerated machine learning on tabular data using NVIDIA cuML. Triggers when tasks involve classification, regression, clustering, dimensionality reduction, or model training on datasets.

langchain-ai/deepagents · 43 tokens

schema-exploration

Lists tables, describes columns and data types, identifies foreign key relationships, and maps entity relationships in a database. Use when the user asks about database schema, table structure, column types, what tables exist, ERD, foreign keys, or how entities relate.

langchain-ai/deepagents · 57 tokens

analyze-market

Perform a market analysis for a product category or segment. Trigger on: market analysis, market size, TAM SAM SOM, market opportunity, industry analysis.

langchain-ai/deepagents · 34 tokens