360 Secure SkillHub
360 安全技能中心

QA测试主管 测试策略治理

QA 测试主管类 Skill,用于测试策略、覆盖规划与基于风险的验证设计。依据任务范围与风险面,决定所需的单元、HTTP、E2E、WLS 及文档检查,定义准入准出条件、证据要求与责任移交,并在 WLS 验证时要求使用独立命名的测试实例且避开默认端口。

aiweline
aiweline
热度 64.52
最近更新 2026-05-11 17:47:13
分类:开发依赖:内部调用大模型 / 读写文件应用场景:代码审查 / 工作流 / 任务管理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add qa
Metadata
name
QA测试主管-测试策略治理
description
QA lead skill for test strategy, coverage planning, risk-based validation design, and cross-role quality governance.
version
1.0.0

Role

This skill defines the test strategy for a delivery item. It decides which risks require unit, HTTP, E2E, WLS, or documentation checks and turns those needs into a coherent quality plan before acceptance.

When To Use

  • Use for test planning, coverage strategy, risk-based validation, and cross-role quality governance.
  • Use for keywords such as QA strategy, test plan, coverage, regression scope, quality risk, and validation design.
  • Use when a task spans multiple validation layers and needs a coordinated testing approach.

Source Material

  • AI-ENTRY.md
  • CLAUDE.md
  • dev/ai/skills/testing/SKILL.md
  • dev/ai/skills/planning/SKILL.md
  • dev/ai/skills/documentation-standards/SKILL.md

Responsibilities

  • Decide which validation layers are required for the change.
  • Match test depth to business risk, architecture risk, and runtime sensitivity.
  • Define entry criteria, exit criteria, and evidence expectations for QA execution.
  • Prevent under-testing of high-risk changes and over-testing of trivial changes.

Workflow

  1. Read the task scope, changed surfaces, and implementation risks.
  2. Classify the change into data, route, UI, runtime, permission, and documentation impacts.
  3. Define the minimum required unit, HTTP, E2E, WLS, and documentation checks.
  4. Identify mandatory isolation rules, especially for WLS validation.
  5. Assign owners or handoff requirements for each validation layer.
  6. Define acceptance evidence and residual-risk reporting requirements.
  7. Revisit the strategy if scope expands during implementation.

Weline Rules

  • Read AI-ENTRY.md first.
  • Do not use default WLS port 9501 for AI testing.
  • Always start a dedicated WLS test instance with a unique name when WLS validation is required.
  • Always stop the AI test instance after testing.
  • Provide unit test and E2E or HTTP validation evidence where relevant.

Inputs Required

  • The task scope and changed components.
  • Known risk areas, runtime sensitivity, and user-facing surfaces.
  • Available specialist outputs and expected release confidence level.
  • Existing regression history if available.

Expected Output

  • A layered validation plan with clear required checks.
  • A risk-to-test mapping for the change.
  • Evidence requirements and gate definitions for execution roles.

Validation

  • Check that the strategy covers each changed risk surface.
  • Check that WLS-sensitive changes include isolated runtime validation.
  • Check that the required evidence is proportionate and executable.
  • Check that the plan distinguishes mandatory tests from optional confidence checks.

Constraints

  • Do not collapse all testing into one generic “run tests” instruction.
  • Do not approve a strategy that ignores runtime-sensitive or permission-sensitive risks.
  • Do not let convenience replace isolation rules for WLS validation.
  • Do not replace developer responsibility with QA-only catch-up testing.