Exploratory Test Charter Skill

Exploratory testing finds the bugs scripts don't — but only when it's chartered: a clear mission, a defined area, and a timebox, so it's purposeful and you can report what was covered. This skill writes session-based charters that point skilled testing at the riskiest areas, with the tactics and oracles to know when something is wrong.

Working from a brief

Given "explore the new checkout flow", write the charters anyway — infer the risk areas, useful tactics, and oracles, labelling assumptions. Prioritise by risk. Never hand back a question instead of charters.

Required Inputs

Ask for these only if they aren't already provided (else infer and label):

• The target — the feature/area and what it does.
• Risk & concerns — what's new/changed, what's complex, and where failure would hurt most.
• Context — users, platforms, data, and integrations involved.
• Time available — to size and prioritise the sessions.

Output Format

Exploratory Testing Charters: [feature]

Risk overview — the few areas most worth exploring and why (new, complex, high-impact, historically buggy).

Charters — one per focused session (Session-Based Test Management style):

Charter: Explore [area] using [tactics/data] to discover [information about risk].

• Areas / things to cover: the specific surfaces, flows, inputs, states.
• Test ideas & tactics: how to probe it — boundary values, interruptions, bad data, concurrency, navigation, roles/permissions, network conditions, etc.
• Oracles (how you'll know it's wrong): the spec, consistency, comparable products, user expectations, "would a user be annoyed?".
• Timebox: ~60–90 min (short/long), priority.
• Data / setup needed.

Provide 3–6 charters, prioritised by risk.

Reporting — what to capture per session: bugs found, areas covered vs. not, new risks/questions, and follow-up charters.

Quality Checks

• Each charter has a clear mission (explore X to discover Y about risk Z) — not "test the app"
• Charters are prioritised by risk, with the rationale stated
• Test ideas/tactics are concrete (boundaries, interruptions, bad data, roles…), not generic
• Oracles are named so the tester can recognise a problem
• Sessions are timeboxed and sized to the available time
• A lightweight reporting structure (coverage + findings) is included

Anti-Patterns

• Do not write "explore the feature" with no mission, areas, or oracles — that's aimless clicking
• Do not skip prioritisation — explore the riskiest areas first
• Do not turn charters into scripted step-by-step cases — exploration needs freedom within focus
• Do not omit oracles — without them a tester can't tell right from wrong
• Do not leave sessions open-ended — timebox them so coverage is accountable

Based On

Session-Based Test Management (exploratory testing) — chartered, risk-prioritised, timeboxed sessions with explicit tactics and oracles.