qa-only
Skill4 starsChanged 4 months agoApache-2.0View on GitHub
Use when the user asks for a report-only browser QA pass on a web application, live site, preview URL, authenticated app flow, or release candidate without making code changes.
We split this skill into the rules it gives an agent
9 rules. 0 are common, 8 are distinctive, and 1 is very specific to this project.
0
Common
Most of the 29 edited versions we read keep these.
8
Distinctive
This author's own choices. Worth a look.
1
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 8
Use this skill to test a web application like a user and produce an evidence-based QA report.
- Distinctive: line 23
Do not use this for unit-test-only debugging, backend-only compiler failures, or design critique without functional browser testing.
- Very specific: line 34
If the site needs auth, use get-cookies or an existing real browser session.
- Distinctive: line 35
If no browser automation helper exists, use the available local browser tooling and state the limitation.
- Distinctive: line 48
Use a 0-100 health score.
- Distinctive: line 102
Do not report an issue without a reproduction path.
- Distinctive: line 103
Do not hide limitations; list what was not tested.
- Distinctive: line 104
Prefer concrete evidence over broad impressions.
- Distinctive: line 105
Do not call a site ready if critical paths were not tested.
“Common” is measured: kept by at least 6 in 10 of the 29 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
QA Only
Use this skill to test a web application like a user and produce an evidence-based QA report. Do not edit code, commit changes, or apply fixes.
Core Rule
Report only. If you find a bug, document the evidence, reproduction path, severity, and suggested fix. Do not fix it unless the user explicitly switches to an implementation task.
Scope
Use this for:
- Web apps, dashboards, SaaS tools, AI application frontends, and preview deployments.
- Authenticated flows when cookies or a real browser session are available.
- Release-candidate checks before shipping.
- "Find bugs", "test the site", "QA this", or "report-only QA" requests.
Do not use this for unit-test-only debugging, backend-only compiler failures, or design critique without functional browser testing.
Workflow
- Establish target and mode.
- Target URL or local app URL.
- Auth state: public, login required, cookie import needed, or real-browser session.
- Mode: Quick, Standard, or Focused.
- Scope exclusions named by the user.
- Prepare the browser path.
- If the site needs auth, use
get-cookiesor an existing real browser session. - If no browser automation helper exists, use the available local browser tooling and state the limitation.
- Capture screenshots for every reported issue when tooling allows it.
- If the site needs auth, use
- Orient before testing.
- Identify primary user journeys, navigation, forms, stateful actions, AI interactions, and payments or account settings if present.
- For AI apps, include empty input, long input, model failure, slow response, retry, cancellation, and malformed output paths when relevant.
- Execute the QA pass.
- Quick: homepage plus top 5 user paths; console/network errors; major broken states.
- Standard: primary journeys, key forms, mobile/desktop layout, auth/session behavior, loading/error/empty states.
- Focused: user-specified page, flow, or feature with deeper edge cases.
- Score and report.
- Use a 0-100 health score.
- Separate blockers from polish.
- Include reproduction steps precise enough for another agent to verify.
Severity Guide
| Severity | Meaning |
| Blocker | Core flow cannot complete, data loss, auth break, payment break, or severe AI failure. |
| High | Important user path broken or misleading. |
| Medium | Functional issue with workaround or limited reach. |
| Low | Minor visual, copy, or interaction defect. |
Report Contract
## QA Report
### Target
URL:
Mode:
Auth:
Date:
### Summary
Health score: __/100
Overall status: Ship / Ship with known issues / Do not ship
### Paths Tested
- <path>
### Findings
#### QA-001: <title>
Severity:
Path:
Evidence:
Reproduction steps:
Expected:
Actual:
Suggested fix:
### Screenshots / Artifacts
- <artifact>
### Not Tested
- <area>
### Recommended Next Step
- <next step>Quality Bar
- Do not report an issue without a reproduction path.
- Do not hide limitations; list what was not tested.
- Prefer concrete evidence over broad impressions.
- Do not call a site ready if critical paths were not tested.
Other versions38 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 38
- garrytan/gstack★ 139ksame name
- DenchHQ/DenchClaw★ 1.7ksame name
- DenchHQ/ironclaw★ 1.7ksame name
- mr-daedalium/ostack-saas★ 108same name
- no-session/pstack★ 96same name
- lucas-flatwhite/gstack-ko★ 45same name
- AICreator-Wind/gstack-openclaw-skills★ 44same name
- WillNigri/Agentic-Tool-Optimization★ 34same name
- CarbeneAI/Forge★ 9same name
- borkweb/skills★ 8same name
28 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
Used alongsideProjects with it also use landing-report, land-and-deploy and 9 more.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
ShreyRaviSkilllanding-report
Read-only queue dashboard for workspace-aware ship. Shows which VERSION slots are currently claimed by open PRs, which sibling Conductor workspaces have WIP work likely to ship soon, and what slot /ship would pick next. No mutations — just a snapshot. Use when asked to "landing report", "what's in the queue", "show me open PRs", or "which version do I claim next". (gstack)
Also in 6 projects that use this
ayudaySkillland-and-deploy
Land and deploy workflow. Merges the PR, waits for CI and deploy, verifies production health via canary checks. Takes over after /ship creates the PR. Use when: "merge", "land", "deploy", "merge and verify", "land it", "ship it to production".
Also in 14 projects that use this
seek888Skillpair-agent
Pair a remote AI agent with your browser. One command generates a setup key and prints instructions the other agent can follow to connect. Works with OpenClaw, Hermes, Codex, Cursor, or any agent that can make HTTP requests. The remote agent gets its own tab with scoped access (read+write by default, admin on request). Use when asked to "pair agent", "connect agent", "share browser", "remote browser", "let another agent use my browser", or "give browser access". (gstack) Voice triggers (speech-to-text aliases): "pair agent", "connect agent", "share my browser", "remote browser access".
Also in 8 projects that use this
ayudaySkillsetup-deploy
Configure deployment settings for /land-and-deploy. Detects your deploy platform (Fly.io, Render, Vercel, Netlify, Heroku, GitHub Actions, custom), production URL, health check endpoints, and deploy status commands. Writes the configuration to CLAUDE.md so all future deploys are automatic. Use when: "setup deploy", "configure deployment", "set up land-and-deploy", "how do I deploy with gstack", "add deploy config".
Also in 12 projects that use this
ShreyRaviSkillsetup-gbrain
Set up gbrain for this coding agent: install the CLI, initialize a local PGLite or Supabase brain, register MCP, capture per-remote trust policy. One command from zero to "gbrain is running, and this agent can call it." Use when: "setup gbrain", "connect gbrain", "start gbrain", "install gbrain", "configure gbrain for this machine". (gstack)
Also in 5 projects that use this
CodeWithBehnamSkillsetup-browser-cookies
Import cookies from your real browser (Comet, Chrome, Arc, Brave, Edge) into the headless browse session. Opens an interactive picker UI where you select which cookie domains to import. Use before QA testing authenticated pages.
Also in 13 projects that use this
- +3 more from ShreyRavi
- +1 more from ayuday
In this repository38 other files it gives its agents.
- skills/supabase-postgres-best-practices/AGENTS.mdAGENTS.md
- skills/vercel-react-best-practices/AGENTS.mdAGENTS.md
- skills/supabase-postgres-best-practices/CLAUDE.mdCLAUDE.md
- ai-app-security-auditSkill
- ai-slide-templatesSkill
- backlog-ready-specSkill
- check-compiler-errorsSkill
- clawpackerSkill
- deslopSkill
- devex-reviewSkill
- fix-ciSkill
- fix-merge-conflictsSkill
- founder-office-hoursSkill
- get-cookiesSkill
- get-pr-commentsSkill
- gh-issue-priority-handoffSkill
- image2-with-codexSkill
- investigateSkill
- local-ultra-reviewSkill
- loop-on-ciSkill
- loop-on-pr-review-and-fixSkill
- new-branch-and-prSkill
- npm-release-pipelineSkill
- peer-reviewSkill
- plan-devex-reviewSkill
- planmode-ceoSkill
- planmode-engineerSkill
- review-and-shipSkill
- run-smoke-testsSkill
- security-best-practicesSkill
- site-design-auditSkill
- site-design-fixSkill
- slow-is-fastSkill
- supabase-postgres-best-practicesSkill
- vercel-react-best-practicesSkill
- xianyu-api-client-skillSkill
- xianyu-automation-skillSkill
- xianyu-product-manager-skillSkill
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
Reviews can't be read right now.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

