testing-patterns — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited testing-patterns (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Reliable tests describe behavior clearly and fail for one understandable reason.
Lots of fast, narrow tests at the bottom; a few slow, broad ones at the top.
/\ End-to-end (a few)
/ \ critical journeys only
/----\
/ \ Integration (some)
/--------\ APIs, DB queries, service seams
/ \
/------------\ Unit (many)
functions and classesEvery test reads in three beats:
Cover business rules, edge cases, and error paths. Don't bother testing framework internals, third-party libraries, or trivial accessors.
Replace external APIs, networks, clocks, and randomness so tests stay deterministic. Mock the database in unit tests but use a real one for integration. Never mock the very thing you are testing, and skip mocking trivial pure functions or in-memory stores.
Name the test after the behavior, so a failure reads like a sentence:
returns an error when the email is invalidwhen the user is not found, ...given an empty cart, when checkout runs, then it rejectsdescribe (or a class) groups related cases.it / test holds a single case.beforeEach.Keep data realistic but minimal, randomize the parts that don't matter (a faker library helps), and reuse common fixtures so intent stays visible.
Tests are documentation. If the suite doesn't make the code's behavior clear, the tests need a rewrite.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.