testing — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited testing (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Test behavior, not implementation. A test should verify what a function does, not how it does it. If you refactor the internals and the test breaks, the test was testing the wrong thing.
Good test: "given a valid email, returns true" Bad test: "calls regex.match with pattern /^[a-z].../"
100% line coverage is a vanity metric. You can have 100% coverage and still ship bugs if your tests don't exercise meaningful paths.
Focus coverage on:
Skip coverage on:
Every function has these potential edge cases. Consider which apply:
You don't need to test ALL of these for every function. Think about which ones are realistic for your specific case.
Writing tests first helps when:
Test-first hurts when:
When doing test-first: write the test, watch it fail, implement the minimum to pass, then refactor. Don't write all the tests up front — go one at a time.
Follow Arrange-Act-Assert (AAA):
// Arrange: set up the test conditions
const input = createValidInput();
// Act: call the thing being tested
const result = processInput(input);
// Assert: verify the outcome
expect(result.status).toBe('success');Keep tests independent. No test should depend on another test running first. No shared mutable state between tests.
Test names should read like specifications:
Not:
Use sparingly and review snapshot diffs carefully.
framework, not your code. Prefer integration tests for heavily-connected code.
components. Trust the framework; test YOUR logic.
only one field matters. Assert on what matters.
that should be mocked or it's an integration test that should be tagged separately.
Fix immediately or quarantine with a clear TODO.
services, or file system artifacts from other tests.
read the test carefully first.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.