test-suite — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited test-suite (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are in AUTONOMOUS MODE. Do NOT ask questions. Analyze the project's test coverage across all testing dimensions, identify gaps, and produce an actionable health report.
INPUT: $ARGUMENTS
If arguments are provided, focus analysis on those specific areas or modules. If no arguments are provided, analyze the ENTIRE project.
============================================================ PHASE 1: PROJECT DISCOVERY ============================================================
Step 1.1 -- Tech Stack Detection
Auto-detect the project's technology stack by scanning for configuration files:
| File/Pattern | Stack |
|---|---|
| pubspec.yaml with flutter SDK | Flutter / Dart |
| package.json + tsconfig.json | TypeScript / Node.js |
| package.json (no TS) | JavaScript / Node.js |
| requirements.txt or pyproject.toml | Python |
| go.mod | Go |
| Cargo.toml | Rust |
| Gemfile | Ruby |
| pom.xml or build.gradle | Java / Kotlin |
| .csproj or .sln | C# / .NET |
Detect the application type:
Record: language, framework, application type, entry points, source directories.
Step 1.2 -- Test Infrastructure Inventory
Scan the project for ALL existing test-related files and configuration:
DIRECTORIES to check:
CONFIG FILES to check:
TEST SCRIPTS in package.json (or equivalent):
Build a complete inventory table:
| Category | Framework | Config File | Test Directory | Test Count | Last Modified |
|---|
Step 1.3 -- Source Code Analysis
Count source files and estimate testable surface area:
============================================================ PHASE 2: TEST COVERAGE ANALYSIS ============================================================
Step 2.1 -- Run Existing Coverage Tools
If coverage tools are configured, run them:
| Stack | Command |
|---|---|
| Node.js (Vitest) | npx vitest run --coverage --reporter=json |
| Node.js (Jest) | npx jest --coverage --json |
| Python | pytest --cov=. --cov-report=json |
| Go | go test -coverprofile=coverage.out ./... |
| Flutter | flutter test --coverage |
| Ruby | bundle exec rspec --format json |
Parse the coverage output to extract:
Step 2.2 -- Categorize Existing Tests
Read every test file and classify each test into a category:
| Category | Indicators |
|---|---|
| Unit | Tests a single function/method in isolation, uses mocks/stubs |
| Integration | Tests multiple components together, may use real DB or services |
| E2E | Tests full user flows, uses browser/simulator, hits real endpoints |
| Load/Performance | Uses k6, Locust, Artillery, or measures response times |
| Visual Regression | Captures screenshots, compares images, uses Percy/Chromatic |
| Contract | Validates API schemas, uses Pact/OpenAPI/Dredd |
| Accessibility | Uses axe-core, pa11y, Lighthouse, checks WCAG compliance |
| Snapshot | Jest/Vitest snapshot tests |
| Smoke | Basic health checks, minimal coverage |
Build the categorized test count:
| Category | Test Files | Test Cases | Coverage Area |
|---|
Step 2.3 -- Gap Identification
For each testing category, assess whether coverage exists and rate it:
UNIT TESTS:
INTEGRATION TESTS:
E2E TESTS:
LOAD TESTS:
VISUAL REGRESSION TESTS:
CONTRACT TESTS:
ACCESSIBILITY TESTS:
============================================================ PHASE 3: SCORING AND HEALTH REPORT ============================================================
Step 3.1 -- Score Each Category
Rate each testing category on a 0-10 scale:
| Score | Meaning |
|---|---|
| 0 | No tests exist |
| 1-2 | Minimal: fewer than 5 tests, only happy paths |
| 3-4 | Basic: some coverage but major gaps in edge cases or error paths |
| 5-6 | Moderate: reasonable coverage, some categories of tests missing |
| 7-8 | Good: comprehensive coverage with minor gaps |
| 9-10 | Excellent: thorough coverage including edge cases, errors, boundaries |
Calculate an overall health score as a weighted average:
Step 3.2 -- Priority Ranking
Rank gaps by impact. Consider:
============================================================ PHASE 4: REMEDIATION ROUTING ============================================================
For each identified gap, recommend which sub-skill to run:
| Gap | Skill to Run | Priority |
|---|---|---|
| No unit tests or < 50% coverage | /unit-test | CRITICAL |
| No integration tests | /integration-test | CRITICAL |
| No E2E tests | /e2e | HIGH |
| No load tests for API projects | /load-test | MEDIUM |
| No visual regression (frontend) | /visual-regression | MEDIUM |
| No contract tests (API projects) | /contract-test | MEDIUM |
| No a11y tests (frontend) | /accessibility-test | HIGH |
============================================================ SELF-HEALING VALIDATION (max 3 iterations) ============================================================
After generating and running tests, validate:
IF STILL FAILING after 3 iterations:
============================================================ OUTPUT ============================================================
Print the full health report:
| Category | Score (0-10) | Tests | Status |
|---|---|---|---|
| Unit Tests | N | N tests | [MISSING / WEAK / MODERATE / STRONG / EXCELLENT] |
| Integration Tests | N | N tests | [status] |
| E2E Tests | N | N tests | [status] |
| Load Tests | N | N tests | [status] |
| Visual Regression | N | N tests | [status] |
| Contract Tests | N | N tests | [status] |
| Accessibility | N | N tests | [status] |
| Overall Health | N/10 | N total | [verdict] |
/[skill]/[skill]Run these skills in order to achieve comprehensive coverage:
/[skill] -- [what it will add]/[skill] -- [what it will add]Estimated improvement: current N/10 -> projected N/10 after remediation.
NEXT STEPS:
/unit-test to generate missing unit tests."/integration-test to cover API and database operations."/visual-regression to set up baseline screenshots."/contract-test to validate schemas."/accessibility-test to check WCAG 2.1 AA compliance."/load-test to establish performance baselines."/e2e for comprehensive end-to-end testing."DO NOT:
============================================================ SELF-EVOLUTION TELEMETRY ============================================================
After producing output, record execution metadata for the /evolve pipeline.
Check if a project memory directory exists:
~/.claude/projects/skill-telemetry.md in that memory directoryEntry format:
### /test-suite — {{YYYY-MM-DD}}
- Outcome: {{SUCCESS | PARTIAL | FAILED}}
- Self-healed: {{yes — what was healed | no}}
- Iterations used: {{N}} / {{N max}}
- Bottleneck: {{phase that struggled or "none"}}
- Suggestion: {{one-line improvement idea for /evolve, or "none"}}Only log if the memory directory exists. Skip silently if not found. Keep entries concise — /evolve will parse these for skill improvement signals.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.