e2e-testing — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited e2e-testing (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Unit tests prove functions work; E2E tests prove users can complete journeys. A checkout flow, login, or "first connection" path that only works in isolation is not shippable — exercise it in a real browser against a running app.
Pairs with [[test-first]] for unit/integration layers, [[browser-checks]] for manual/exploratory verification, [[spec-first]] for scenarios to automate, [[pipeline-ops]] to run E2E in CI, and [[launch-readiness]] before promoting to production.
Use the e2e testing checklist alongside this process.
Skip for pure backend/API changes with no user journey impact — use [[test-first]] only.
Prioritize by risk and frequency:
| Tier | Examples | E2E depth |
|---|---|---|
| P0 smoke | Login, signup, core happy path | Every PR / nightly |
| P1 | Settings, secondary flows | Nightly |
| P2 | Edge cases, admin | Weekly or pre-release |
Start with 3–5 P0 flows max — flaky huge suites get ignored.
Each test = one user goal from [[spec-first]] acceptance criteria:
Given [starting state]
When [user actions]
Then [observable outcome]One behavior per test. Name tests after the user outcome, not the selector.
Pick one and stick to it:
Conventions:
data-testid for stable selectors — avoid CSS classes and nth-child1. Arrange — seed user/data, navigate to start URL
2. Act — user clicks, fills, submits (one journey)
3. Assert — URL, visible text, API side effect, DB state
4. Cleanup — delete test user/data if neededRules:
test+${runId}@example.com)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.