api-tester SKILL.md skillA
api-tester from laolaoshiren/claude-code-skills-zh is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add laolaoshiren/claude-code-skills-zh/api-tester@git:20260716.e06495dPins git:20260716.e06495d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- laolaoshiren/claude-code-skills-zh
- Path
skills/api-tester/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260716.e06495d, committed Jul 16, 2026
- First version recorded
- Apr 14, 2026
- Size
- 5,504 bytes
- Repository stars
- 869
- License
- MIT
依据真实 OpenAPI、路由实现和现有测试生成并验证 API 测试。用于用户要求测试接口、补集成测试、验证 API 契约、生成回归用例或排查接口兼容性时；区分“生成测试”和“执行请求”的授权，不猜测状态码、响应结构或 SLA，不在未确认环境中发送写请求。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# API 测试助手 ## 核心原则 - 只把可核验的 OpenAPI、代码、类型、调用方或现有测试当作契约证据。 - 生成测试不等于执行测试；读取接口定义不等于可以访问真实服务。 - 保护现有数据、凭据和用户修改，优先使用隔离且可清理的测试环境。 ## 工作流程 ### 1. 读取项目与接口证据 先读取适用的仓库规则、测试说明、Git 状态和项目脚本，再按实际存在情况检查： - OpenAPI / Swagger 文件及其引用的 Schema。 - 路由、controller、handler、DTO、验证器和错误处理中间件。 - 客户端类型、调用方、公开文档和现有 API 测试。 - 测试配置、fixture、认证方式、环境变量模板和数据清理机制。 记录规范、实现与现有测试之间的不一致。无法确定哪个行为才是期望契约时，列出证据并请求确认，不用新测试固化猜测。 ### 2. 建立契约矩阵 为目标 endpoint 记录： | 项目 | 证据 | |------|------| | method 与 path | OpenAPI 或路由位置 | | 认证与权限 | security scheme、中间件或调用方 | | 请求参数与约束 | Schema、DTO 或验证器 | | 已声明响应 | 状态码、响应结构与 header | | 副作用与幂等性 | 实现、文档或调用链 | | 测试环境与清理 | fixture、事务或 teardown | 不要默认每个接口都应返回 `400`、`401`、`403`、`404`、`422` 或 `500`。只有契约已声明或代码路径真实可达时才生成对应断言。 ### 3. 明确环境与授权 在执行任何请求前确认： - Base URL、环境归属以及是否为 local、test、staging 或 production。 - 测试账号、权限范围和凭据来源。 - 是否允许执行 POST、PUT、PATCH、DELETE、上传、支付、通知等有副作用操作。 - 测试数据隔离、唯一标识、清理或事务回滚方案。 用户只要求“生成测试”时只产出代码。生产环境、共享 staging、第三方服务及任何可能改变真实数据的执行都必须获得明确授权。GET 也不能仅凭 method 判定无副作用。 ### 4. 选择项目锁定的工具 - 优先运行仓库已有的 test、OpenAPI lint 或 contract test script。 - 读取 package manager、lockfile 和已安装版本后再选择命令。 - 不用裸 `npx`、全局工具或临时下载的最新版解析规范。 - 缺少依赖时先报告；安装工具、更新 lockfile 或修改测试配置需要单独授权。 …
Read the whole file at its exact version.
How to install
mdr add laolaoshiren/claude-code-skills-zh/api-tester@sha256:b1f537163db79152The line at the top of this page pins the label git:20260716.e06495d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_7jpr7vcaiqmlz5no)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Apr 14, 2026 and Jul 16, 2026, about one every 31 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260716.e06495d latest | 2026-07-16 | e06495d | 5,504 B | A | view · diff |
| git:20260713.6d2b008 | 2026-07-13 | 6d2b008 | 4,869 B | A | view · diff |
| git:20260617.b8acb5f | 2026-06-17 | b8acb5f | 4,403 B | A | view · diff |
| git:20260414.3583839 | 2026-04-14 | 3583839 | 978 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5504 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
laolaoshiren/claude-code-skills-zh · 869 stars · license MIT · pushed 2026-09-22 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_7jpr7vcaiqmlz5no GET https://markdownregistry.com/api/v1/resolve?ref=laolaoshiren/claude-code-skills-zh/api-tester GET https://markdownregistry.com/api/v1/blob/b1f537163db791526bda2f79bba0bb4c09a35f78cc24ed4b062e46de09a4804c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from laolaoshiren/claude-code-skills-zh
Every file in laolaoshiren/claude-code-skills-zh