email-testing SKILL.md skillA
email-testing from petrkindlmann/qa-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add petrkindlmann/qa-skills/email-testing@v1.1Pins v1.1 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- petrkindlmann/qa-skills
- Path
skills/email-testing/SKILL.md- Versions recorded
- 3
- Latest version
- v1.1, committed Oct 21, 2026
- First version recorded
- Jun 10, 2026
- Size
- 19,381 bytes
- Repository stars
- 198
- License
- MIT
End-to-end testing of email-dependent flows — signup confirmation, password reset, magic-link login, OTP/MFA codes, and notification emails. Covers the capture-inbox decision tree (Mailpit, Mailosaur, MailSlurp, ShazaMail, Ethereal), Playwright polling without fixed sleeps, template-aware extraction of links/OTPs from the email body, deterministic per-test addresses (plus-addressing, per-inbox), subject/from/header/link assertions, and SPF/DKIM/DMARC deliverability checks as a separate suite.…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
<objective> Email-dependent flows fail silently: a test that "signs up and clicks confirm" by calling the confirm endpoint directly never proves the email was generated, addressed, templated, and linkable. This skill captures the real email, waits for it without a fixed sleep, extracts one unambiguous OTP or link from the body, and completes the flow — so a broken template, an unsigned token, or a wrong-recipient bug actually fails the test. It also keeps deliverability (SPF/DKIM/DMARC) in a separate non-blocking suite so a DNS problem never reds your functional gate. </objective> --- ## Quick Route | Situation | Go to | |-----------|-------| | Pick a capture tool | "Capture-inbox decision tree" below | | Poll an inbox without a sleep | `references/mailpit-playwright.md` (polling helper) | | Pull an OTP / link out of the body | `references/mailpit-playwright.md` (extraction) | | Full password-reset / signup / magic-link E2E | `references/mailpit-playwright.md` | | Real addresses on staging | `references/hosted-inboxes.md` (Mailosaur) | | Per-test throwaway inbox | `references/hosted-inboxes.md` (MailSlurp / ShazaMail) | …
Read the whole file at its exact version.
How to install
mdr add petrkindlmann/qa-skills/email-testing@sha256:7a3c50a0f32e2430The line at the top of this page pins the label v1.1, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_7t4hor5hk5l2eebu)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Jun 10, 2026 and Oct 21, 2026, about one every 66 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.1 latest | 2026-10-21 | 462126b | 19,381 B | A | view · diff |
| v1.1 | 2026-10-21 | b99ea46 | 18,974 B | A | view · diff |
| v1.0 | 2026-06-10 | ac52a6f | 18,213 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (19381 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
petrkindlmann/qa-skills · 198 stars · license MIT · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_7t4hor5hk5l2eebu GET https://markdownregistry.com/api/v1/resolve?ref=petrkindlmann/qa-skills/email-testing GET https://markdownregistry.com/api/v1/blob/7a3c50a0f32e24304ea1abd3810aebc00b617a28c5d7d5af99076857d362c08e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.