qa/api-testing SKILL.md skillA
qa/api-testing from echovic/boss-skill is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add echovic/boss-skill/qa/api-testing@v1.0.0Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- echovic/boss-skill
- Path
skill/skills/qa/api-testing/SKILL.md- Versions recorded
- 3
- Latest version
- v1.0.0, committed Oct 27, 2026
- First version recorded
- Oct 27, 2026
- Size
- 11,604 bytes
- Repository stars
- 546
- License
- MIT
API 接口测试方法论，覆盖 RESTful/GraphQL 接口的功能、边界、安全、契约测试，参考 Supertest、REST Assured 等开源实践.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# API 接口测试方法论
> 参考开源实践：Supertest、REST Assured、Postman/Newman、HTTPie、Testcontainers
## 适用场景
- 后端 API 端点需要功能验证
- 需要测试接口边界值、错误处理、权限控制
- 需要验证 API 契约（请求/响应 schema 一致性）
- 需要覆盖认证、授权、越权等安全场景
- 需要测试完整业务流程的 API 链路
## 测试类型矩阵
| 测试类型 | 目的 | 工具 | 示例 |
| ------------ | ----------------------- | ------------------------ | ------------------------------- |
| **功能测试** | 验证接口正常行为 | Supertest / REST Assured | 创建资源返回 201 |
| **边界测试** | 验证边界值和错误处理 | Supertest | 空 payload、超长字符串、非法 ID |
| **安全测试** | 认证、授权、越权 | Supertest + auth header | 无 Token 访问受保护资源 |
| **契约测试** | 请求/响应 schema 一致性 | Zod / JSON Schema | 响应字段类型校验 |
| **流程测试** | 多接口业务链路 | Supertest 链式调用 | 注册→登录→下单→支付 |
## 1. RESTful API 测试
### 1.1 Node.js (Supertest + Jest/Vitest)
```typescript
// tests/api/users.test.ts
import request from 'supertest';
import { app } from '../../src/app';
describe('User API', () => {
describe('POST /api/users', () => {
it('creates user with valid data', async () => {
const res = await request(app)
.post('/api/users')
…Read the whole file at its exact version.
How to install
mdr add echovic/boss-skill/qa/api-testing@sha256:69c3363b1c81300fThe line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_iov52vtwwnxtc45t)
0 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, all committed on Oct 27, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.0.0 latest | 2026-10-27 | 69265c4 | 11,604 B | A | view · diff |
| v1.0.0 | 2026-10-27 | 116566f | 11,210 B | A | view · diff |
| v1.0.0 | 2026-10-27 | 21aa670 | 11,202 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11604 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
echovic/boss-skill · 546 stars · license MIT · pushed 2026-11-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_iov52vtwwnxtc45t GET https://markdownregistry.com/api/v1/resolve?ref=echovic/boss-skill/qa/api-testing GET https://markdownregistry.com/api/v1/blob/69c3363b1c81300f052b4f2b4523d1c224fe9614c10154ffb3fc145a104e49d0
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.