api-testing SKILL.md skillA
api-testing from fishzjp/qa-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add fishzjp/qa-skills/api-testing@v0.9.0Pins v0.9.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- fishzjp/qa-skills
- Path
skills/api-testing/SKILL.md- Versions recorded
- 6
- Latest version
- v0.9.0, committed Sep 20, 2026
- First version recorded
- Sep 1, 2026
- Size
- 12,349 bytes
- Repository stars
- 49
- License
- MIT
API testing from OpenAPI/Swagger or case schemas: parameters, boundaries, auth, idempotency, concurrency, error responses, data consistency; runnable scripts; k6 handoff. Not for: Web UI flows, manual case writing. 接口级测试：参数/边界/鉴权/幂等/并发/错误响应/数据一致性，产出脚本与结果；含 k6 压测。不用于：Web UI、手动用例。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# API 测试（api-testing）
接口级测试——E2E 之外的另一条执行路径。
- **输入**：API 文档（OpenAPI/Swagger）、用例 Schema 中 `execution_model` 可自动化的接口用例、被测环境信息（base URL、账号/Token）；性能轴（类型矩阵轴 1）移交包 `专项移交_性能_*.yaml`
- **输出（落盘）**：API 测试脚本（pytest + requests，或项目既定技术栈）+ 执行分报告 `测试报告_api_{日期}.md`（命名按 `../core/report-template.md` 头注，条目按其 §3 对齐；qa 断点判据按此文件名核收）；性能承接时另产 k6 压测脚本与压测报告（`references/k6-conventions.md`）
- **边界**：Web UI 流程 → `automated-e2e-testing`；接口手动用例设计 → `test-case-writing`
## When to Use
- 给定 OpenAPI/Swagger 文档，需要产出并运行接口自动化测试
- 从用例 Schema 中筛出接口级可自动化用例，转换为 API 脚本执行
- 需要覆盖鉴权/越权、幂等、并发写、错误响应等接口层专项
- 给定性能移交包或接口清单，需要生成并运行压测脚本（k6）——按 `references/k6-conventions.md`
## When NOT to Use
- Web UI 交互流程（点击 / 页面状态）→ `automated-e2e-testing`
- 编写接口的手动测试用例 → `test-case-writing`
- 端到端流水线 → `qa` 编排
- 独立压测环境搭建与容量保障 → 运维/专项协作（agent 侧压测承接见 `references/k6-conventions.md`；外部执行场景按 `test-strategy` 的移交包）
- Mock Server 搭建 → 开发协作事项，不在本 skill 范围
## 脚手架（默认 pytest + requests，可替换为项目既定栈）
```text
api-tests/
├── conftest.py # fixture：base_url、会话/Token、环境配置（环境变量注入，可由 .env 加载，不硬编码）
├── common/
│ └── client.py # 统一请求封装：日志、超时、鉴权头、断言辅助
├── test_{模块}_{接口}.py # 一个接口一个文件，test 名沿用 TC 编号
└── requirements.txt
```
```python
…Read the whole file at its exact version.
How to install
mdr add fishzjp/qa-skills/api-testing@sha256:0c287b1b71c073f0The line at the top of this page pins the label v0.9.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ivhnl4pudtevi3jt)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Sep 1, 2026 and Sep 20, 2026, about one every 4 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v0.9.0 latest | 2026-09-20 | 21f92dc | 12,349 B | A | view · diff |
| v0.8.1 | 2026-09-07 | 5dd8179 | 12,349 B | A | view · diff |
| v0.8.0 | 2026-09-07 | 405281b | 12,347 B | A | view · diff |
| v0.7.0 | 2026-09-07 | fbf4036 | 12,382 B | A | view · diff |
| v0.7.0 | 2026-09-03 | e842af3 | 12,293 B | A | view · diff |
| v0.7.0 | 2026-09-01 | bd5597a | 11,822 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (12349 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
fishzjp/qa-skills · 49 stars · license MIT · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ivhnl4pudtevi3jt GET https://markdownregistry.com/api/v1/resolve?ref=fishzjp/qa-skills/api-testing GET https://markdownregistry.com/api/v1/blob/0c287b1b71c073f0b0d2cebab03167ac23cdd347ece0798d21f56ef620828d91
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from fishzjp/qa-skills
Every file in fishzjp/qa-skills