exploratory-testing SKILL.md skillA
exploratory-testing from fishzjp/qa-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add fishzjp/qa-skills/exploratory-testing@v0.9.0Pins v0.9.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- fishzjp/qa-skills
- Path
skills/exploratory-testing/SKILL.md- Versions recorded
- 6
- Latest version
- v0.9.0, committed Sep 20, 2026
- First version recorded
- Sep 5, 2026
- Size
- 6,934 bytes
- Repository stars
- 49
- License
- MIT
Exploratory testing sessions when requirements are vague or docs are missing — charter-driven; outputs system understanding, risks, test ideas. Not for: automation prep, executing existing cases. 需求不完整、文档不足或系统陌生时发起独立探索式测试会话——charter 驱动，产出系统理解/风险清单/测试想法。不用于：为写自动化踩点（automated-e2e-testing 前置）、按既有用例执行。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 探索式测试（exploratory-testing）
需求不完整、系统陌生、文档不足时的**独立**探索式测试会话：charter 驱动，边探索边设计，产出系统理解与风险清单，而不是执行既有用例。
- **输入**：被测系统入口（环境 + 账号）、探索主题或 charter、（可选）已有需求材料
- **输出（落盘）**：`{项目}/探索笔记_{主题}.md`（charter、系统理解、风险清单、测试想法、发现的 Bug）——旁路场景下作为 `requirement-analysis` 的输入
- **适用**：新系统、老系统、文档缺失、黑盒测试、Agent 自主测试
## When to Use
- 新接手/陌生的系统，文档缺失或不可信，先探索再建模
- 需求不完整，需要用探索补齐系统理解与风险清单
- 黑盒环境（只有入口和账号）下的自主测试
## When NOT to Use
- 为写自动化**踩点**（理解页面结构、提取选择器、落 Page Object）→ `automated-e2e-testing` 工作流零（业务熟悉）
- 按既有用例执行 → `automated-e2e-testing`（UI）/ `api-testing`（接口）
- 已确认 Bug 的根因分析 → `bug-analysis`
- 端到端流水线 → `qa`（本 skill 是其旁路阶段 0）
## 探索笔记 Schema（产出结构）
```markdown
# 探索笔记：{主题}
## Charter（本轮探索的使命）
- 目标：{回答什么问题 / 覆盖什么区域}
- 范围：{系统/模块/流程}
- 时长/停点：{时间盒或停止条件}
## 系统理解（探索中修正）
- 入口与导航路径 / 角色与权限 / 核心流程 / 数据流向 / 状态与流转
## 风险清单（每条带证据标注，此时加载 `../core/evidence.md`）
- R?：{风险描述}｜level: {Critical/High/Medium/Low，按 `../core/risk-model.md` 的 Impact × Likelihood 预评}｜evidence: {E0–E4 + 来源}｜confidence: {high/medium/low}｜status: {fact / inference / risk / hypothesis}
（R? 为会话内临时编号；移交 `test-strategy` 时并入其 Risk Map 统一重编为 R1…，探索笔记原文编号不保留）
## 测试想法（后续转化为正式用例的候选）
- 想法 → 建议归属：{test-case-writing 直接产出 / 需先澄清的问题}
…Read the whole file at its exact version.
How to install
mdr add fishzjp/qa-skills/exploratory-testing@sha256:c0df82d8678b2f76The line at the top of this page pins the label v0.9.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_jdyhgvo2qpkmsovv)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Sep 5, 2026 and Sep 20, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v0.9.0 latest | 2026-09-20 | 21f92dc | 6,934 B | A | view · diff |
| v0.8.1 | 2026-09-07 | e5ed1ac | 6,934 B | A | view · diff |
| v0.8.1 | 2026-09-07 | 5dd8179 | 6,924 B | A | view · diff |
| v0.8.0 | 2026-09-07 | 405281b | 6,922 B | A | view · diff |
| v0.7.0 | 2026-09-07 | fbf4036 | 6,922 B | A | view · diff |
| v0.7.0 | 2026-09-05 | 656379f | 6,824 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6934 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
fishzjp/qa-skills · 49 stars · license MIT · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_jdyhgvo2qpkmsovv GET https://markdownregistry.com/api/v1/resolve?ref=fishzjp/qa-skills/exploratory-testing GET https://markdownregistry.com/api/v1/blob/c0df82d8678b2f76e1d763f81000dd81e2fa369b3eda65ccac4d7b80cfbbd3af
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from fishzjp/qa-skills
Every file in fishzjp/qa-skills