defect-escape-taxonomy SKILL.md skillA
defect-escape-taxonomy from testland/qa is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add testland/qa/defect-escape-taxonomy@git:20260725.89d9e8fPins git:20260725.89d9e8f in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- testland/qa
- Path
plugins/qa-bug-repro/skills/defect-escape-taxonomy/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260725.89d9e8f, committed Jul 25, 2026
- First version recorded
- Jul 19, 2026
- Size
- 17,808 bytes
- Repository stars
- 11
- License
- MIT
Classifies a defect that reached production into one of three root gap categories (test gap, process gap, tooling gap) and one of thirteen sub-patterns, applying the earliest-layer rule: the category is the earliest layer that should have caught the defect, expressed as a property of the system and never of a person. Each sub-pattern carries the typical prevention fix, so the finding names an actionable class of gap. Rejects blame language and generic prevention assets such as 'add more tests'.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# defect-escape-taxonomy ## What this classifies A defect is "an imperfection or deficiency in a work product where it does not meet its requirements or specifications or impairs its intended use" ([ISTQB, defect](https://glossary.istqb.org/en_US/term/defect)). When a defect reaches production, the interesting question is not what the defect was. It is which checking activity was supposed to stop it and did not. ISTQB has a formal term for exactly this: an **escaped defect** is "a defect that is not detected by a test activity that is supposed to find it" ([ISTQB, escaped defect](https://glossary.istqb.org/en_US/term/escaped-defect)). That definition is the whole skill in one sentence. Classification means naming the test activity that was supposed to find it, then naming why that activity did not. The three categories and thirteen sub-patterns below are a **practitioner taxonomy**, not a standard. ISTQB and ISO/IEC/IEEE 29119 define the vocabulary (defect, escaped defect, root cause, quality gate) but neither publishes this three-way split. Treat the categories as a working classification your team can amend, and treat the cited definitions as fixed. …
Read the whole file at its exact version.
How to install
mdr add testland/qa/defect-escape-taxonomy@sha256:b51a3e50b35a2f37The line at the top of this page pins the label git:20260725.89d9e8f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_siy2w5nnsxjeu24e)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Jul 19, 2026 and Jul 25, 2026, about one every 6 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260725.89d9e8f latest | 2026-07-25 | 89d9e8f | 17,808 B | A | view · diff |
| git:20260719.364dc50 | 2026-07-19 | 364dc50 | 18,734 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (17808 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
testland/qa · 11 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_siy2w5nnsxjeu24e GET https://markdownregistry.com/api/v1/resolve?ref=testland/qa/defect-escape-taxonomy GET https://markdownregistry.com/api/v1/blob/b51a3e50b35a2f37efba618d902d94ef5fd853e67958e6811aeaa63f7a3cae2c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.