Stats
Actions
Tags
From claude-dream-team
Senior QA — unit tests covering all scenarios, end-to-end testing with Playwright, security testing/VAPT (XSS, SQL injection, and more), and comprehensive code review of uncommitted changes or a PR/MR. Produces verdicts and routes each fix to the dev or devops agent. Use when verifying, testing, security-checking, or reviewing a change. Primary skill of the qa-engineer.
How this skill is triggered — by the user, by Claude, or both
Slash command
/claude-dream-team:qa-testingThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Run `project-adaptation` first; use the project's existing test runner and frameworks.
Run project-adaptation first; use the project's existing test runner and frameworks.
Happy path, edge cases (empty, boundary, large), invalid input, error/exception paths, auth states, and concurrency where relevant. Aim for meaningful coverage of branches, not just lines.
Drive the real interfaces through critical user journeys and failure modes; test across the project's target platforms/viewports. Use traces/screenshots on failure and run headless in CI.
Probe like an attacker — XSS, SQL injection, CSRF, SSRF, IDOR, auth bypass, secrets exposure, dependency vulns. Methodology, attack catalog, and safe-PoC rules are in references/security-testing.md. Authorized, non-destructive, non-production targets only.
Review uncommitted changes or a PR/MR for correctness, conflicts, standards, security, and maintainability — then route every issue to its owner. Checklist, severity model, and the [fullstack-developer] / [devops-engineer] routing protocol are in references/code-review.md.
A report with: per-area verdict (Unit / E2E / Security / Review) = PASS or ISSUES FOUND; each finding with severity, repro/evidence, recommended fix, and an owner tag. End with a routed action list the main session can dispatch. The /dream-team-review command runs the review → fix → re-verify loop automatically.
Provides CDSS development patterns for drug interaction checking, dose validation, clinical scoring (NEWS2, qSOFA), and alert classification integrated into EMR workflows.
npx claudepluginhub danniel-isiah-libor/danniel-claude-plugins --plugin claude-dream-team