Browse QA Skills

Integration with Google OSS-Fuzz for continuous fuzzing of open-source projects with automated bug filing and regression tracking.

Test isolation techniques including database cleanup, transaction rollback, parallel test execution, and shared resource management.

Testing API versioning strategies including URL path, header, and query parameter versioning with backward compatibility validation.

Systematic patterns for prompting AI coding agents to generate high-quality tests including prompt engineering for test creation, coverage-driven generation, mutation-aware testing, and review checklists for AI-generated test code.

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations to produce actionable AppSec-grade threat models.

Testing cookie and session management including secure flags, SameSite policy, session fixation, timeout behavior, and cross-domain cookie handling.

Testing Service Level Agreements and Objectives including availability targets, latency percentiles, error budgets, and automated SLO compliance reporting.

Approval testing methodology using ApprovalTests library for verifying complex outputs against human-approved results with diff-based review.

Effective patterns for using GitHub Copilot to generate, refactor, and maintain test code including prompt engineering for test generation, Copilot Chat for debugging, inline suggestions for assertions, and workspace context optimization.

Automated detection and prevention of leaked secrets, API keys, passwords, and tokens in code using tools like gitleaks, trufflehog, and pre-commit hooks.

Python-based load testing with Locust for writing user behavior scripts, distributed testing, real-time web UI monitoring, and custom load shapes.

Testing Docker containers and images including Dockerfile linting, container structure tests, security scanning, and multi-stage build validation.

Integration testing with Sentry for error tracking, performance monitoring, and release health verification in production environments.

Testing LLM-powered features including output quality validation, hallucination detection, token usage monitoring, and prompt regression testing.

SOAP web service testing including WSDL validation, XML schema testing, WS-Security, and SOAP fault handling verification.

gRPC service testing including protobuf validation, streaming tests, error handling, deadline testing, and load testing for gRPC endpoints.

Testing PDF generation including layout verification, content accuracy, font embedding, accessibility (PDF/UA), and cross-platform rendering consistency.

OpenAPI/Swagger specification validation and testing to ensure API implementations match their documented contracts with automated drift detection.

Automatically generating API tests from OpenAPI/Swagger specifications including request validation, response schema checking, and edge case generation.