Install
$ agentstack add skill-evolplus-talos-qa-execution-runner ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
QA Execution Runner
Use
Use this skill for every QA-Exec dispatch.
Inputs
- Target task file and linked US/FRs
docs/test-cases/by-us//anddocs/test-cases/by-task//- Executable specs named by each TC
docs/deploy-reports/.md- UI artifacts: design refs, visual specs, instrumentation contract, UI refs
Procedure
- Gather test cases:
- read linked US IDs and FR IDs from the task;
- load every linked by-us functional TC;
- load task-scoped structural/api/e2e/functional TCs;
- halt on missing expected coverage.
- For UI tasks, enforce strict artifact presence:
- by-task TC directory with at least one TC;
docs/uiux/visual-specs/.md;- instrumentation contract when UI selectors/testIDs are expected.
- Run bidirectional instrumentation coverage for UI tasks:
- every contract-declared testID appears in at least one spec;
- when bundle is reachable, every contract-declared testID ships in the bundle.
- Route spec gaps to QA-Author and bundle gaps to FE Dev.
- Pre-run checks:
- parse deploy report
## Test Environment; - verify base URLs, fixtures, env vars, build/commit/instrumentation identity;
- verify
env_files,env_templates, andenv_validationare present;compose_config_quietispass;missing_required_envisnone; andsecret_values_redactedistrue; - verify every
Executable:file exists; - grep executable specs for
TODO: instrumentation-contract; any hit isblocked.
- Skip deprecated US test cases with reason
deprecated-us; report the skip. - Select runner from
solution-defaults, project ADRs, and SRS UI Introspection Profile. Loadui-test-executionand any relevant runner reference. - Invoke the runner against the deployed environment, never against production data.
- For UI tasks:
- Tier 1 functional always;
- Tier 2 structural/token always where introspection allows;
- Tier 3 visual diff only when SRS marks Visual-Critical.
- Validate visual spec before UI execution:
Status: Generated;- Figma version matches confirmed task version;
- handoff hash matches current handoff.
- Report each TC as
pass,fail,blocked, orskipped. - For failures, attach actual vs expected, logs/screenshots/traces/diffs, and suspected track.
- Write
docs/qa-reports/.mdand artifacts underdocs/qa-reports//. - Emit
plan-update.json:in-test -> doneonly when no fail/blocked cases remain; otherwisein-test -> failed.
UI Tiers
- Tier 1 functional: required elements, copy, interactions, form validation, required states, and accessibility checks named by the SRS.
- Tier 2 structural/token: layout, spacing, colors, typography, component hierarchy, and required states from
docs/uiux/visual-specs/.md. - Tier 3 visual fidelity: screenshot diff against approved references, only for
Visual-Critical: yes.
Report Tier 2 per component/property. A component passes only when every non-skipped property in every required state passes.
No-Introspection Fallback
Use this only when SRS §3.4.3 explicitly accepts a non-introspectable UI surface, such as a Unity build where AltTester was rejected.
- Confirm the SRS records the acceptance decision. If not, halt with
blocked: introspection-gap. - Use the coordinate + template registry pattern:
- fixed viewport/device resolution;
- screenshot capture per state;
- registry row per component with bounds, coordinate target, template image, source handoff node, and tolerance;
- artifacts under
docs/qa-reports//registry/.
- Treat coordinate/template checks as fragile. If this is not a one-off transitional path, file a high-severity open issue recommending instrumentation.
- Do not claim Tier 2 properties that cannot be observed. Mark them
skipped: framework-not-introspectable.
Artifact Layout
Every run writes artifacts under docs/qa-reports//:
docs/qa-reports//
|-- playwright-report/ (or framework-equivalent HTML report)
|-- traces/ (one trace.zip per failing test, named TC-ID.trace.zip)
|-- screenshots/ (test-captured screenshots, named TC-ID..png)
|-- visual-diffs/ (Tier 3 only)
|-- registry/ (coordinate/template fallback)
|-- xcresult/ (iOS only)
|-- android-report/ (Android only)
`-- logs/ (browser console, native logs, network captures)
The markdown report at docs/qa-reports/.md links the supporting artifact for each fail/blocked/skipped item.
Failure Tracks
be: server/data/status error.fe: UI render/behavior error with correct data.integration: contract/auth/CORS/boundary mismatch.design-drift: SRS/design mismatch requiring BA + Designer reconciliation.introspection-gap: tooling cannot verify the property.instrumentation-violation: missing testIDs/accessibility/instrumentation.unknown: TL diagnoses.
Hard Rules
- Never modify build, code, or tests to make a run pass.
- Never declare done with failed or blocked cases.
- Never silently skip verification.
- Missing spec files, stale visual specs, build identity mismatch, and unresolved selector TODOs are blocked states.
- Missing or failed deploy-report env validation is a blocked state routed back to DevOps. QA-Exec never guesses local
.envbehavior. - Flaky is failure until proven otherwise.
- Per-property UI reporting is mandatory for Tier 2.
- Commit before signaling done.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: evolplus
- Source: evolplus/talos
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.