Install
$ agentstack add skill-jovd83-restassured-skill-bdd ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Document Test Cases In BDD
1. Store And Organize Files
- Store feature files under
docs/features/ordocs/tests/features/. - Create one
.featurefile per API capability, feature, or resource group. - Group scenarios by requirement or business rule, not by raw HTTP method alone.
- Keep aggregate index files under
docs/testing/optional; treat the.featurefiles themselves as the canonical narrative artifacts. - For non-trivial requirements, document at least three scenarios:
MSSfor the main success path.EXTfor meaningful valid variations.ERRfor validation, auth, not-found, conflict, or drift behavior.- For trivial low-risk reads, one
MSSscenario is sufficient.
2. Use Standard Gherkin Structure
- Start with a
Feature:statement that names the API capability. - Use
Background:only for shared setup such as base environment, auth state, seeded data, or contract version. - Use
Scenario:for single cases andScenario Outline:only when the same behavior really varies by data. - Use
Examples:tables for compact data variations. - Add tags above scenarios for requirement ids, operation ids, and scope such as
@smoke,@regression,@contract,@negative, or@US-123.
3. Write API-Focused Steps
- Put environment, auth state, or seeded data in
Given. - Put request actions in
When. - Put status, content type, critical headers, body semantics, and side effects in
Then. - Use
AndandButonly to extend the current clause clearly. - Keep wording business-readable and API-specific.
- Do not turn the scenario into a low-value transcript of raw HTTP syntax.
4. Start From The Template
- Start from [feature-template.feature](assets/feature-template.feature) for new capability files.
- Keep scenario titles stable because traceability reports link to them.
- Keep one feature file per capability or resource group; do not collapse the whole service into one giant file.
5. Depth Rules
- Always include a standard
MSSscenario for the primary valid request. - Add
EXTcoverage for optional fields, alternate filters, paging, sorting, or valid role-specific variants. - Add
ERRcoverage for invalid input, unauthorized access, missing resources, duplicate requests, or contract drift. - Add a dedicated drift scenario when the runtime behavior does not match the documented contract.
6. Example
@SPC-OWN-003 @addOwner @workflow
Feature: Owner management
Scenario: Create an owner with required fields
Given the Spring Petclinic API is available
And no owner exists for the generated last name
When a client submits a valid owner payload to POST /api/owners
Then the response status is 201
And the response body contains the created owner id
And the created owner can be retrieved by id
7. Examples
- Input:
Write BDD for GET /orders/{id} unauthorized access.
Output: A tagged ERR scenario with Given, When, and Then steps for 401 behavior.
- Input:
Document the create-order requirement in BDD.
Output: Separate MSS, EXT, and ERR scenarios unless the requirement is trivial.
8. Troubleshooting
- Problem: The scenario reads like a curl command transcript.
Fix: Keep steps behavioral and move raw payload detail into data tables or examples only when needed.
- Problem: One feature file mixes unrelated capabilities.
Fix: Split by resource or business capability.
- Problem: A complex requirement has only one scenario.
Fix: Add the missing EXT and ERR scenarios before calling the documentation complete.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: jovd83
- Source: jovd83/restassured-skill
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.