Install
$ agentstack add skill-jovd83-restassured-skill-tdd ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Document Test Cases In TDD
1. Store And Organize Files
- Store TDD documents under
docs/tests/. - Mirror the automation or business-domain structure with feature folders such as
docs/tests/orders/ordocs/tests/auth/. - Create one
.mdfile per executable scenario, not one file per epic. - Name files with a stable scenario purpose and classification such as
create-order-mss.md,create-order-optional-fields-ext.md, orcreate-order-missing-customer-err.md. - For non-trivial or high-risk requirements, document multiple scenarios:
MSSfor the main success path.EXTfor valid variants such as optional fields or alternate filters.ERRfor validation, auth, not-found, conflict, or drift behavior.- For trivial low-risk reads, one
MSSscenario is sufficient. - Do not force redundant scenarios when the requirement has no meaningful variation.
2. Use This Exact Case Structure
- Write fields in this order:
titledescriptiontest_suiteCovered requirementpreconditionsstepsexecution_typedesign_statustest_engineertest_leveljiraTest script- Keep
titleinformative and unique. Include requirement or contract reference, scenario classification, and a concise behavior name. - Keep
preconditionsas a lettered list:A),B),C). - Keep
stepsas a markdown table with columnsStep,Action, andExpected result. - Keep
execution_typeasAutomatedunless the user explicitly wants manual cases. - Use
design_statusasDraft,Ready, orObsolete. - Keep
Test scriptgranular. Link to the exact Java test file and the specific test method or display name, not only the file.
3. Make The Content API-Specific
- Describe API behavior, not UI behavior.
- Put auth state, seeded data, feature flags, or contract version details in
preconditions. - In
steps, describe the request action at a high level and put status, content type, headers, body semantics, and side effects inExpected result. - Include contract paths, operation ids, requirement ids, or acceptance-criteria ids in
Covered requirement. - When runtime behavior differs from the documented contract, document the live executable expectation and reference the mismatch artifact separately.
4. Start From The Template
- Start from [tdd-case-template.md](assets/tdd-case-template.md) for new case files.
- Keep the field order unchanged so later sync and traceability work stays deterministic.
- Use aggregate index files under
docs/testing/tdd/only as navigation aids when the repo wants them.
5. Template
title: [ORD-POST-001] MSS: Create order with required fields
description: Validates successful order creation for the standard required-field payload.
test_suite: Orders
Covered requirement: US-123, POST /api/orders, operationId=createOrder
preconditions:
A) The API is running.
B) Authentication is configured for a valid user.
C) No conflicting order id is pre-seeded.
steps:
| Step | Action | Expected result |
|---|---|---|
| 1 | Send `POST /api/orders` with a valid required-field payload | Status `201` is returned with JSON content. |
| 2 | Inspect the response body | The response includes the created order id and submitted business fields. |
| 3 | Retrieve the new order through `GET /api/orders/{id}` | The order is persisted and matches the creation response. |
execution_type: Automated
design_status: Ready
test_engineer: Codex
test_level: 1
jira: N/A
Test script: [OrderApiTest.java](C:/repo/tests/src/test/java/com/example/orders/OrderApiTest.java)#createOrderWithRequiredFields
6. Scenario Depth Decision
- Use
MSS,EXT, andERRfor CRUD, authentication, validation-heavy, workflow, or integration-sensitive requirements. - Use one
MSSonly for low-risk stable reads when optional data and error paths add little value. - Add a dedicated drift or compatibility scenario when the live runtime contradicts the contract or requirement.
7. Examples
- Input:
Document POST /orders missing-customer-id as TDD.
Output: A dedicated ERR markdown case with lettered preconditions, a step table, and a direct link to the negative Rest Assured test method.
- Input:
Document the owner create flow as TDD.
Output: One MSS case for successful creation and separate EXT or ERR cases only when the requirement meaningfully varies.
8. Troubleshooting
- Problem: The automation file contains multiple test methods.
Fix: Point Test script to the exact method anchor, not only the file.
- Problem: The case reads like a raw HTTP transcript.
Fix: Keep the action concise and move the protocol details into the expected result only where they matter.
- Problem: A single document mixes success, variation, and error behavior.
Fix: Split it into separate scenario files and classify them as MSS, EXT, or ERR.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: jovd83
- Source: jovd83/restassured-skill
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.