Install
$ agentstack add skill-merllinsbeard-merlin-skills-qa ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
gstack-qa
Run the smallest rigorous QA loop for the active spec/goal. This skill is adapted from gstack QA, but it is standalone: do not call gstack runtime helpers, telemetry, browser daemons, review specialists, or gbrain.
When To Use
Use after implementation, before gstack-ship, or when the user asks whether the web app works.
Do not use as a replacement for tdd during implementation. If there is no implemented surface yet, route back to tdd or create-goal.
Inputs
Inspect, in order:
- User's newest request and stated QA scope.
specs//GOAL.md, thentasks.md,plan.md, andspec.mdwhen present.- Existing test commands in
package.json,Makefile, CI config, README,AGENTS.md, or repo-local docs. - Current git diff and recently changed files.
- Existing QA reports, screenshots, Playwright traces, or release notes.
If the spec or goal is missing but the user wants autonomous QA for a feature, ask to run create-goal first unless the user explicitly says to QA the current diff only.
QA Loop
- Define the acceptance checklist from the spec/goal. Keep it short and concrete.
- Run the repo's relevant automated checks. Prefer existing scripts over inventing new commands.
- For web behavior, use
playwright-clifirst. Useplaywright-skillonly when a reusable script is more appropriate. - Classify each finding as blocker, functional bug, regression risk, visual issue, or test gap.
- Fix only in-scope bugs when the user asked for QA-and-fix. Keep fixes small and rerun the failing check after each fix.
- Do not expand product scope during QA. If the spec is wrong or incomplete, report the spec gap instead of silently changing behavior.
- Stop when all acceptance checks pass or when a blocker requires external input.
Evidence
Write or update a compact QA note next to the active feature when there is a spec directory:
specs//qa-report.md
If there is no spec directory, report inline or use the repo's existing QA/report location.
The report should include:
- scope tested;
- commands run;
- browser flows checked;
- bugs found and fixed;
- remaining risks or missing coverage;
- final ship recommendation.
Output
End with:
QA Result: pass | pass-with-risks | blocked | fail
Evidence:
Ship readiness: yes | no | needs user decision
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: merllinsbeard
- Source: merllinsbeard/merlin-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.