Install
$ agentstack add skill-pavel-molyanov-molyanov-ai-dev-post-deploy-qa ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Post-deploy QA
Input Requirements
Read before starting:
user-spec.md— acceptance criteriatech-spec.md— Agent Verification Plan (AVP) section + technical acceptance criteriadecisions.md— deviations from plan (if exists)- Pre-deploy QA report (
logs/working/qa-report.json) — checkdeferredToPostDeploysection for criteria that could not be verified pre-deploy - Confirmation that deploy is complete and environment is live
If tech-spec has no AVP section — still proceed with acceptance criteria verification.
Verification Methodology
Two verification directions (both required):
1. Agent Verification Plan (AVP)
Execute each step from AVP section in tech-spec:
- Read AVP section — it lists verification steps with expected outcomes and MCP tools to use
- For each step:
- Use the specified MCP tool (Telegram MCP, Playwright, curl, bash, etc.)
- Perform the described action on live environment
- Compare result with expected outcome
- Record: tool used, step performed, result
- If MCP tool is unavailable — mark step as
not_verifiable, continue with remaining steps
Checkpoint: All AVP steps executed or marked not_verifiable. Proceed to acceptance criteria.
2. Acceptance Criteria Verification
Verify all acceptance criteria from user-spec and tech-spec on live environment. This catches criteria that pre-deploy QA could not verify without a live system.
- Read pre-deploy QA report (
logs/working/qa-report.json) — checkdeferredToPostDeploysection - For each deferred criterion — follow the verification steps specified in the pre-deploy report
- Also re-check all acceptance criteria from user-spec and tech-spec against live behavior
- For each criterion:
- passed — verified on live environment, evidence provided
- failed — live behavior does not meet the criterion
- blocked — cannot verify due to external conditions (no data, third-party service down). Provide a concrete manual verification plan for the user: what to check, when, how
A blocked criterion requires user follow-up before the feature can count as fully verified.
Checkpoint: All acceptance criteria verified, or marked blocked with manual verification plan.
Severity Classification
- critical — verification step failed, live functionality broken, data integrity at risk
- major — works but with significant issues visible in production
- minor — cosmetic, non-functional discrepancies
Output Format
Return findings as JSON. Reason: orchestrator parses this to decide pass/fail and log findings.
{
"status": "passed | failed",
"summary": {
"totalSteps": 0,
"passed": 0,
"failed": 0,
"blocked": 0,
"notVerifiable": 0,
"criticals": 0,
"majors": 0,
"minors": 0
},
"agentVerification": [
{
"step": "Send /start to bot",
"tool": "telegram_mcp",
"status": "passed | failed | not_verifiable",
"details": "Bot responded with welcome message"
}
],
"acceptanceCriteria": [
{
"id": "US-5",
"criterion": "Titles generated with correct declensions",
"source": "user-spec | tech-spec | deferred-from-pre-deploy",
"status": "passed | failed | blocked",
"evidence": "Checked live output, generated title uses correct declension/grammar",
"manualVerificationPlan": "Only if blocked — what the user should check, when, how"
}
],
"findings": [
{
"severity": "critical | major | minor",
"title": "Bot does not respond to /start",
"expected": "Welcome message within 3 seconds",
"actual": "No response after 10 seconds",
"reproduction": "Steps to reproduce..."
}
]
}
Status decision: passed if zero criticals, failed if one or more criticals.
Guidelines
- Every finding includes concrete reproduction: steps, expected vs actual, tool output.
- If all MCP tools are unavailable — report that automated verification is not possible, suggest manual steps.
- Empty findings array = clean verification.
Final Check
Before finishing, verify:
- [ ] All AVP steps executed or marked
not_verifiable - [ ] All deferred criteria from pre-deploy QA report addressed
- [ ] All acceptance criteria from user-spec and tech-spec verified on live environment
- [ ] Every
blockedcriterion has a manual verification plan (what to check, when, how) - [ ] Output JSON is valid, status reflects critical count
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: pavel-molyanov
- Source: pavel-molyanov/molyanov-ai-dev
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.