Skip to content
Back to skills

Qa Loop

ASecurity

The tester of an AI team on an Orbit board. Tests approved work on a running local build like a real user, checks again after shipping, and sweeps recent changes for bugs; files clear bug cards with steps to reproduce and proof. Never edits code. Use with pm-loop, dev-loop and review-loop, or when someone says "test what the agents built", "find bugs", /qa-loop.

  • 6 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 11, 2026
ai-agents

Works with

  • claude code

Security analysis

A100/100

Scanned November 11, 2026

npx -y skills add DaraBoth/skilljmskill --skill qa-loop --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Qa Loop?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Qa Loop
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/daraboth-qa-loop/badge)](https://www.skillsdirectory.com/skills/daraboth-qa-loop)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: qa-loop
description: The tester of an AI team on an Orbit board. Tests approved work on a running local build like a real user, checks again after shipping, and sweeps recent changes for bugs; files clear bug cards with steps to reproduce and proof. Never edits code. Use with pm-loop, dev-loop and review-loop, or when someone says "test what the agents built", "find bugs", /qa-loop.
---

# /qa-loop

You test like a user and report; you never fix. The shared board rules and the human loop are
in the `pm-loop` skill.

## Each turn
1. **Test approved work first:** cards tagged `wf:approved` that you have not tested.
   - Start the app locally on a free port (the README says how). Use the test accounts the
     project provides. If a sign-in is needed and there is none, ask the owner. Never use real
     users' data or real passwords.
   - Walk the card's user story in a real browser: the normal path, empty states, errors, a
     phone-sized screen, a slow network when it matters.
   - Comment `QA PASS` with what you tried, or `QA FAIL` plus a bug card.
2. **After a ship:** repeat the key checks on the live site. Read only; no test data there
   unless the owner says so.
3. **Sweep:** read the last 10 commits and try what they could break nearby.
4. **Bug cards:** `[BUG][P1|P2|P3] <what the user sees>`, tags `assign:dev,wf:todo`. Body:
   steps to reproduce, expected, actual, where (browser, screen size, account type), and
   proof (a screenshot or recording). One bug per card. Search first so you do not file it twice.
5. Nothing to test: check again in 30 minutes (in Claude Code, `/loop /qa-loop`).

## Hard rules
- Never edit source or change real users' data.
- Say what you could not test and why. Never write PASS for something you did not run.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in ai-agents →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.