Skip to content
Back to skills

Test Gap Review

ASecurity

Review whether existing tests and verification credibly prove a scoped behavior contract. Use during validation when evidence may omit important behavior or provide false confidence.

  • 3 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 17, 2026
development

Security analysis

A100/100

Scanned October 17, 2026

npx -y skills add yarlson/yarstack --skill test-gap-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Test Gap Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Test Gap Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/yarlson-test-gap-review/badge)](https://www.skillsdirectory.com/skills/yarlson-test-gap-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: test-gap-review
description: Review whether existing tests and verification credibly prove a scoped behavior contract. Use during validation when evidence may omit important behavior or provide false confidence.
---

# Test Gap Review

Audit verification sufficiency without silently becoming a test-writing or production implementation workflow.

## Workflow

1. Establish the authoritative behavioral contract, comparison scope, and claimed verification.
2. Map invariants, assumptions, normal behavior, important boundaries, meaningful failures, preserved state, cleanup, and external effects to existing evidence.
3. Identify weak assertions, fixtures that cannot fail meaningfully, implementation-detail tests, expected values derived from the code under test, mocks of code the system owns, coverage numbers cited as proof, unsupported manual claims, and skipped required commands. Flag example-only evidence when the claim spans a broad input space, operation sequence, concurrent ordering, restart, or recovery, and check that generated failures are reproducible.
4. For each high-risk claim, ask whether its test would fail if the behavior broke. Reason through a likely mutation, such as a flipped condition, a removed call, or an off-by-one bound. Run a temporary mutation only in a scratch copy, never in the user's working tree.
5. Review changed test code as maintained product code. Flag unclear naming or structure, repeated setup that should use a focused helper, helpers that hide scenario data or mix responsibilities, and table-driven cases that do not share one execution path.
6. Report each material gap with the affected claim, missing evidence, consequence, smallest proving check, and residual risk.
7. If remediation is authorized, use `test-design` for test changes and `behavior-implement` for production behavior; otherwise remain read-only.

For each material claim report:

```text
VERIFIED | NOT VERIFIED | INCONCLUSIVE
Claim: ...
Evidence: ...
Why: ...
```

Do not chase coverage percentages, demand a stronger method without a concrete risk, add fake-confidence tests, broaden infrastructure, or change production behavior directly.

Finish when material claims have supported statuses and remaining verification risk is explicit.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.