qa-testing-blueprints
Estándar QA 11X para Agentes de IA (Hermes, Claude, Antigravity, etc.) y humanos. Blueprints de infraestructura efímera en Docker con barreras innegociables de calidad: Cobertura >95%, Mutación, SAST/DAST, Ingeniería del Caos y Observabilidad para ecosistemas Python, Node.js, Vue y Bash.
2stars
1forks
TypeScript
Added 11/15/2026
Available after the catalog security scan passes.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
The deep catalog scan for this skill is still queued. Run an instant dependency check now instead.
AI Agentsai-promptsbashbddchaos-engineeringdastdevsecopsdocker-testingfastapikarate-dslmcpnodejsobservabilityplaywrightpytestpythonqa-automationreactsasttesting-blueprintsvue3
Maintainer of this skill?
Installation
# Add to your Claude Code skills
git clone https://github.com/tecno-consultores/qa-testing-blueprintsGetting Started
Guides for using ai agents skills like qa-testing-blueprints.
- Caveman: Cut Claude Token Use by 65%How agent-side prompt compression works, when to use it, and when not to.
- How to Test an AI Skill: A Practical Guide to EvalsEvaluate skills with realistic fixtures, a baseline, and repeatable checks.
- Getting Started with AI SkillsFirst-time install walkthrough for Claude Code, Codex CLI, and ChatGPT.
Compare with similar skills
See how qa-testing-blueprints compares with popular alternatives.
🌐 Language: English | Español
QA Testing Blueprints (QA-11X v3.0)
Zero-Infra Agentic QA, AI Evals & DevSecOps Governance Blueprint
-6f42c1){kind=icon}
QA-11X v3.0 turns both AI Coding Agents (Google Antigravity, Claude Code, Cursor, Windsurf, Codex, Copilot, Hermes Agent, and 20+ more) and human engineering teams into deterministic Staff-level QA & DevSecOps operators. Every check runs inside ephemeral, non-root Docker containers (Rule Zero) with zero host contamination, enforcing >= 95% coverage, real database/contract parity, dual-mode AI evaluations, and DISA ASD STIG V6R5 + OWASP v4.2 security controls from day one.
⚡ 30-Second Zero-Friction Quickstart
Bootstrap any repository in 30 seconds without cloning this monorepo:
# Auto-detect stacks & vibe-coded markers, configure .qa-11x.json, AGENTS.md, ACTIVE_TASK.md & PR workflow:
npx -y @sinfallas/mcp-qa-11x@latest quickstart
# Explicit tier, output language policy, agent selection, or dry-run preview:
npx -y @sinfallas/mcp-qa-11x@latest quickstart --tier standard --lang en --agents auto
npx -y @sinfallas/mcp-qa-11x@latest quickstart --tier enterprise --lang es --dry-run
Add Proportional PR Protection to GitHub Actions
Use the hardened composite action .github/actions/qa-11x-pr-check/action.yml in your pull-request workflow:
name: QA-11X PR Check
on: [pull_request]
permissions:
contents: read
jobs:
qa-11x:
runs-on: ubuntu-latest
timeout-minutes: 20
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
with:
fetch-depth: 0
- uses: tecno-consultores/qa-testing-blueprints/.github/actions/qa-11x-pr-check@v2
with:
tier: standard
lang: en
🧭 Differential Architecture (QA-11X v3.0)
flowchart TD
UserReq["Developer or PR Trigger"] --> Quickstart["npx @sinfallas/mcp-qa-11x quickstart"]
Quickstart --> Router{"3-Path Execution & Tiers"}
Router -->|"DOCS_ONLY"| FastDocs["make sync-governance + make lint-docs"]
Router -->|"MICRO_CHANGE / standard"| BlastAST["AST Blast Radius & Tiered CI"]
Router -->|"FULL_11X / enterprise"| FullPyramid["13-Layer QA Pyramid + FINOS CALM"]
BlastAST --> RuleZero["Rule Zero Non-Root Docker sinfallas/*"]
FullPyramid --> RuleZero
RuleZero --> Shields["AI Evals Dual-Mode + DISA/OWASP + Release Gate"]
FastDocs --> LocalCommit["Certified Local Commit QA-GIT-GATE-01"]
Shields --> LocalCommit
Progressive Adoption Tiers
| Tier | Target Adoption | Included Gates & Guarantees |
|---|---|---|
starter |
Day-1 Adoption (30s) | Zero-plain-text secret scanning, Rule Zero container hygiene, .qa-11x.json, AGENTS.md connector across 27+ AI coding agents, and DOCS_ONLY fast-path |
standard |
Daily PR Workflows | Everything in starter + >= 95% unit coverage, strict types (mypy --strict, tsc, PHPStan max), AST Blast-Radius CI partitioning (40%–60% compute savings), and UI anti-pattern linting (QA-UI-ANTI-001..005) |
enterprise |
Regulated Production | Full 13-layer FULL_11X pyramid, blocking FINOS CALM architecture validation, PostgreSQL 17 RLS + WORM seq_num audit chains, DISA STIG V6R5 / OWASP v4.2, 3-phase clock assertions (t < starts_at, starts_at <= t <= ends_at, t > ends_at), Pact + k6 load, and multi-signal Release Readiness Gate (GO / NO_GO / SKIPPED) |
Zero-Infra Ephemeral Docker Matrix (sinfallas/*)
All runtime, lint, mutation, contract, and BDD suites execute inside non-root containers (-u "$(id -u):$(id -g)" -e HOME=/tmp) with Trivy HIGH/CRITICAL = 0:
| Ephemeral Image | Role in QA-11X v3.0 | Certified Tags & Pre-Baked Tooling |
|---|---|---|
| sinfallas/base-python-uv | Python, FastAPI, AI Evals & Vibe-Rescue | 3.11, 3.12, 3.13, 3.14, 3.15, latest (uv, ruff, mypy, pytest, bandit, radon, mutmut, deepeval, pact-python, tesseract-ocr) |
| sinfallas/base-node-ionic | MCP Server, Node, Vue 3, React & CALM | 22, 24, 26, latest (pnpm, promptfoo, @finos/calm-cli, playwright, @axe-core/playwright, @pact-foundation/pact) |
| sinfallas/base-mobile-appium | Native & Hybrid Mobile W3C Bridge (Android/iOS) | 26, latest (Node.js 26, pnpm, OpenJDK 21, Android SDK/ADB, Appium 3, uiautomator2, xcuitest, WebdriverIO v9) |
| sinfallas/basephpcomposer | PHP 8.2–8.5 APIs & Services | 8.2, 8.3, 8.4, 8.5, latest (pcov, phpstan, psalm, pest, phpunit, infection) |
| sinfallas/karatelabs | API & HTTP/Edge/OSHP/XML BDD Contracts | 1.5.1 / 11x-v2-local (Java + Maven + Karate JUnit5; proportional to stateful multi-service FULL_11X flows) |
| sinfallas/base-bash-qa | DevOps & POSIX Shell Scripts | latest (ShellCheck, shfmt, BATS-core, bats-mock, kcov) |
| sinfallas/remote-graphify | AST Context Optimization & Blast Radius | latest (graphify Tree-sitter AST graph & cluster extraction) |
| Infra & Load Engines | Live DB, Cache & Smoke Load | postgres:17-alpine, eqalpha/keydb:alpine, grafana/k6:2.4.0 |
🗂️ Full-Stack, Mobile, AI Evals & Vibe-Rescue Blueprints
| Directory | Domain | Key v2.0 Capabilities |
|---|---|---|
fastapi/ |
Python Async APIs | Ruff, Mypy strict, PostgreSQL 17 RLS + Alembic parity, Pact V4 consumer (test_pact_consumer.py), k6 smoke load (smoke.k6.js), Karate BDD |
python/ |
Python Libraries & CLIs | UV, Ruff (CC <= 5), Mypy strict, Pytest >= 95%, Hypothesis, Mutmut (MSI >= 80%), Bandit |
node-backend/ |
Node.js / TS Microservices | ESLint --max-warnings 0, Vitest >= 95%, Pact V4 provider verifier (provider.pact.test.ts), Stryker, ZAP |
vue3/ |
Vue 3 + Vite Frontends | Screenplay Actor.ts, Self-Healing DOM semanticLocator.ts, Vitest >= 95%, @axe-core, Lighthouse CI |
react-frontend/ |
React + Vite Frontends | Screenplay Actor.ts, Self-Healing DOM semanticLocator.ts, RTL, Playwright, @axe-core |
php/ |
PHP 8.2–8.5 Services | PHP-CS-Fixer, PHPStan Level Max, Psalm Taint Analysis, Pest/PHPUnit + PCOV >= 95%, Infection |
bash-scripts/ |
POSIX / Bash Automation | ShellCheck, shfmt, BATS-core, bats-mock, kcov >= 95% |
mobile-appium/ |
Native & Hybrid Mobile | Appium 3 / W3C + WebdriverIO (wdio.conf.ts), MobileActor.ts (Android, iOS, Ionic, RN) |
ai-evals/ |
Dual-Mode AI & Multimodal QA | RAG faithfulness, Promptfoo OWASP LLM Top 10, WebRTC voice latency (test_voice_websocket_latency.py), PDF/OCR Decimal (test_pdf_table_fidelity.py), golden_from_traces.py |
vibe-rescue/ |
Vibe-to-Enterprise Hardening | audit_vibe_prototype.py (VIBE-SEC-001..QA-005), PostgreSQL 17 RLS/WORM template (rls_hardening.sql) |
architecture/ |
Architecture-as-Code | Blocking FINOS CALM topology (qa-11x.calm.json) & 7 mandatory 11X controls (make validate-calm) |
mcp-server/ |
@sinfallas/mcp-qa-11x |
Node.js MCP server (stdio), quickstart, install-skill, init-agents, reconcile-agents, tms-sync & A2A agent card |
🛠 Testing Tools Matrix
Below is the corporate validation stack summarized per environment and test type. N/A indicates test categories that do not apply due to the intrinsic nature of the environment (e.g. a standalone Python CLI, Bash script, or declarative architecture topology does not expose an HTTP server, so DAST and Chaos Engineering do not apply).
| Environment | Linting / Formatting | Unit Tests / Mocking | Coverage | Dependency Audit | Static Security (SAST) | Mutation | BDD / Black-Box | Concurrency / Stress | Profiling / Complexity | DAST (Dynamic) | Chaos Engineering | Observability (Metrics) | IaC / Docker Audit | Local Git Hooks | | :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- | :--- |
Frequently Asked Questions
What is qa-testing-blueprints?
qa-testing-blueprints is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by tecno-consultores. Estándar QA 11X para Agentes de IA (Hermes, Claude, Antigravity, etc.) y humanos. Blueprints de infraestructura efímera en Docker con barreras innegociables de calidad: Cobertura >95%, Mutación, SAST/DAST, Ingeniería del Caos y Observabilidad para ecosistemas Python, Node.js, Vue y Bash. It has 2 GitHub stars.
Is qa-testing-blueprints safe to use?
qa-testing-blueprints's catalog security scan is still queued. You can run an instant dependency and prompt-injection check now with the "Scan for vulnerabilities" button above.
How do I install qa-testing-blueprints?
Clone the repository with "git clone https://github.com/tecno-consultores/qa-testing-blueprints" and add it to your Claude Code skills directory (see the Installation section above).
What programming language is qa-testing-blueprints written in?
qa-testing-blueprints is primarily written in TypeScript. It is open-source under tecno-consultores on GitHub, so you can review or fork the full source.
Are there alternatives to qa-testing-blueprints?
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh qa-testing-blueprints against similar tools.
Comments (0)
to leave a comment.
No comments yet. Be the first to share your thoughts!
Related Skills
Reverse engineer anything with agents, from app behavior down to native binaries.
458,440
112,436
TypeScript
AI Agentsagent-skillsai
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
302,597
44,640
JavaScript
AI Agentsai-agentsanthropic
Skills for Real Engineers. Straight from my .agents directory.
250,518
21,171
Shell
AI Agents
An agentic skills framework & software development methodology that works.
234,966
20,863
Shell
AI Agentsaibrainstorming