An AI-powered daily testing assistant that automates static code analysis, dynamic API testing, and regression analysis for your pull requests.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install qa-quickcheck
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install qa-quickcheck using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is QA QuickCheck?
QA QuickCheck is an advanced, AI-driven daily testing assistant designed to dramatically accelerate pull request verification and code quality assurance. By integrating into your developer workflow, this skill automatically executes static audits, dynamic functional checks, and regression strategies in under 15 minutes. It represents a powerful extension within the ecosystem of Openclaw Skills, helping teams avoid manual code review bottlenecks while guaranteeing that no hardcoded credentials or critical bugs make it into production.
The skill acts as a read-only testing agent that strictly adheres to safety boundaries. It is designed to inspect pull requests (PRs) without modifying the source code, generating clean, structured defect reports that satisfy both developer and product manager requirements. Leveraging Openclaw Skills like QA QuickCheck ensures consistent code gates and zero-friction deployments.
QA QuickCheck Use Cases
- Pre-Merge PR Quality Gates: Automatically trigger static and dynamic scans before merging code branches to ensure no regression failures.
- Sanity Checks for Minor Commits: Run a rapid 2-minute 'Quick' test for small hotfixes to check for hardcoded secrets, dangerous APIs, and basic configuration errors.
- Automated Regression Testing: Execute Git diff-based regressions targeting only modified modules, optimizing execution time and computing resources.
- Security Audit Compliance: Check HTTP configurations, CORS rules, Content Security Policies (CSP), and HSTS setup before staging releases.
How QA QuickCheck Works
- Triggering the Skill: The user invokes the skill using natural language triggers (e.g., 'QA', 'PR check', 'test by Quick').
- Reading the Scheduler: The AI agent accesses
references/00-调度器.mdto map modes to reference files, verify environmental capabilities, and enforce absolute redlines (read-only, isolation). - File and Script Loading: The skill dynamically loads configuration files from the
references/subdirectory and operational scripts (e.g., HTTP runners) from thescripts/subdirectory. - Execution of Audits and Tests:
- Quick Mode: Performs static audits focusing on technical stack, hardcoded keys, and dangerous APIs.
- Standard Mode: Runs static audits, initiates local application builds for dynamic smoke and API tests, and evaluates regressions via Git diff.
- Report Generation: The skill generates a structured
test-report.mdat the project root based on a strict template mapping defect IDs (DEF-XXX/SEC-XXX) with PM/Dev dual perspectives.
QA QuickCheck Setup
Integrating QA QuickCheck into your repository workspace using Openclaw Skills is straightforward. Follow these steps to set up the configuration references and executable scripts:
1. Initialize Configuration Directory
Create a folder structure in your workspace root to hold references and testing scripts.
mkdir -p .ai_test_tmp references scripts
2. Configure Reference Mappings
Populate the references/ directory with your QA constraints, scheduling guidelines, and report templates. Key configuration files include:
references/00-调度器.md: Maps the run modes and sets environment redlines.references/01-静态代码审计.md: Establishes rules for secrets and API checks.references/02-动态功能测试.md: Defines smoke test pathways and dynamic hooks.
3. Deploy Test Scripts
Place your execution runners inside the scripts/ directory:
scripts/http-test-runner.jsscripts/security-headers-check.jsscripts/data-factory.js
4. Invoke via AI Agent
Run the assistant by calling the command:
# Trigger standard mode audit and dynamic testing
@qa-quickcheck 按 Standard 测试
QA QuickCheck Data Schema & Taxonomy
The QA QuickCheck taxonomy is organized cleanly under logical references and executable scripts within your workspace:
Logical File Registry
| Logical Identifier | File Path | Purpose |
|---|---|---|
00-调度器 |
references/00-调度器.md |
Core dispatcher mapping execution modes, environments, and safety redlines |
00-A |
references/00-A-缺陷定级与编号规则.md |
Standard definitions for defect categorization (DEF-XXX / SEC-XXX) |
00-B |
references/00-B-报告模板与追溯映射.md |
Report formatting instructions and tracking templates |
00-D |
references/00-D-回归测试策略.md |
Strategies handling Git diff-scoped regressions |
01 |
references/01-静态代码审计.md |
Target rules for hardcoded keys, secrets, and deprecated/dangerous API scans |
02 |
references/02-动态功能测试.md |
Directives for core smoke testing and local API execution loops |
Script Registry
| Executable Script | Script Path | Description |
|---|---|---|
| HTTP Runner | scripts/http-test-runner.js |
Automates API endpoint checks and assertion runs |
| Config Checker | scripts/security-headers-check.js |
Validates secure HTTP headers (CORS, CSP, HSTS) |
| Data Factory | scripts/data-factory.js |
Generates Mock data payloads required for API pipelines |
Generated Deliverables
All operations output a standardized test-report.md file saved directly to the project root directory containing distinct Dev/PM viewpoints, precise defect counts, and clear compliance pass/fail indicators.
QA QuickCheck Advanced Features
- Dual-Perspective Defect Reporting: Automatically formats test outcomes for both engineering details (stack traces, precise LOC) and product context (business impact and severity).
- Git Diff Regression Scope: Optimizes compute costs and time by strictly targeting changed lines and modules instead of performing generic, full-suite regression runs.
- Fail-Safe Startup Isolation: Dynamically attempts to initialize your application environment; if startup fails, the agent cleanly skips dynamic steps and notes environmental blockades in the report without crashing.
- Strict Read-Only Enforcement: Ensures zero risk of codebase pollution as all scripts execute within the boundaries of
tests/or.ai_test_tmp/and automatically perform clean-up routines. - Standardized Defect Taxonomy: Integrates uniform defect and security vulnerability indexing systems (DEF-XXX / SEC-XXX) seamlessly compatible with modern bug tracking tools.
SKILL.md
Loading
Related Openclaw Skills
Minimalist
A subtraction-first engineering agent skill designed to write the minimum correct code needed by actively fighting over-engineering, bloat, and dependency creep.
Minimalist Audit
Audit your codebase to automatically identify and rank deletion candidates like dead code, unused dependencies, and redundant helpers.
Minimalist Gain
An AI agent skill to measure and report codebase simplicity by tracking avoided lines of code, rejected scope, and declined dependencies.
Podcast Video Publisher
Converts podcast audio and artwork into high-quality 1080p MP4 slideshows and publishes them directly to structured YouTube playlists with automatic error and rate-limit recovery.
English Reading Analyzer
An advanced sentence-dissection and reading comprehension assistant that breaks down complex English sentences using a rigorous 5-step linguistic methodology.
AI Conference Deadline Radar
An intelligent search and deadline verification tool for AI and machine learning researchers navigating submission windows.
Featured*
