CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

browser-user-test

Run an end-to-end browser test of Alethical as a real user — after a feature lands, on demand ("browser-test this", "drive the app", "test it like a user"), or before calling frontend work done. Spawns a FRESH-context agent on a cheap model that knows nothing about the implementation, drives the running app through a browser in scripted user stories or free exploration, and reports what breaks. Also owns the on-demand Playwright checks (just e2e) and the path from a stable story to a Playwright spec.

Quality

89%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, well-structured skill body that assumes Claude's competence and gives exact commands, hosts, and safety stop-conditions. It loses points only on minor token efficiency (an inline enumeration of recognized auth fields and an incident narrative) and the absence of an explicit feedback loop after failed stories.

Suggestions

Trim the enumeration of fields safeAuthCallbackReport recognizes to a single sentence ("it detects one-use auth/token fields in the query and fragment") — the helper encapsulates the full list, so naming ~17 fields spends tokens without changing behavior.

Condense the issue-1600 incident backstory to a one-line link plus the rule it motivated; the date and narrative details live better in the linked issue than in context.

Add a short feedback loop for failed stories: what to do with a failed or passed-with-friction verdict (e.g., re-run the story after the fix lands, or record it for graduation triage), completing the workflow's recovery path.

DimensionReasoningScore

Conciseness

The body is dense and assumes competence — no explaining what Playwright or OAuth is, just exact commands and project-specific facts. Minor over-explanation remains: the ~17-item enumeration of fields `safeAuthCallbackReport` recognizes ("access_token, refresh_token, provider_token…") duplicates logic the helper already encapsulates, and the incident backstory paragraph could be a one-line link. Fits anchor 4 (efficient with minor trimmable instances); not 5 because those passages don't each earn their tokens, not 3 because there is no genuinely unnecessary concept explanation.

4 / 5

Actionability

Fully executable guidance throughout: exact commands ("pnpm --dir apps/frontend exec playwright install", "E2E_BASE_URL=https://alethical.com just e2e"), exact hosts and URLs, a concrete model choice ("model sonnet"), an enumerated brief contents list, a specified report format, and a precise import path for safeAuthCallbackReport. For an instruction-only skill this is copy-paste-ready guidance covering the common cases, matching anchor 5.

5 / 5

Workflow Clarity

"When to run which" gives explicit decision points, the agent-driven test is a clear spawn → brief → run → report sequence, and the sign-in safety section supplies explicit stop-condition checkpoints ("Stop before selecting an account when neither fact can be proved") with per-story verdicts (passed / failed / passed-with-friction). Falls short of anchor 5 only in feedback loops: there is no stated path for what to do after a failed verdict (e.g., re-run after fix or file an issue), leaving a minor validation gap at anchor 4.

4 / 5

Progressive Disclosure

Well-sectioned body with clearly signaled one-level-deep references ([stories.md], docs/philosophy.md, reader-completion-checks.md, the GitHub issue) and no nested reference chains. The bulk story content is correctly split out to stories.md, but the long inline sign-in safety section and inline field-name list are content that anchor 5 would place in a separate reference, so anchor 4 (good structure, minor organization gaps) is the best fit.

4 / 5

Total

17

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person, concrete, and comprehensive on capabilities, with an explicit when-clause containing quoted natural trigger phrases. Its only weakness is that trigger coverage, while good, is not exhaustive of the phrasings a user might naturally use.

DimensionReasoningScore

Specificity

Lists multiple concrete actions covering the skill's full scope: "Run an end-to-end browser test", "Spawns a FRESH-context agent on a cheap model", "drives the running app through a browser in scripted user stories or free exploration", "reports what breaks", plus owning Playwright checks and story-to-spec graduation. This matches the comprehensive-coverage anchor; the level-below anchor (minor gaps in coverage) doesn't fit since every capability of the skill is named.

5 / 5

Completeness

Explicitly answers both questions: what ("Spawns a FRESH-context agent… drives the running app… reports what breaks. Also owns the on-demand Playwright checks") and when ("after a feature lands, on demand ('browser-test this', 'drive the app', 'test it like a user'), or before calling frontend work done") with concrete trigger phrases — a direct match for the anchor-5 pattern. Not 4, because the 'when' is already explicit and specific rather than needing more detail.

5 / 5

Trigger Term Quality

Includes quoted natural trigger phrases users would actually say — "browser-test this", "drive the app", "test it like a user" — plus "end-to-end", "Playwright", and "just e2e". Good keyword coverage, but a few natural variations (e.g., "click around", "smoke test", "try the frontend") are missing, so it fits anchor 4 rather than the comprehensive-synonyms anchor 5; it is clearly above anchor 3 because multiple common variations are present.

4 / 5

Distinctiveness Conflict Risk

Clear niche: product-specific ("browser test of Alethical"), with distinctive quoted triggers ("browser-test this", "drive the app") that no generic testing skill would claim. Minimal conflict risk; anchor 4's "minor overlap risk" would require ambiguity with closely related skills, which the product naming and fresh-context framing avoid.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 3 missing, 1 suspicious

Warning

Total

15

/

16

Passed

Repository

alethical-org/alethical

Path

.claude/skills/browser-user-test/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.