validkeys/sherpy

qa-test-plan

Generates a structured QA test plan from business-requirements.yaml and technical-requirements.yaml.

First seen Mar 26, 2026

Installation

$ npx skills add validkeys/sherpy --skill qa-test-plan

Summary

  • Generates a structured QA test plan from business-requirements.yaml and technical-requirements.yaml.
  • Produces test suites keyed to functional requirements and user personas, covering positive, negative, edge, security, and performance cases.
  • Outputs qa-test-plan.yaml ready for use in delivery timeline QA phases.

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

Also in this package

Other skills from validkeys/sherpy · top by installs.

npx skills add validkeys/sherpy

Browse all from validkeys/sherpy

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1
License LICENSE
Default branch main
Open issues 1
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 6,690 B
  • docs SUMMARY.md 333 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 89 installs

SKILL.md

QA Test Plan

Generates a structured QA test plan from completed requirements artifacts. Produces test suites that map directly to business requirements and user personas so QA teams know exactly what to test during each delivery timeline QA round.

Prerequisites

  • {base_directory}/requirements/business-requirements.yaml (output from /business-requirements-interview)
  • {base_directory}/requirements/technical-requirements.yaml (output from /technical-requirements-interview)

Usage

/qa-test-plan [base-directory]

If no directory is provided, auto-detect by looking for requirements/business-requirements.yaml in the current directory.

If not found, prompt the user: "Where are your requirements documents located?"

Wait for the user to provide a path before proceeding. Store as base_directory.

Process

Step 1: Determine Base Directory and Load Requirements

If no directory parameter was provided, check if requirements/business-requirements.yaml exists in the current directory.

  • If found, use current directory as base_directory
  • If not found, prompt: "Where are your requirements documents located?" and wait for user response

Once basedirectory is determined, read both requirements files from {basedirectory}/requirements/. Extract:

From business-requirements.yaml:

  • Functional requirements and user stories
  • User personas and their primary use cases
  • Success criteria and metrics
  • Known constraints and edge conditions

From technical-requirements.yaml:

  • API surface (endpoints, inputs, outputs)
  • Authentication and authorization model
  • Non-functional requirements (performance targets, uptime SLAs)
  • Data model constraints (required fields, uniqueness, formats)
  • Security requirements

Step 2: Identify Test Suites

Group test coverage into suites. Each suite maps to a coherent functional area (not to individual milestones). Derive suites directly from the requirements — do not invent features not present in the source documents.

Standard suite categories to consider (include only those applicable):

Category Driven by
Authentication Auth model in technical requirements
Core User Flows User personas + functional requirements
Data Validation Data model constraints
API Contract API design in technical requirements
Permissions & Roles Authorization model
Error Handling Edge cases in requirements + API error states
Performance Non-functional performance targets
Security Security requirements
Integration External dependencies in technical requirements

Step 3: Generate Test Cases per Suite

For each suite, write test cases covering:

  • Positive — happy path, expected successful outcomes
  • Negative — invalid inputs, unauthorized access, missing required fields
  • Edge — boundary values, empty states, concurrent operations, large payloads
  • Security — injection, unauthorized access escalation, token/session misuse
  • Performance — response time under expected load (only when targets are specified)

Each test case must include:

  • id — unique, scoped to suite (e.g. tc-auth-001)
  • name — plain-language description of what is being tested
  • typepositive | negative | edge | security | performance
  • priorityhigh | medium | low

- high: covers a success criterion or a named persona's primary use case - medium: covers a secondary flow or validation rule - low: covers an edge/corner case unlikely to affect typical users

  • preconditions — system state required before executing the test
  • steps — numbered, concrete actions
  • expected_result — specific, verifiable outcome
  • requirement_refs — IDs of the business/technical requirements this case validates
  • tags — optional labels for filtering (e.g. [smoke, regression, auth])

Step 4: Compute Coverage

Calculate coverage metrics:

  • Functional coverage — percentage of named functional requirements with at least one high-priority test case
  • Persona coverage — percentage of user personas whose primary use case has a positive test case
  • Non-functional coverage — boolean per NFR category (performance, security, etc.) — at least one test case exists

Flag any functional requirement with no test case as a coverage gap.

Step 5: Generate qa-test-plan.yaml

Write {base_directory}/delivery/qa-test-plan.yaml.

Create directory if it doesn't exist:

mkdir -p {base_directory}/delivery

Step 6: Gap Analysis

After generating the file, report inline:

## QA Test Plan Gap Analysis

**Project:** [name]
**Test Suites:** [n]
**Total Test Cases:** [n] ([n] high / [n] medium / [n] low)
**Functional Coverage:** [n]% ([n]/[n] requirements have high-priority cases)
**Persona Coverage:** [n]% ([n]/[n] personas covered)

**NFR Coverage:**
[✓ / ✗] Performance tests present
[✓ / ✗] Security tests present
[✓ / ✗] Integration tests present

**Gaps:**
- [requirement or persona with no coverage, if any]

**Recommendations:** [none / list]

Output Format

qa-test-plan.yaml Schema

The output document includes: version, project, generated, sources (reference file paths), summary (test counts by priority, coverage metrics), and testsuites (each with id (ts-slug), name, description, requirementrefs, and testcases). Each test case has: id (tc-suite-nnn), name, type (positive/negative/edge/security/performance), priority (high/medium/low), preconditions, steps, expectedresult, requirement_refs, and optional tags.

See [references/output-spec.md](references/output-spec.md) for the complete document specification with all fields, coverage calculation rules, and test case structure.

See [references/example.yaml](references/example.yaml) for a full example.

Example Output

See [references/example.yaml](references/example.yaml) for a complete sample QA test plan.