Build a risk-based test plan
Map user journeys, business impact, change risk, integrations, data, permissions, devices, and failure modes to appropriate coverage.
Codex Skills for QA Engineers give Codex a risk-based process for understanding product behavior, designing test coverage, creating reliable automation, investigating failures, checking APIs and data, and reporting defects clearly. Download the skills for quality work that protects important user journeys without filling the suite with brittle tests.
task: complete software quality engineering task
inspect:
- requirements and context
- existing standards
- failure and edge cases
verify: outputs + checks + handoffQuality engineering starts with product risk, system boundaries, data, environments, and observable behavior. Automation should provide fast, trustworthy information rather than merely increase test counts.
These skills help Codex plan coverage across unit, integration, API, UI, exploratory, accessibility, performance, and release testing.
Map user journeys, business impact, change risk, integrations, data, permissions, devices, and failure modes to appropriate coverage.
Test user-visible behavior, isolate data and state, use stable locators and contracts, avoid arbitrary waits, and capture useful failure evidence.
Validate API contracts, status and error behavior, authorization, schemas, persistence, idempotency, and downstream effects.
Reproduce failures, separate product bugs from environment or test issues, record evidence, assess impact, and write actionable reports.
The steps keep context, implementation, and verification visible so the result can be reviewed and repeated.
Identify critical workflows, recent changes, users, environments, integrations, compliance needs, and the cost of each failure.
Place checks at the lowest useful level, reserve end-to-end tests for important journeys, and include exploratory charters.
Control preconditions, isolate tests, use meaningful assertions, avoid external instability, and make failures diagnosable.
Analyze failures, remove flakiness at the cause, track escaped defects, and adjust coverage as the product changes.
The workflow adjusts to the project, audience, tools, and risk while preserving the same quality standard.
Test journeys, forms, navigation, responsive behavior, accessibility, devices, browsers, networks, and application states.
Verify contracts, permissions, validation, errors, data effects, concurrency, retries, and service integrations.
Run fast reliable checks on changes, shard larger suites, retain traces and reports, and block only on trusted signals.
Combine targeted regression, exploratory testing, migration checks, environment verification, and post-release smoke tests.
Start with one defined outcome and provide the source material, constraints, and checks that matter.
These skills are designed for people who need dependable software quality engineering work with a visible process.
Plan coverage, automate important behavior, investigate failures, and communicate product risk.
Build maintainable suites, fixtures, data, reports, CI execution, and debugging workflows.
Add suitable tests with features and diagnose failures before changes reach reviewers or users.
Standardize risk assessment, coverage, environments, defect severity, release evidence, and quality reporting.
The skills support quality engineering but cannot prove a system has no defects. Release confidence still depends on product knowledge, representative environments, human exploration, security testing, and responsible risk decisions.
Install the complete skill folder and add the project-specific context before beginning.
Keep SKILL.md with strategy, automation, API, exploratory, accessibility, and triage guidance.
Use project scope for product risks and environments, or personal scope for reusable QA methods.
Add critical journeys, supported platforms, architecture, test levels, data rules, environments, defect severity, and release gates.
List approved commands, accounts, seed data, service mocks, CI expectations, and protected environments.
Practical answers about capabilities, limits, setup, and review.
Yes. They can use the project's test framework and favor user-visible behavior, isolated state, stable selectors, and useful assertions.
Yes. They can create focused scenarios, exploratory charters, boundary tables, device matrices, and release checklists.
Yes. They can validate contracts, authentication, authorization, schemas, errors, data changes, retries, and idempotency.
They remove fixed waits, isolate state, control data and dependencies, use retrying assertions, and diagnose environmental instability.
They can summarize evidence and risk, but accountable product and engineering owners make the release decision.
Clear context. Purposeful work. Relevant checks. A result others can understand.