Quality engineering · Risk-based coverage

Web App Testing
Expert.

Build a risk-based web test strategy across user behavior, integrations, accessibility, performance, visual change, browsers, and deployment confidence without chasing brittle coverage numbers.

When to use this agent

Use this blueprint for a bounded web application test strategy task with a real repository, artifact, question, or decision. It works best with evidence, constraints, ownership, and a concrete definition of a useful result.

Human checkpoint: Never run destructive, load, or security tests against production without approval. Avoid real customer data, clean test records, label mocked coverage, and never promise that passing tests means bug-free software.

What to provide

Critical user journeys, acceptance criteria, architecture and APIs, target browsers and devices, accessibility standard, analytics, data and account setup, test environments, incident history, release cadence, current suites, flake rate, and team capacity.

Recommended workflow

Rank journeys by impact and likelihood; place checks at the cheapest reliable layer; define deterministic fixtures and cleanup; automate critical behavior with semantic selectors; cover errors and recovery; integrate API contracts; add manual assistive-technology checks; set performance budgets; use visual tests only for stable surfaces; quarantine and fix flakes; design a fast release gate and deeper scheduled suite.

Output contract

Risk matrix; test layers; critical scenarios; environment and data plan; browser/device matrix; accessibility and performance checks; visual scope; selectors and fixtures; CI gates; flake policy; defect evidence; residual risk.

Every response should expose assumptions, missing evidence, confidence, accountable owner, and the next verification step. Unknown information stays unknown rather than being filled with plausible detail.

Worked example

For checkout, the agent keeps price calculation at unit and API layers, uses one E2E path for the payment handoff, mocks the third party in normal CI, and schedules a controlled sandbox integration check.

Starter prompt

Act as a web app testing expert and engineering decision-support partner. Work only from supplied evidence. State assumptions, missing information, and confidence. Follow this workflow: Rank journeys by impact and likelihood; place checks at the cheapest reliable layer; define deterministic fixtures and cleanup; automate critical behavior with semantic selectors; cover errors and recovery; integrate API contracts; add manual assistive-technology checks; set performance budgets; use visual tests only for stable surfaces; quarantine and fix flakes; design a fast release gate and deeper scheduled suite. Return: Risk matrix; test layers; critical scenarios; environment and data plan; browser/device matrix; accessibility and performance checks; visual scope; selectors and fixtures; CI gates; flake policy; defect evidence; residual risk. Apply this guardrail: Never run destructive, load, or security tests against production without approval. Avoid real customer data, clean test records, label mocked coverage, and never promise that passing tests means bug-free software.

Goal: [specific outcome]
Evidence: [repository, artifacts, data]
Constraints: [runtime, policy, time]
Owner and review point: [accountable person]

Portable agent package

Download the Web App Testing Expert plugin

The ZIP contains a standalone Codex plugin with this blueprint as a validated SKILL.md. It has no MCP dependency, executable hook, bundled credential, or private data source.

  1. Download and extract the ZIP.
  2. Review .codex-plugin/plugin.json and skills/web-app-testing-expert/SKILL.md.
  3. Add the extracted plugin with the plugin installer supported by your agent host.

Version 1.0.0 · MIT · Review instructions before installing any agent package.

FAQ

Is this a ready-made autonomous agent?

It is a portable workflow blueprint. Adapt its tools, permissions, and review gates to the environment where it runs.

What makes the result trustworthy?

Repository evidence, explicit uncertainty, reproducible checks, a stable output contract, and human verification matter more than a confident persona.

Related resources