Back to Skills

qa-only

Report-only QA testing. Systematically tests a web application and produces a structured report with health score, screenshots, and repro steps — but never fixes anything. Use when asked to "just report bugs", "qa report only", or "test but don't fix". For the full test-fix-verify loop, use /qa instead. Proactively suggest when the user wants a bug report without any code changes.

28,165stars3,385forksUpdated 3/20/2026

Security Assessment

Low Risk(75/100)

Detected risks:

Remote Code Execution([SKILL.md] curl -fsSL https://bun.sh/install | bash)
Security Score75/100

About qa-only

The qa-only skill is a report-only quality assurance testing workflow for web applications. It is designed for situations where the goal is to test an application, identify issues, and produce a structured QA report without making any code changes or fixes. This makes it appropriate when a user explicitly wants bug reporting only, such as requests to "just report bugs," "qa report only," or "test but don't fix." The skill focuses on documenting the current health of the application rather than resolving defects, which helps teams separate testing from remediation.

Its documented capabilities include systematically testing a web application and producing a structured report. That report includes a health score, screenshots, and reproducible steps for identified issues. The skill also includes behavior controls tied to its runtime preamble, such as respecting a configuration that disables proactive skill suggestions unless the user explicitly asks. In addition, the skill includes setup and onboarding behaviors related to upgrade handling, a one-time completeness-principle introduction, and a one-time telemetry preference prompt. These operational steps are part of how the skill is run, but the core functional outcome remains QA reporting only, with no fixing behavior.

This skill is intended for users who need a formal bug report without any code modifications, including developers, QA engineers, reviewers, or project stakeholders who want an assessment of application quality. It is especially useful in workflows where testing and fixing are intentionally separated, or where a user wants documentation of issues before deciding on remediation. When a full test-fix-verify loop is needed instead, the content explicitly directs users to use /qa rather than qa-only.

FAQ

What does the qa-only skill produce?

It produces a structured QA report for a web application, including a health score, screenshots, and reproduction steps for issues it finds.

Does this skill fix bugs or make code changes?

No. The skill is explicitly report-only and never fixes anything.

When should I use qa-only instead of /qa?

Use qa-only when you want testing and bug reporting without any fixes. For a full test-fix-verify workflow, the content says to use /qa instead.

What kind of application is this skill intended to test?

Based on the provided content, it is intended for web applications.

Are there any configuration-dependent behaviors in this skill?

Yes. The content describes runtime behaviors such as respecting a proactive-suggestions setting, handling upgrade notifications, showing a one-time completeness-principle introduction, and prompting once for telemetry preferences.

Install qa-only

Download and extract the skill files to your .claude/skills/ directory.

Quick Setup:

  1. Copy the skill folder to .claude/skills/
  2. Claude will automatically detect and use the skill

Repository

garrytan/gstack