Skip to content
Back to skills

Quality Engineering Business Analysis

ASecurity

Before writing test cases, perform this impact analysis: - Confirm the rule: invoice download button is visible/enabled only for `Market: VN`; `MY` and `SG` must not show it. - Identify the `Actor` and permissions: customer, sales representative, admin, or other roles. Verify whether access differs by role. - Identify the market `Variable`: user profile market, invoice/order market, account configuration, or feature-flag configuration. Test mismatches between these values. - Check platform pa...

  • 549 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 5, 2026
developmentapibackend

Works with

  • api

Security analysis

A100/100

Pro scans all 19 files and shows the line behind each finding

Scanned September 5, 2026

npx -y skills add HoangNguyen0403/agent-skills-standard --skill quality-engineering-business-analysis --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Quality Engineering Business Analysis?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Quality Engineering Business Analysis
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/hoangnguyen0403-quality-engineering-business-analysis-8745580c/badge)](https://www.skillsdirectory.com/skills/hoangnguyen0403-quality-engineering-business-analysis-8745580c)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
Before writing test cases, perform this impact analysis:

- Confirm the rule: invoice download button is visible/enabled only for `Market: VN`; `MY` and `SG` must not show it.
- Identify the `Actor` and permissions: customer, sales representative, admin, or other roles. Verify whether access differs by role.
- Identify the market `Variable`: user profile market, invoice/order market, account configuration, or feature-flag configuration. Test mismatches between these values.
- Check platform parity: verify behavior on `WEB`, `Mobile`, or `[BOTH]`; do not assume the same implementation or visibility rules.
- Identify feature toggles: document the flag name and expected behavior for both `Toggle: <FlagName> = ON` and `OFF`.
- Map the invoice lifecycle: invoice available, pending, failed, cancelled, missing, already downloaded, and unauthorized invoice. Determine whether the button is hidden, disabled, or shown with an error.
- Check backend/API impact: confirm whether non-VN users are also blocked server-side, not merely prevented from seeing the button.
- Analyze locale and translation separately: VN language/locale, English, and other supported locales must not change the market rule or produce missing labels.
- Cover state and network behavior: loading, offline, timeout, API error, and session expiry.
- Build a Truth table for at least:

| Market | Invoice downloadable | Expected button |
|---|---:|---|
| VN | Yes | Visible and enabled |
| VN | No | Defined explicitly: hidden, disabled, or unavailable state |
| MY | Yes | Hidden/blocked |
| SG | Yes | Hidden/blocked |
| Unknown/null | Any | Defined explicitly; do not assume VN |

Finally, record undefined behavior as analysis blockers and separate it into `In Scope`, `Out of Scope`, or `Deferred` with a Jira reference.

Files in this skill

  • eval-1.baseline.md2.9 KB
  • eval-1.with-skill.md4.2 KB
  • eval-2.baseline.md298 B
  • eval-2.with-skill.md360 B
  • eval-3.baseline.md1.7 KB
  • eval-3.with-skill.md1.8 KB
  • eval-4.baseline.md738 B
  • eval-4.with-skill.md2.1 KB
  • eval-5.baseline.md1.1 KB
  • eval-5.with-skill.md2 KB
  • eval-6.baseline.md789 B
  • eval-6.with-skill.md1.2 KB
  • trigger-1.md165 B
  • trigger-2.md211 B
  • trigger-3.md123 B
  • trigger-4.md181 B
  • trigger-5.md221 B
  • trigger-6.md201 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…