# QA Manual Istqb

> Create QA artifacts from requirements: test plans, test conditions/cases, bug reports, regression suites, traceability, and exploratory charters. Use for test planning, test design, defects, coverage, or QA deliverables. Applies ISTQB risk-based techniques and loads templates only when needed. Keywords: test plan, test case, bug report, traceability, regression suite, QA artifact.

- Skill: `gabrielmoreira/qa-manual-istqb` (Agent Skill, multi-file: 28 files)
- Install (CLI): `npx skillmds@latest add gabrielmoreira/qa-manual-istqb`
- Raw SKILL.md: https://api.skillmd.com/api/skills/gabrielmoreira/qa-manual-istqb/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Docs & Writing
- License: Complete terms in LICENSE.txt
- Author: gabrielmoreira (https://skillmd.com/u/gabrielmoreira)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/gabrielmoreira/qa-manual-istqb

---


# QA Test Design & ISTQB Artifacts

Complete ISTQB Foundation Level (CTFL) aligned workflow for QA test engineers covering:
**Test Planning → Test Analysis → Test Design → Test Implementation → Test Execution → Test Completion**

## When to Use This Skill

- Drafting ready-to-fill QA deliverables from requirements, user stories, or acceptance criteria
- Creating or reviewing **test plans** and **test strategies**
- Generating **test conditions** and **test cases** from requirements
- Applying **test design techniques** (EP, BVA, decision tables, state transitions, use cases)
- Writing **bug reports** and managing **defect lifecycle**
- Building **regression suites** with risk-based selection
- Creating **traceability matrices** (requirements ↔ tests ↔ defects)
- Conducting **exploratory testing** sessions with charters
- Estimating test effort using ISTQB techniques
- Reviewing testware through **static testing** practices
- Selecting automation candidates and preparing traceable Playwright scaffolds

### Do NOT Use For

- Authoring/maintaining versioned Playwright spec code (use `playwright-e2e-testing`).
- Selenium/Java test authoring (use `webapp-selenium-testing`).
- Driving a live browser to debug (use `playwright-cli`) or governing an existing regression suite's CI (use `playwright-regression-testing`).
- Adversarial strategy critique — that is the `grill-me-qa` skill's purpose; this skill produces artifacts, it does not interrogate them.

## Prerequisites

| Requirement | Notes                                           |
| ----------- | ----------------------------------------------- |
| Node.js 18+ | Required for CLI script and Playwright          |
| Playwright  | `npm init playwright@latest` for automation     |
| Text editor | For creating/editing markdown and CSV artifacts |
| Git         | Recommended for testware version control        |

## Quick Start (choose one)

- Create a test plan: use `templates/test-plan.md` as a starting point.
- Create a test summary report: use `templates/test-summary-report.md`.
- Generate test cases: use `templates/test-cases.csv` and fill it from the test basis (requirements, user stories, acceptance criteria).
- Create a bug report: use `templates/bug-report.md`.
- Create a bug log: use `templates/bug-log.csv`.
- Create traceability: use `templates/traceability-matrix.csv`.
- Build a regression suite definition: use `templates/regression-suite.md`.
- Scaffold Playwright tests: use `templates/playwright-spec.ts` and adapt to the system under test.
- Run exploratory testing: use `templates/exploratory-charter.md` to timebox and capture outcomes.

If running locally, generate artifacts with the bundled CLI:

```bash
node scripts/qa_artifacts.mjs list
node scripts/qa_artifacts.mjs create test-plan --out specs --project "My App" --release "R1"
node scripts/qa_artifacts.mjs create test-cases --out specs --feature "Checkout"
node scripts/qa_artifacts.mjs create bug-report --out specs/bugs --title "Search returns 500"
```

## Inputs to collect (ask if missing)

- **Test basis**: requirements, user stories, acceptance criteria, designs, risk register, defect history.
- **Scope**: in-scope/out-of-scope features, target platforms/browsers/devices, locales, accessibility, integrations.
- **Quality risks**: what can fail, impact, likelihood, regulatory/compliance, critical user journeys.
- **Constraints**: deadlines, environments, data availability, tooling, access/roles, CI/CD expectations.
- **Definitions**: severity vs priority scale, test levels and test types to cover, entry/exit criteria.

## Workflows

### 1) Create a test plan (and/or test strategy)

1. Identify test objectives, scope, assumptions, and constraints from the test basis.
2. Define test levels and types (functional + change-related + key non-functional, as applicable).
3. Choose test design techniques per area (see `references/test-design-techniques.md`).
4. Specify environments, test data, tooling, and configuration management needs.
5. Define entry/exit criteria, deliverables, and reporting cadence/metrics.
6. Add a risk matrix and mitigation actions; prioritize testing accordingly (risk-based testing).

Use: `templates/test-plan.md` (detailed sections + checklists).

### 2) Generate test conditions and test cases

1. Convert the test basis into **test conditions** (what to test) before writing step-by-step cases.
2. For each condition, pick a technique:
   - Equivalence partitions and boundary values for inputs/validation.
   - Decision tables for rule combinations.
   - State transitions for lifecycle/flows.
   - Use-case/scenario tests for end-to-end journeys.
   - Exploratory testing sessions to learn quickly (see `templates/exploratory-charter.md`).
3. Write test cases that are atomic, unambiguous, and traceable to requirement/user story IDs.
4. Add expected results that are observable and measurable (define the test oracle).
5. Add priority and risk tags to support risk-based regression selection.
6. Mark automation candidates using stability + value criteria (see `references/automation-playwright-best-practices.md`).

Use: `templates/test-cases.csv`.

### 3) Prepare automation candidates and Playwright scaffolds

1. Select candidates using stability, value, and risk criteria (see `references/automation-playwright-best-practices.md`).
2. Create a traceable scaffold from `templates/playwright-spec.ts`, including the test case ID and suite tags.
3. Use `playwright-e2e-testing` to implement and maintain the versioned UI spec, fixtures, and test infrastructure.

### 4) Build and maintain regression suites

1. Define suite tiers (example): smoke (critical paths), sanity (build verification), regression (broad), full (release).
2. Select tests using risk + frequency + criticality + defect history (not only coverage).
3. Tag tests consistently and document selection rules and ownership.
4. Review the suite regularly: remove obsolete coverage, add coverage for escaped defects and high-risk changes.

Use: `templates/regression-suite.md` and `references/regression-suite-strategy.md`.

### 5) Create bug reports and document bugs effectively

1. Reproduce reliably; reduce to minimal steps; note variability (frequency) and scope.
2. Capture environment details (build/app version, OS, browser/device, account/role, data conditions).
3. Describe expected vs actual behavior; include impact; set severity and priority consistently.
4. Attach evidence (screenshots, console logs, network traces, Playwright trace) and link related tests/requirements.
5. Track lifecycle: triage notes, owner, fix version, verification steps and results, closure criteria.

Use: `templates/bug-report.md` and `references/bug-report-quality.md`.

### 6) Conduct static testing (reviews)

1. Schedule reviews early (shift-left): requirements, designs, test plans, test cases.
2. Use checklists for consistency (see `references/static-testing.md`).
3. Document findings with severity and actionability.
4. Track defects found in static testing separately (prevention vs detection).

Use: `references/static-testing.md` for review checklists and techniques.

### 7) Estimate test effort

1. Identify factors: scope, complexity, risk, team experience, tool maturity.
2. Apply estimation techniques (see `references/test-estimation.md`):
   - Expert judgment / historical data
   - Test point analysis
   - Work breakdown structure
3. Add contingency for risks and unknowns.
4. Review and refine estimates as the project progresses.

Use: `references/test-estimation.md` for techniques and formulas.

### 8) Monitor test progress and metrics

1. Track execution metrics: planned vs executed vs passed vs failed vs blocked.
2. Monitor defect metrics: found vs fixed vs open, by severity/priority.
3. Calculate test coverage: requirements covered, risk areas tested.
4. Report status regularly and escalate blockers early.

Use: `references/test-monitoring-metrics.md` for metrics definitions and dashboards.

## Quality Gates (self-check)

- **Test plan** includes scope, approach, risks, environments, entry/exit criteria, deliverables, and metrics.
- **Test cases** are traceable, atomic, deterministic, and include clear oracles and data.
- **Automation** is maintainable (stable locators, minimal flake, independent tests, clear assertions).
- **Regression** is risk-based, tagged, and curated with clear add/remove rules.
- **Bug reports** are reproducible, actionable, and contain evidence + environment + impact.
- **Static testing** reviews are documented with findings tracked to resolution.
- **Estimates** include contingency and are refined as scope clarifies.

## Troubleshooting

| Problem                      | Cause                             | Solution                                                      |
| ---------------------------- | --------------------------------- | ------------------------------------------------------------- |
| Test cases lack traceability | Missing requirement IDs           | Add `requirement_id` column; link to user stories/ACs         |
| Bug reports get rejected     | Insufficient reproduction steps   | Use minimal steps; include exact data and environment         |
| Regression suite too slow    | Too many tests, no prioritization | Apply risk-based selection; tier into smoke/sanity/full       |
| Flaky automated tests        | Unstable locators or timing       | Use `data-testid`; avoid sleeps; use Playwright auto-waits    |
| Test estimates are wrong     | Scope creep, missing risks        | Add contingency; re-estimate when scope changes               |
| Reviews find no defects      | Superficial review                | Use checklists; allocate sufficient time; rotate reviewers    |
| Unclear test oracles         | Missing expected results          | Define oracles from requirements, rules, or reference systems |

## Bundled Resources

### Templates (`templates/`)

| Template                        | Purpose                                        |
| ------------------------------- | ---------------------------------------------- |
| `test-plan.md`                  | ISTQB-aligned test plan structure              |
| `test-summary-report.md`        | End-of-cycle summary and sign-off              |
| `test-cases.csv`                | Test case repository with traceability         |
| `test-conditions.md`            | Test conditions derived from test basis        |
| `traceability-matrix.csv`       | Requirements ↔ tests ↔ defects mapping         |
| `bug-report.md`                 | Detailed defect report                         |
| `bug-log.csv`                   | Defect tracking log                            |
| `regression-suite.md`           | Suite definition and selection rules           |
| `exploratory-charter.md`        | Session-based exploratory testing              |
| `playwright-spec.ts`            | Playwright test scaffold                       |
| `test-environment-checklist.md` | Environment readiness verification             |
| `risk-assessment-matrix.md`     | Quality risk identification and prioritization |

### References (`references/`)

| Reference                                 | Content                                                           |
| ----------------------------------------- | ----------------------------------------------------------------- |
| `test-design-techniques.md`               | EP, BVA, decision tables, state transitions, use cases            |
| `experience-based-techniques.md`          | Error guessing, checklist-based, exploratory                      |
| `static-testing.md`                       | Reviews, walkthroughs, inspections                                |
| `test-levels-types.md`                    | Unit, integration, system, acceptance; functional, non-functional |
| `test-estimation.md`                      | Estimation techniques and factors                                 |
| `test-monitoring-metrics.md`              | Progress tracking and quality metrics                             |
| `risk-based-testing.md`                   | Risk identification, analysis, mitigation                         |
| `istqb-glossary.md`                       | Key ISTQB terminology                                             |
| `test-process-and-deliverables.md`        | Test process phases and outputs                                   |
| `automation-playwright-best-practices.md` | Playwright implementation guidance                                |
| `regression-suite-strategy.md`            | Suite management and optimization                                 |
| `bug-report-quality.md`                   | Effective defect reporting                                        |
| `defect-lifecycle.md`                     | Defect states and workflow                                        |

### Scripts (`scripts/`)

| Script             | Purpose                                          |
| ------------------ | ------------------------------------------------ |
| `qa_artifacts.mjs` | CLI tool to generate QA artifacts from templates |

---

## Red Flags

- Generating test cases with no link back to a requirement or risk — untraceable coverage is theatre.
- Bug reports missing repro steps, expected vs actual, or environment — unusable for developers.
- Regression suites selected by gut feel instead of risk/change analysis — wasted effort and missed regressions.
- Test plans with no entry/exit criteria or effort estimate — execution cannot be governed.
- Confusing this artifact-producing skill with strategy critique (use `grill-me-qa` for adversarial review).

---

## Verification

- [ ] **Test cases follow ISTQB structure** — Each case has: ID, description, preconditions, steps, expected result (actual result populated after execution)
- [ ] **Coverage matrix maintained** — Requirements mapped to test cases; no uncovered requirements
- [ ] **Traceability maintained** — Each test case links to a requirement or user story