← ClaudeAtlas

preview-testinglisted

Comprehensive E2E + Security Tests for Vercel Preview Deployments. Combines Playwright automation with Claude-in-Chrome MCP for interactive debugging. Activate on PR creation, before merge, or manual /preview-test.
freitasp1/claude-code-skills · ★ 8 · Testing & QA · score 68
Install: claude install-skill freitasp1/claude-code-skills
# Preview Testing > Comprehensive E2E + Security Tests for Vercel Preview Deployments ## Trigger This skill activates on: - `/preview-test` - Manual invocation - After PR creation against `main` or `develop` - Before merge for production approval ## Features | Feature | Duration | Description | | ------------------ | -------- | ----------------------------------------------- | | Smoke Tests | <2min | Critical user flows (Login, Upload, Analysis) | | Visual Regression | <3min | Screenshot comparison with 1% tolerance | | Security Tests | <5min | OWASP LLM01, Quota Bypass, Stripe Webhook | | DSGVO Region Check | <30s | Verifies Frankfurt (fra1) region | | npm audit | <1min | Dependency vulnerability scan | ## Usage ```bash # Standard: Smoke + Visual + Security /preview-test # Security tests only /preview-test --security # With AI Exploratory Testing (optional) /preview-test --ai ``` ## Security Tests (OWASP LLM Top 10 2025) ### Prompt Injection (LLM01) - CRITICAL - Direct Injection (Jailbreaks, DAN, Role Manipulation) - System Prompt Extraction Prevention - Context Hijacking via Fake History - Indirect Injection via File Upload - Multi-Language Bypass Attempts **File:** `tests/security/prompt-injection.spec.ts` ### Quota Bypass - CRITICAL (Cost Risk) - API Authentication Bypass - Email Spoofing Prevention - Demo Mode Abuse - Race C