agentic-qe 3.4.1 → 3.4.3

package/.claude/skills/.validation/test-data/invalid-output.json

@@ -0,0 +1,5 @@
+{
+  "skillName": "invalid-sample",
+  "status": "invalid-status",
+  "output": null
+}

package/.claude/skills/.validation/test-data/minimal-output.json

@@ -0,0 +1,9 @@
+{
+  "skillName": "minimal-skill",
+  "version": "1.0.0",
+  "timestamp": "2026-02-02T12:00:00Z",
+  "status": "success",
+  "output": {
+    "summary": "Minimal valid output for testing basic validation."
+  }
+}

package/.claude/skills/.validation/test-data/sample-output.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "https://agentic-qe.dev/schemas/skill-output-template.json",
+  "skillName": "sample-skill",
+  "version": "1.0.0",
+  "timestamp": "2026-02-02T12:00:00Z",
+  "status": "success",
+  "trustTier": 2,
+  "output": {
+    "summary": "Sample skill execution completed successfully. This is a demonstration output for validator self-testing.",
+    "findings": [
+      {
+        "id": "FINDING-001",
+        "title": "Sample Finding",
+        "description": "This is a sample finding to demonstrate the output structure. In a real skill, this would contain actual analysis results.",
+        "severity": "medium",
+        "category": "demonstration",
+        "location": {
+          "file": "src/example.ts",
+          "line": 42
+        },
+        "evidence": "Example code snippet showing the issue"
+      },
+      {
+        "id": "FINDING-002",
+        "title": "Another Sample Finding",
+        "description": "A second sample finding showing multiple findings can exist.",
+        "severity": "low",
+        "category": "demonstration"
+      }
+    ],
+    "recommendations": [
+      {
+        "id": "REC-001",
+        "title": "Implement Best Practice",
+        "description": "Consider implementing this best practice to improve code quality.",
+        "priority": "medium",
+        "effort": "low",
+        "relatedFindings": ["FINDING-001"]
+      }
+    ],
+    "metrics": {
+      "totalIssues": 2,
+      "criticalCount": 0,
+      "highCount": 0,
+      "mediumCount": 1,
+      "lowCount": 1,
+      "score": 85.5,
+      "passRate": 0.95
+    },
+    "artifacts": [
+      {
+        "type": "report",
+        "path": "reports/sample-report.html",
+        "format": "html",
+        "description": "Detailed HTML report with findings"
+      }
+    ]
+  },
+  "metadata": {
+    "executionTimeMs": 1250,
+    "toolsUsed": ["eslint", "typescript", "custom-analyzer"],
+    "agentId": "qe-test-architect",
+    "modelUsed": "claude-sonnet-4",
+    "inputHash": "sha256:abc123def456",
+    "parentTaskId": "task-789"
+  },
+  "validation": {
+    "schemaValid": true,
+    "contentValid": true,
+    "confidence": 0.95,
+    "warnings": []
+  }
+}

package/.claude/skills/README.md

@@ -1,50 +1,141 @@
 # AQE Skills Index
 
-This directory contains Quality Engineering skills installed by `aqe init`.
-
-> **Note**: Claude Flow platform skills (agentdb, n8n, github, flow-nexus, etc.) are managed
-> separately by the claude-flow package. This directory contains only QE-specific skills.
+This directory contains Quality Engineering skills managed by Agentic QE.
 
 ## Summary
 
-- **Total Skills**: 1
-- **V2 Methodology Skills**: 0
-- **V3 Domain Skills**: 1
+- **Total QE Skills**: 63
+- **V2 Methodology Skills**: 49
+- **V3 Domain Skills**: 14
+- **Platform Skills**: 34 (Claude Flow managed)
+- **Validation Infrastructure**: ✅ Installed
 
-## V2 Methodology Skills (0)
+> **Note**: Platform skills (agentdb, github, flow-nexus, etc.) are managed by claude-flow.
+> Only QE-specific skills are installed/updated by `aqe init`.
 
-Version-agnostic quality engineering best practices from the QE community.
+## V2 Methodology Skills (49)
 
-*None installed*
+Version-agnostic quality engineering best practices from the QE community.
 
-## V3 Domain Skills (1)
+- **a11y-ally**: Comprehensive WCAG accessibility auditing with multi-tool testing (axe-core + pa11y + Lighthouse), TRUE PARALLEL execution with Promise.allSettled, graceful degradation, retry with backoff, context-aware remediation, learning integration, and video accessibility. Uses 3-tier browser cascade: Vibium → agent-browser → Playwright+Stealth.
+- **accessibility-testing**: WCAG 2.2 compliance testing, screen reader validation, and inclusive design verification. Use when ensuring legal compliance (ADA, Section 508), testing for disabilities, or building accessible applications for 1 billion disabled users globally.
+- **agentic-quality-engineering**: AI agents as force multipliers for quality work. Core skill for all 19 QE agents using PACT principles.
+- **api-testing-patterns**: Comprehensive API testing patterns including contract testing, REST/GraphQL testing, and integration testing. Use when testing APIs or designing API test strategies.
+- **brutal-honesty-review**: Unvarnished technical criticism combining Linus Torvalds
+- **bug-reporting-excellence**: Write high-quality bug reports that get fixed quickly. Use when reporting bugs, training teams on bug reporting, or establishing bug report standards.
+- **chaos-engineering-resilience**: Chaos engineering principles, controlled failure injection, resilience testing, and system recovery validation. Use when testing distributed systems, building confidence in fault tolerance, or validating disaster recovery.
+- **cicd-pipeline-qe-orchestrator**: Orchestrate quality engineering across CI/CD pipeline phases. Use when designing test strategies, planning quality gates, or implementing shift-left/shift-right testing.
+- **code-review-quality**: Conduct context-driven code reviews focusing on quality, testability, and maintainability. Use when reviewing code, providing feedback, or establishing review practices.
+- **compatibility-testing**: Cross-browser, cross-platform, and cross-device compatibility testing ensuring consistent experience across environments. Use when validating browser support, testing responsive design, or ensuring platform compatibility.
+- **compliance-testing**: Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data.
+- **consultancy-practices**: Apply effective software quality consultancy practices. Use when consulting, advising clients, or establishing consultancy workflows.
+- **context-driven-testing**: Apply context-driven testing principles where practices are chosen based on project context, not universal
+- **contract-testing**: Consumer-driven contract testing for microservices using Pact, schema validation, API versioning, and backward compatibility testing. Use when testing API contracts or coordinating distributed teams.
+- **database-testing**: Database schema validation, data integrity testing, migration testing, transaction isolation, and query performance. Use when testing data persistence, ensuring referential integrity, or validating database migrations.
+- **exploratory-testing-advanced**: Advanced exploratory testing techniques with Session-Based Test Management (SBTM), RST heuristics, and test tours. Use when planning exploration sessions, investigating bugs, or discovering unknown quality risks.
+- **holistic-testing-pact**: Apply the Holistic Testing Model evolved with PACT (Proactive, Autonomous, Collaborative, Targeted) principles. Use when designing comprehensive test strategies for Classical, AI-assisted, Agent based, or Agentic Systems building quality into the team, or implementing whole-team quality practices.
+- **localization-testing**: Internationalization (i18n) and localization (l10n) testing for global products including translations, locale formats, RTL languages, and cultural appropriateness. Use when launching in new markets or building multi-language products.
+- **mobile-testing**: Comprehensive mobile testing for iOS and Android platforms including gestures, sensors, permissions, device fragmentation, and performance. Use when testing native apps, hybrid apps, or mobile web, ensuring quality across 1000+ device variants.
+- **mutation-testing**: Test quality validation through mutation testing, assessing test suite effectiveness by introducing code mutations and measuring kill rate. Use when evaluating test quality, identifying weak tests, or proving tests actually catch bugs.
+- **n8n-expression-testing**: n8n expression syntax validation, context-aware testing, common pitfalls detection, and performance optimization. Use when validating n8n expressions and data transformations.
+- **n8n-integration-testing-patterns**: API contract testing, authentication flows, rate limit handling, and error scenario coverage for n8n integrations with external services. Use when testing n8n node integrations.
+- **n8n-security-testing**: Credential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n workflow security.
+- **n8n-trigger-testing-strategies**: Webhook testing, schedule validation, event-driven triggers, and polling mechanism testing for n8n workflows. Use when testing how workflows are triggered.
+- **n8n-workflow-testing-fundamentals**: Comprehensive n8n workflow testing including execution lifecycle, node connection patterns, data flow validation, and error handling strategies. Use when testing n8n workflow automation applications.
+- **pair-programming**: AI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions. Features automatic role switching, continuous code review, security scanning, and performance optimization with truth-score verification.
+- **performance-testing**: Test application performance, scalability, and resilience. Use when planning load testing, stress testing, or optimizing system performance.
+- **qcsd-ideation-swarm**: QCSD Ideation phase swarm for Quality Criteria sessions using HTSM v6.3, Risk Storming, and Testability analysis before development begins. Uses 5-tier browser cascade: Vibium → agent-browser → Playwright+Stealth → WebFetch → WebSearch-fallback.
+- **quality-metrics**: Measure quality effectively with actionable metrics. Use when establishing quality dashboards, defining KPIs, or evaluating test effectiveness.
+- **refactoring-patterns**: Apply safe refactoring patterns to improve code structure without changing behavior. Use when cleaning up code, reducing technical debt, or improving maintainability.
+- **regression-testing**: Strategic regression testing with test selection, impact analysis, and continuous regression management. Use when verifying fixes don
+- **risk-based-testing**: Focus testing effort on highest-risk areas using risk assessment and prioritization. Use when planning test strategy, allocating testing resources, or making coverage decisions.
+- **security-testing**: Test for security vulnerabilities using OWASP principles. Use when conducting security audits, testing auth, or implementing security practices.
+- **security-visual-testing**: Security-first visual testing combining URL validation, PII detection, and visual regression with parallel viewport support. Use when testing web applications that handle sensitive data, need visual regression coverage, or require WCAG accessibility compliance.
+- **sherlock-review**: Evidence-based investigative code review using deductive reasoning to determine what actually happened versus what was claimed. Use when verifying implementation claims, investigating bugs, validating fixes, or conducting root cause analysis. Elementary approach to finding truth through systematic observation.
+- **shift-left-testing**: Move testing activities earlier in the development lifecycle to catch defects when they
+- **shift-right-testing**: Testing in production with feature flags, canary deployments, synthetic monitoring, and chaos engineering. Use when implementing production observability or progressive delivery.
+- **six-thinking-hats**: Apply Edward de Bono
+- **tdd-london-chicago**: Apply London (mock-based) and Chicago (state-based) TDD schools. Use when practicing test-driven development or choosing testing style for your context.
+- **technical-writing**: Write clear, engaging technical content from real experience. Use when writing blog posts, documentation, tutorials, or technical articles.
+- **test-automation-strategy**: Design and implement effective test automation with proper pyramid, patterns, and CI/CD integration. Use when building automation frameworks or improving test efficiency.
+- **test-data-management**: Strategic test data generation, management, and privacy compliance. Use when creating test data, handling PII, ensuring GDPR/CCPA compliance, or scaling data generation for realistic testing scenarios.
+- **test-design-techniques**: Systematic test design with boundary value analysis, equivalence partitioning, decision tables, state transition testing, and combinatorial testing. Use when designing comprehensive test cases, reducing redundant tests, or ensuring systematic coverage.
+- **test-environment-management**: Test environment provisioning, infrastructure as code for testing, Docker/Kubernetes for test environments, service virtualization, and cost optimization. Use when managing test infrastructure, ensuring environment parity, or optimizing testing costs.
+- **test-reporting-analytics**: Advanced test reporting, quality dashboards, predictive analytics, trend analysis, and executive reporting for QE metrics. Use when communicating quality status, tracking trends, or making data-driven decisions.
+- **testability-scoring**: AI-powered testability assessment using 10 principles of intrinsic testability with Playwright and optional Vibium integration. Evaluates web applications against Observability, Controllability, Algorithmic Simplicity, Transparency, Stability, Explainability, Unbugginess, Smallness, Decomposability, and Similarity. Use when assessing software testability, evaluating test readiness, identifying testability improvements, or generating testability reports.
+- **verification-quality**: Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring high-quality agent outputs and codebase reliability.
+- **visual-testing-advanced**: Advanced visual regression testing with pixel-perfect comparison, AI-powered diff analysis, responsive design validation, and cross-browser visual consistency. Use when detecting UI regressions, validating designs, or ensuring visual consistency.
+- **xp-practices**: Apply XP practices including pair programming, ensemble programming, continuous integration, and sustainable pace. Use when implementing agile development practices, improving team collaboration, or adopting technical excellence practices.
+
+## V3 Domain Skills (14)
 
 V3-specific implementation guides for the 12 DDD bounded contexts.
 
-### qe-a11y-ally (visual-accessibility domain)
-
-**File:** `library/qe-a11y-ally.md`
-
-WCAG accessibility auditing with **mandatory video accessibility generation**. This skill ensures the full V3 video pipeline is executed.
-
-**Key Features:**
-- WCAG 2.1/2.2 AA/AAA compliance auditing
-- Video detection and download
-- Frame extraction with ffmpeg (10 frames @ 3s intervals)
-- AI frame analysis with Claude Vision
-- WebVTT caption generation (`*-captions.vtt`)
-- Audio description generation (`*-audiodesc.vtt`)
-- EU compliance (EN 301 549, EAA, BITV 2.0)
-
-**Output:** `docs/accessibility/captions/{page-slug}/`
-
-**Usage:**
-```
-/qe-a11y-ally https://example.com/page-with-video
-```
-
-
+- **aqe-v2-v3-migration**: Migrate Agentic QE projects from v2 to v3 with zero data loss
+- **qe-chaos-resilience**: Chaos engineering and resilience testing including fault injection, load testing, and system recovery validation.
+- **qe-code-intelligence**: Knowledge graph-based code understanding with semantic search and 80% token reduction through intelligent context retrieval.
+- **qe-contract-testing**: Consumer-driven contract testing for APIs including REST, GraphQL, and event-driven systems with schema validation.
+- **qe-coverage-analysis**: O(log n) sublinear coverage gap detection with risk-weighted analysis and intelligent test prioritization.
+- **qe-defect-intelligence**: AI-powered defect prediction, pattern learning, and root cause analysis for proactive quality management.
+- **qe-iterative-loop**: Quality Engineering iteration loops for autonomous test improvement, coverage achievement, and quality gate compliance. Use when tests need to pass, coverage targets must be met, quality gates require compliance, or flaky tests need stabilization. Integrates with AQE v3 fleet agents for coordinated quality iteration.
+- **qe-learning-optimization**: Transfer learning, metrics optimization, and continuous improvement for AI-powered QE agents.
+- **qe-quality-assessment**: Comprehensive quality gates, metrics analysis, and deployment readiness assessment for continuous quality assurance.
+- **qe-requirements-validation**: Requirements traceability, acceptance criteria validation, and BDD scenario management for complete requirements coverage.
+- **qe-security-compliance**: Security auditing, vulnerability scanning, and compliance validation for OWASP, SOC2, GDPR, and other standards.
+- **qe-test-execution**: Parallel test execution orchestration with intelligent scheduling, retry logic, and comprehensive result aggregation.
+- **qe-test-generation**: AI-powered test generation using pattern recognition, code analysis, and intelligent test synthesis for comprehensive test coverage.
+- **qe-visual-accessibility**: Visual regression testing, responsive design validation, and WCAG accessibility compliance testing.
+
+## Platform Skills (34)
+
+Claude Flow platform skills (managed separately).
+
+- agentdb-advanced
+- agentdb-learning
+- agentdb-memory-patterns
+- agentdb-optimization
+- agentdb-vector-search
+- agentic-jujutsu
+- flow-nexus-neural
+- flow-nexus-platform
+- flow-nexus-swarm
+- github-code-review
+- github-multi-repo
+- github-project-management
+- github-release-management
+- github-workflow-automation
+- hive-mind-advanced
+- hooks-automation
+- iterative-loop
+- performance-analysis
+- reasoningbank-agentdb
+- reasoningbank-intelligence
+- skill-builder
+- sparc-methodology
+- stream-chain
+- swarm-advanced
+- swarm-orchestration
+- v3-cli-modernization
+- v3-core-implementation
+- v3-ddd-architecture
+- v3-integration-deep
+- v3-mcp-optimization
+- v3-memory-unification
+- v3-performance-optimization
+- v3-security-overhaul
+- v3-swarm-coordination
+
+## Validation Infrastructure
+
+The `.validation/` directory contains the skill validation infrastructure (ADR-056):
+
+- **schemas/**: JSON Schema definitions for validating skill outputs
+- **templates/**: Validator script templates for creating skill validators
+- **examples/**: Example skill outputs that validate against schemas
+- **test-data/**: Test data for validator self-testing
+
+See `.validation/README.md` for usage instructions.
 
 ---
 
-*Generated by AQE v3 init on 2026-01-25T14:23:40.890Z*
+*Generated by AQE v3 init on 2026-02-02T12:17:47.766Z*

package/.claude/skills/TRUST-TIERS.md

@@ -0,0 +1,158 @@
+# Trust Tier Badges
+
+> Generated: 2026-02-02T10:30:07.656Z
+> Policy: ADR-056 - Trust But Verify
+
+## Overview
+
+![Tier 3 (Verified)](https://img.shields.io/badge/Tier%203%20(Verified)-46-brightgreen)
+![Tier 2 (Validated)](https://img.shields.io/badge/Tier%202%20(Validated)-7-green)
+![Tier 1 (Structured)](https://img.shields.io/badge/Tier%201%20(Structured)-5-yellow)
+![Tier 0 (Advisory)](https://img.shields.io/badge/Tier%200%20(Advisory)-39-lightgrey)
+
+**Total Skills**: 97
+
+## Trust Tier Distribution
+
+| Tier | Count | Description |
+|------|-------|-------------|
+| 3 - Verified | 46 | Full evaluation test suite |
+| 2 - Validated | 7 | Has executable validator |
+| 1 - Structured | 5 | Has JSON output schema |
+| 0 - Advisory | 39 | SKILL.md only |
+
+## Validation Status
+
+| Status | Count |
+|--------|-------|
+| Passing | 46 |
+| Failing | 0 |
+| Unknown | 12 |
+| Skipped | 39 |
+
+---
+
+## Tier 3 Skills (Fully Verified)
+
+These skills have complete validation infrastructure: JSON schema, validator script, and evaluation test suite.
+
+| Skill | Category | Schema | Validator | Eval Suite | Status |
+|-------|----------|--------|-----------|------------|--------|
+| a11y-ally | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/a11y-ally.yaml` | Passing |
+| accessibility-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/accessibility-testing.yaml` | Passing |
+| api-testing-patterns | testing-methodologies | `schemas/output.json` | `scripts/validate.sh` | `evals/api-testing-patterns.yaml` | Passing |
+| chaos-engineering-resilience | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/chaos-engineering-resilience.yaml` | Passing |
+| cicd-pipeline-qe-orchestrator | infrastructure | `schemas/output.json` | `scripts/validate.sh` | `evals/cicd-pipeline-qe-orchestrator.yaml` | Passing |
+| compatibility-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/compatibility-testing.yaml` | Passing |
+| compliance-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/compliance-testing.yaml` | Passing |
+| contract-testing | testing-methodologies | `schemas/output.json` | `scripts/validate.sh` | `evals/contract-testing.yaml` | Passing |
+| database-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/database-testing.yaml` | Passing |
+| localization-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/localization-testing.yaml` | Passing |
+| mobile-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/mobile-testing.yaml` | Passing |
+| mutation-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/mutation-testing.yaml` | Passing |
+| n8n-expression-testing | n8n-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/n8n-expression-testing.yaml` | Passing |
+| n8n-integration-testing-patterns | n8n-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/n8n-integration-testing-patterns.yaml` | Passing |
+| n8n-security-testing | n8n-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/n8n-security-testing.yaml` | Passing |
+| n8n-trigger-testing-strategies | n8n-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/n8n-trigger-testing-strategies.yaml` | Passing |
+| n8n-workflow-testing-fundamentals | n8n-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/n8n-workflow-testing-fundamentals.yaml` | Passing |
+| performance-analysis | monitoring | `schemas/output.json` | `scripts/validate.sh` | `evals/performance-analysis.yaml` | Passing |
+| performance-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/performance-testing.yaml` | Passing |
+| qcsd-ideation-swarm | qcsd-phases | `schemas/output.json` | `scripts/validate.sh` | `evals/qcsd-ideation-swarm.yaml` | Passing |
+| qe-chaos-resilience | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-chaos-resilience.yaml` | Passing |
+| qe-code-intelligence | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-code-intelligence.yaml` | Passing |
+| qe-contract-testing | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-contract-testing.yaml` | Passing |
+| qe-coverage-analysis | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-coverage-analysis.yaml` | Passing |
+| qe-defect-intelligence | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-defect-intelligence.yaml` | Passing |
+| qe-learning-optimization | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-learning-optimization.yaml` | Passing |
+| qe-quality-assessment | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-quality-assessment.yaml` | Passing |
+| qe-requirements-validation | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-requirements-validation.yaml` | Passing |
+| qe-security-compliance | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-security-compliance.yaml` | Passing |
+| qe-test-execution | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-test-execution.yaml` | Passing |
+| qe-test-generation | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-test-generation.yaml` | Passing |
+| qe-visual-accessibility | - | `schemas/output.json` | `scripts/validate.sh` | `evals/qe-visual-accessibility.yaml` | Passing |
+| quality-metrics | testing-methodologies | `schemas/output.json` | `scripts/validate.sh` | `evals/quality-metrics.yaml` | Passing |
+| regression-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/regression-testing.yaml` | Passing |
+| risk-based-testing | testing-methodologies | `schemas/output.json` | `scripts/validate.sh` | `evals/risk-based-testing.yaml` | Passing |
+| security-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/security-testing.yaml` | Passing |
+| security-visual-testing | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/security-visual-testing.yaml` | Passing |
+| shift-left-testing | testing-methodologies | `schemas/output.json` | `scripts/validate.sh` | `evals/shift-left-testing.yaml` | Passing |
+| shift-right-testing | testing-methodologies | `schemas/output.json` | `scripts/validate.sh` | `evals/shift-right-testing.yaml` | Passing |
+| test-automation-strategy | testing-methodologies | `schemas/output.json` | `scripts/validate.sh` | `evals/test-automation-strategy.yaml` | Passing |
+| test-data-management | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/test-data-management.yaml` | Passing |
+| test-design-techniques | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/test-design-techniques.yaml` | Passing |
+| test-reporting-analytics | analytics | `schemas/output.json` | `scripts/validate.sh` | `evals/test-reporting-analytics.yaml` | Passing |
+| testability-scoring | testing-methodologies | `schemas/output.json` | `scripts/validate.sh` | `evals/testability-scoring.yaml` | Passing |
+| verification-quality | quality-assurance | `schemas/output.json` | `scripts/validate.sh` | `evals/verification-quality.yaml` | Passing |
+| visual-testing-advanced | specialized-testing | `schemas/output.json` | `scripts/validate.sh` | `evals/visual-testing-advanced.yaml` | Passing |
+
+---
+
+## Tier 2 Skills (Validated)
+
+These skills have a validator script but no evaluation test suite yet.
+
+| Skill | Category | Schema | Validator | Status |
+|-------|----------|--------|-----------|--------|
+| brutal-honesty-review | quality-review | `schemas/output.json` | `scripts/validate.sh` | Unknown |
+| bug-reporting-excellence | quality-communication | `schemas/output.json` | `scripts/validate.sh` | Unknown |
+| code-review-quality | development-practices | `schemas/output.json` | `scripts/validate.sh` | Unknown |
+| qe-iterative-loop | - | `schemas/output.json` | `scripts/validate.sh` | Unknown |
+| refactoring-patterns | development-practices | `schemas/output.json` | `scripts/validate.sh` | Unknown |
+| sherlock-review | quality-review | `schemas/output.json` | `scripts/validate.sh` | Unknown |
+| tdd-london-chicago | development-practices | `schemas/output.json` | `scripts/validate.sh` | Unknown |
+
+---
+
+## Tier 1 Skills (Structured)
+
+These skills have a JSON output schema but no validator yet.
+
+| Skill | Category | Schema |
+|-------|----------|--------|
+| agentic-quality-engineering | qe-core | `schemas/output.json` |
+| aqe-v2-v3-migration | - | `schemas/output.json` |
+| consultancy-practices | professional-practice | `schemas/output.json` |
+| technical-writing | communication | `schemas/output.json` |
+| test-environment-management | specialized-testing | `schemas/output.json` |
+
+---
+
+## Upgrading Skills
+
+To upgrade a skill to a higher trust tier:
+
+### Tier 0 -> Tier 1 (Add Schema)
+1. Create `{skill}/schemas/output.json` with JSON Schema
+2. Add `trust_tier: 1` to frontmatter
+3. Run `npx tsx scripts/update-skill-manifest.ts`
+
+### Tier 1 -> Tier 2 (Add Validator)
+1. Create `{skill}/scripts/validate.sh` (or .ts/.js)
+2. Add `trust_tier: 2` and validation paths to frontmatter
+3. Run `npx tsx scripts/update-skill-manifest.ts`
+
+### Tier 2 -> Tier 3 (Add Evals)
+1. Create `{skill}/evals/{skill}.yaml` with test cases
+2. Add `trust_tier: 3` and eval_path to frontmatter
+3. Run `npx tsx scripts/update-skill-manifest.ts`
+
+---
+
+## CI Integration
+
+Add this to your GitHub Actions workflow:
+
+```yaml
+- name: Validate Skill Manifest
+  run: npx tsx scripts/update-skill-manifest.ts --dry-run
+
+- name: Check Tier 3 Skills Pass
+  run: |
+    for skill in api-testing-patterns security-testing performance-testing; do
+      .claude/skills/$skill/scripts/validate.sh --self-test
+    done
+```
+
+---
+
+*Generated by update-skill-manifest.ts per ADR-056*