---
title: "QA Advisor"
canonical: https://wavect.io/zh/skills/qa-advisor/
language: zh
description: "免费 AI 技能，像资深工程师一样审计你的测试：测试质量、OWASP 安全、可靠性、DORA。文件级的发现。可在 Claude Code 或任意 agent 中运行。"
image: "https://wavect.io/img/general/bak/open_graph_preview.jpg"
---

工程 · Free AI skill

# QA Advisor

像资深工程师那样审你的测试。

一位资深 QA 工程师，评估你测试的真实质量，并揭示绿色 CI 流水线所掩盖的安全与可靠性风险，附带文件级证据以及本应存在的确切测试。

[在 Claude 中打开 →](https://claude.ai/new?q=Please+fetch+and+follow+this+Wavect+skill+carefully%3A+https%3A%2F%2Fwavect.io%2F.well-known%2Fagent-skills%2Fqa-advisor%2FSKILL.md) [阅读 SKILL.md](https://wavect.io/.well-known/agent-skills/qa-advisor/SKILL.md) [预约免费通话](/zh/contact/)

`https://wavect.io/.well-known/agent-skills/qa-advisor/SKILL.md` 📋

## 它能做什么

QA Advisor 在五个维度上审计代码库：测试质量、可维护性、安全、可靠性和交付健康度。它能抓出使用 mock 数据库、什么都没验证的测试、断言表演、OWASP 漏洞，以及伪装成进行中的被跳过测试，并产出一份按严重程度排序的 QA 审计报告。

## 什么时候用

- 在一次重大重构、发布或基础设施迁移之前
- 接手一个陌生代码库以了解其真实健康度时
- 一个 bug 溜过了所有现有测试，你需要系统性分析
- 投资人、收购方或新任 CTO 要求技术尽职调查
- DORA 指标很差，团队却说不清原因
- 在一个 vibe-coded 或 AI 生成的原型迎来首批真实用户之前对它做审计

## 工作原理

1. **先勘察，再批评** - 它会刻画测试策略、测试文件与源文件之比、CI 关卡，以及变更最频繁、风险最高的文件。
2. **评估测试质量** - 它评估 test double、断言强度，以及基于属性和契约的覆盖，并用证据标记覆盖率表演。
3. **探测安全与可靠性** - 它检查代码级的 OWASP 模式、数据库与迁移测试、混沌与负载行为，以及系统在故障下何处崩溃。
4. **评估交付并出报告** - 它评估 DORA 指标和架构可测试性，并以文件与行级的、可阻断发布的关键发现开篇。

## 你会得到什么

- Critical / High / Medium 级别问题，带 file:line
- 安全态势（OWASP）、DORA 评估
- 三个月修复路线图

## 适用的框架

- Test double 分类法
- OWASP Top 10
- 基于属性的测试
- 契约测试 (Pact)
- DORA 指标
- 六边形架构

Wavect 的软件 QA 服务在头 30 天里通常比内部团队多发现 40% 到 70% 的问题。这个技能用的是同一副透镜。

## 深入了解

- [测试质量](https://wavect.io/.well-known/agent-skills/qa-advisor/reference/test-quality.md)
- [安全 (OWASP)](https://wavect.io/.well-known/agent-skills/qa-advisor/reference/security.md)
- [可靠性与扩展](https://wavect.io/.well-known/agent-skills/qa-advisor/reference/reliability-and-scale.md)
- [架构与可维护性](https://wavect.io/.well-known/agent-skills/qa-advisor/reference/architecture-and-maintainability.md)
- [交付健康度 (DORA)](https://wavect.io/.well-known/agent-skills/qa-advisor/reference/delivery-health.md)

## 关于QA Advisor的常见问题

### QA Advisor 是免费的吗？

是的。MIT 许可下开源，可在 Claude Code、Cursor 或任何能访问你代码库的 AI agent 中免费运行。无需 API key 或注册。

### 报告包含什么？

带文件与行号的关键、高、中级发现，一张测试质量记分卡，对照 OWASP 的安全态势，一份 DORA 评估，以及一份三个月的整改路线图。

### 高覆盖率数字是否意味着我的测试很好？

单凭它并不能。该技能专门用来揭露只有 happy path 断言的高覆盖率，那会制造危险的虚假信心。它评估测试是否真的能抓到真实的 bug。

### 它只会挑剔代码风格吗？

不会。它忽略 lint 和风格偏好，专注于真实风险：安全漏洞、什么都没验证的测试，以及让系统难以安全变更的架构。

### QA Advisor 能审计 AI 生成或 vibe-coded 的代码吗？

能。它正对着 AI 生成产物出厂时常见的那些生产就绪失效模式：缺失的授权、没有输入校验、泄露的密钥，以及没有回归测试这张安全网。参见 [AI 生成代码的 QA](/zh/blog/qa-for-ai-generated-code/) 、 [对 vibe-coded 软件的审计](/zh/blog/vibe-coded-software-audit/) ，以及 [什么是 vibe-coded 软件](/zh/glossary/vibe-coded-software/) 。

## 更多免费 Wavect 技能

[产品 PMF Advisor 别再瞎猜你有没有 PMF。](/zh/skills/pmf-advisor/) [GTM ICP Discovery 逼你具体。说出客户、触发点、痛点。](/zh/skills/icp-discovery/) [定价 Pricing Strategy 干掉 cost-plus。找到 value metric。收它该收的价。](/zh/skills/pricing-strategy/) [转化 Website ICP-Fit 搞清楚为什么对的访客没成单。](/zh/skills/website-icp-fit/) [高客单 High-Ticket Conversion Architect 设计能成 $10k+ 单的落地页。](/zh/skills/high-ticket-conversion-architect/)

[查看全部六个技能及安装方法 →](/zh/skills/)

## 想要我们和你一起做，而不只是给你做？

这些技能只是工具。自 2018 年以来，我们一直用它们在真实客户合作中干活：fractional co-founder、全栈交付、QA 负责人。如果你更想要一个真人和你一起下战壕，约一个免费电话。

[联系我们 →](/zh/contact/)

## Structured Data

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@id": "https://wavect.io/#organization",
      "@type": [
        "Organization",
        "ProfessionalService",
        "LocalBusiness"
      ],
      "employee": [
        {
          "@id": "https://wavect.io/team/kevin-riedl/#person",
          "@type": "Person",
          "jobTitle": "Managing Director",
          "name": "Kevin Riedl",
          "url": "https://wavect.io/team/kevin-riedl/",
          "worksFor": {
            "@id": "https://wavect.io/#organization",
            "@type": [
              "Organization",
              "ProfessionalService",
              "LocalBusiness"
            ]
          }
        },
        {
          "@id": "https://wavect.io/team/christof-jori/#person",
          "@type": "Person",
          "jobTitle": "Managing Director",
          "name": "Christof Jori",
          "url": "https://wavect.io/team/christof-jori/",
          "worksFor": {
            "@id": "https://wavect.io/#organization",
            "@type": [
              "Organization",
              "ProfessionalService",
              "LocalBusiness"
            ]
          }
        }
      ],
      "founder": [
        {
          "@id": "https://wavect.io/team/kevin-riedl/#person",
          "@type": "Person",
          "jobTitle": "Managing Director",
          "name": "Kevin Riedl",
          "url": "https://wavect.io/team/kevin-riedl/",
          "worksFor": {
            "@id": "https://wavect.io/#organization",
            "@type": [
              "Organization",
              "ProfessionalService",
              "LocalBusiness"
            ]
          }
        },
        {
          "@id": "https://wavect.io/team/christof-jori/#person",
          "@type": "Person",
          "jobTitle": "Managing Director",
          "name": "Christof Jori",
          "url": "https://wavect.io/team/christof-jori/",
          "worksFor": {
            "@id": "https://wavect.io/#organization",
            "@type": [
              "Organization",
              "ProfessionalService",
              "LocalBusiness"
            ]
          }
        }
      ],
      "legalRepresentative": [
        {
          "@id": "https://wavect.io/team/kevin-riedl/#person",
          "@type": "Person",
          "jobTitle": "Managing Director",
          "name": "Kevin Riedl",
          "url": "https://wavect.io/team/kevin-riedl/",
          "worksFor": {
            "@id": "https://wavect.io/#organization",
            "@type": [
              "Organization",
              "ProfessionalService",
              "LocalBusiness"
            ]
          }
        },
        {
          "@id": "https://wavect.io/team/christof-jori/#person",
          "@type": "Person",
          "jobTitle": "Managing Director",
          "name": "Christof Jori",
          "url": "https://wavect.io/team/christof-jori/",
          "worksFor": {
            "@id": "https://wavect.io/#organization",
            "@type": [
              "Organization",
              "ProfessionalService",
              "LocalBusiness"
            ]
          }
        }
      ],
      "name": "Wavect GmbH",
      "subjectOf": {
        "@id": "https://wavect.io/verified-claims.json#dataset",
        "@type": "Dataset",
        "name": "Wavect verified publication claims",
        "url": "https://wavect.io/verified-claims.json"
      },
      "url": "https://wavect.io/"
    },
    {
      "@id": "https://wavect.io/team/kevin-riedl/#person",
      "@type": "Person",
      "jobTitle": "Managing Director",
      "name": "Kevin Riedl",
      "sameAs": [
        "https://www.wikidata.org/wiki/Q139796365",
        "https://www.linkedin.com/in/wsdt",
        "https://github.com/wsdt"
      ],
      "url": "https://wavect.io/team/kevin-riedl/",
      "worksFor": {
        "@id": "https://wavect.io/#organization",
        "@type": [
          "Organization",
          "ProfessionalService",
          "LocalBusiness"
        ]
      }
    },
    {
      "@id": "https://wavect.io/team/christof-jori/#person",
      "@type": "Person",
      "jobTitle": "Managing Director",
      "name": "Christof Jori",
      "sameAs": [
        "https://www.wikidata.org/wiki/Q139796367",
        "https://www.linkedin.com/in/jocr77/",
        "https://github.com/jo-chris"
      ],
      "url": "https://wavect.io/team/christof-jori/",
      "worksFor": {
        "@id": "https://wavect.io/#organization",
        "@type": [
          "Organization",
          "ProfessionalService",
          "LocalBusiness"
        ]
      }
    },
    {
      "@id": "https://wavect.io/#website",
      "@type": "WebSite",
      "inLanguage": [
        "en",
        "de",
        "es",
        "zh"
      ],
      "name": "Wavect",
      "potentialAction": {
        "@type": "SearchAction",
        "query-input": "required name=search_term_string",
        "target": {
          "@type": "EntryPoint",
          "urlTemplate": "https://wavect.io/search/?q={search_term_string}"
        }
      },
      "publisher": {
        "@id": "https://wavect.io/#organization",
        "@type": [
          "Organization",
          "ProfessionalService",
          "LocalBusiness"
        ]
      },
      "url": "https://wavect.io/"
    }
  ]
}
```

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@id": "https://wavect.io/zh/skills/qa-advisor/#skill",
      "@type": "SoftwareApplication",
      "applicationCategory": "DeveloperApplication",
      "author": {
        "@id": "https://wavect.io/#organization",
        "@type": [
          "Organization",
          "ProfessionalService",
          "LocalBusiness"
        ]
      },
      "description": "免费 AI 技能，像资深工程师一样审计你的测试：测试质量、OWASP 安全、可靠性、DORA。文件级的发现。可在 Claude Code 或任意 agent 中运行。",
      "installUrl": "https://wavect.io/.well-known/agent-skills/qa-advisor/SKILL.md",
      "isAccessibleForFree": true,
      "keywords": "Test double 分类法, OWASP Top 10, 基于属性的测试, 契约测试 (Pact), DORA 指标, 六边形架构",
      "name": "QA Advisor",
      "offers": {
        "@type": "Offer",
        "availability": "https://schema.org/InStock",
        "price": "0",
        "priceCurrency": "EUR"
      },
      "operatingSystem": "Any (AI agent, Claude, Cursor, Claude Code, MCP client)",
      "provider": {
        "@id": "https://wavect.io/#organization",
        "@type": [
          "Organization",
          "ProfessionalService",
          "LocalBusiness"
        ]
      },
      "url": "https://wavect.io/zh/skills/qa-advisor/"
    },
    {
      "@type": "BreadcrumbList",
      "itemListElement": [
        {
          "@type": "ListItem",
          "item": "https://wavect.io/zh/",
          "name": "首页",
          "position": 1
        },
        {
          "@type": "ListItem",
          "item": "https://wavect.io/zh/skills/",
          "name": "AI Skills",
          "position": 2
        },
        {
          "@type": "ListItem",
          "item": "https://wavect.io/zh/skills/qa-advisor/",
          "name": "QA Advisor",
          "position": 3
        }
      ]
    },
    {
      "@type": "HowTo",
      "description": "免费 AI 技能，像资深工程师一样审计你的测试：测试质量、OWASP 安全、可靠性、DORA。文件级的发现。可在 Claude Code 或任意 agent 中运行。",
      "name": "How to use QA Advisor",
      "step": [
        {
          "@type": "HowToStep",
          "name": "先勘察，再批评",
          "position": 1,
          "text": "它会刻画测试策略、测试文件与源文件之比、CI 关卡，以及变更最频繁、风险最高的文件。"
        },
        {
          "@type": "HowToStep",
          "name": "评估测试质量",
          "position": 2,
          "text": "它评估 test double、断言强度，以及基于属性和契约的覆盖，并用证据标记覆盖率表演。"
        },
        {
          "@type": "HowToStep",
          "name": "探测安全与可靠性",
          "position": 3,
          "text": "它检查代码级的 OWASP 模式、数据库与迁移测试、混沌与负载行为，以及系统在故障下何处崩溃。"
        },
        {
          "@type": "HowToStep",
          "name": "评估交付并出报告",
          "position": 4,
          "text": "它评估 DORA 指标和架构可测试性，并以文件与行级的、可阻断发布的关键发现开篇。"
        }
      ]
    },
    {
      "@id": "https://wavect.io/zh/skills/qa-advisor/#webpage",
      "@type": "WebPage",
      "description": "免费 AI 技能，像资深工程师一样审计你的测试：测试质量、OWASP 安全、可靠性、DORA。文件级的发现。可在 Claude Code 或任意 agent 中运行。",
      "inLanguage": "zh",
      "isPartOf": {
        "@id": "https://wavect.io/#website",
        "@type": "WebSite"
      },
      "mainEntity": {
        "@id": "https://wavect.io/zh/skills/qa-advisor/#skill"
      },
      "name": "QA Advisor",
      "speakable": {
        "@type": "SpeakableSpecification",
        "cssSelector": [
          ".skill-detail-hero__title",
          ".skill-detail-hero__lead",
          ".skill-detail-faq .faq-question",
          ".skill-detail-faq .faq-answer"
        ]
      },
      "url": "https://wavect.io/zh/skills/qa-advisor/"
    }
  ]
}
```

```json
{
  "@context": "https://schema.org",
  "@type": "FAQPage",
  "mainEntity": [
    {
      "@type": "Question",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "是的。MIT 许可下开源，可在 Claude Code、Cursor 或任何能访问你代码库的 AI agent 中免费运行。无需 API key 或注册。"
      },
      "name": "QA Advisor 是免费的吗？"
    },
    {
      "@type": "Question",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "带文件与行号的关键、高、中级发现，一张测试质量记分卡，对照 OWASP 的安全态势，一份 DORA 评估，以及一份三个月的整改路线图。"
      },
      "name": "报告包含什么？"
    },
    {
      "@type": "Question",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "单凭它并不能。该技能专门用来揭露只有 happy path 断言的高覆盖率，那会制造危险的虚假信心。它评估测试是否真的能抓到真实的 bug。"
      },
      "name": "高覆盖率数字是否意味着我的测试很好？"
    },
    {
      "@type": "Question",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "不会。它忽略 lint 和风格偏好，专注于真实风险：安全漏洞、什么都没验证的测试，以及让系统难以安全变更的架构。"
      },
      "name": "它只会挑剔代码风格吗？"
    },
    {
      "@type": "Question",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "能。它正对着 AI 生成产物出厂时常见的那些生产就绪失效模式：缺失的授权、没有输入校验、泄露的密钥，以及没有回归测试这张安全网。参见 AI 生成代码的 QA、对 vibe-coded 软件的审计，以及 什么是 vibe-coded 软件。"
      },
      "name": "QA Advisor 能审计 AI 生成或 vibe-coded 的代码吗？"
    }
  ],
  "speakable": {
    "@type": "SpeakableSpecification",
    "cssSelector": [
      ".faq-question",
      ".faq-answer"
    ]
  }
}
```