Does this skill require a pre-existing test plan?

Yes, the skill requires a 'tests/e2e-test-plan.md' file containing role definitions and credentials. If this doesn't exist, you should run the 'test-plan' skill first to generate it.

What kind of output does the skill provide?

It generates a detailed Role-Based Test Results report in Markdown format, including pass/fail status for every role, page navigation results, and security test summaries.

How does it handle guest vs authenticated users?

The skill follows a strict workflow that first tests unauthenticated access (redirects and 403s), followed by isolated sessions for every defined authenticated role to ensure no session leakage.

Can it detect security vulnerabilities like IDOR?

Yes, the skill includes specific patterns for testing Insecure Direct Object References (IDOR) and privilege escalation by attempting to access restricted resources with unauthorized roles.

Which browser automation tool does this skill use?

This skill utilizes Playwright MCP to perform automated browser interactions, form filling, and visual snapshots for verification.

Role-Based E2E Testing Specialist

Name: Role-Based E2E Testing Specialist
Author: mwguerra

bymwguerra

•

セキュリティとテスト

Executes comprehensive role-based end-to-end testing using Playwright to verify access controls and role-specific user flows.

The Role-Based E2E Testing Specialist skill automates the critical process of verifying security and functionality across various user permission levels. By reading role definitions and credentials from a standardized test plan, it leverages Playwright to navigate through complex user flows, ensuring that guests, standard users, and administrators can only access authorized resources. This skill is essential for identifying privilege escalation vulnerabilities, session isolation issues, and broken access control patterns, ultimately providing a detailed matrix of test results to guarantee a secure and functional multi-tenant or multi-role application.

主な機能

01Detailed markdown reporting with pass/fail summaries for every role

02Unauthenticated guest flow and redirect validation

03Automated multi-role login and session management using Playwright MCP

04Cross-role security testing for IDOR and privilege escalation

05Comprehensive role-resource access matrix verification

0623 GitHub stars

ユースケース

01Verifying that administrative dashboards and sensitive data remain inaccessible to standard user accounts.

02Validating that new feature deployments haven't introduced security loopholes or broken role-specific workflows.

03Automating regression testing for complex SaaS platforms with multiple subscription tiers and permission levels.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mwguerra/claude-code-plugins role-test

For use in Claude.ai and ChatGPT

Download Skill