> quality-engineering-business-analysis
Investigate requirements with atomic AC decomposition, actor/permission matrix, platform parity audit, truth table verification, and edge case discovery. Also enforces User Story authoring standards: story structure, scope fences, platform tags, toggle contracts, market isolation, and deferral patterns. Use when writing, reviewing, or improving User Stories, acceptance criteria, or doing impact analysis — especially for stories with multi-condition AC, feature toggles, market variants (VN/MY/SG)
curl "https://skillshub.wtf/HoangNguyen0403/agent-skills-standard/quality-engineering-business-analysis?format=md"Business Analysis Standards (Deep Analysis + Story Authoring)
Priority: P0 (CRITICAL)
1. Deep Investigation Protocol
- Atomic AC Decomposition: Split Acceptance Criteria (AC) into 1-Condition logic units (e.g., "User can X and Y" -> "User can X", "User can Y").
- Variable Identification: Extract all Feature Toggles, Market Rules (VN/MY/SG), and User Roles.
- Platform Parity: Verify if logic applies to both Web and Mobile; Flag divergent behavior early.
- Truth Table Verification: Map complex multi-condition logic to a Logic Truth Table.
2. Dynamic Actor & Permission Mapping
- Identify all Actors (e.g.,
Customer,Sales Rep,Admin). - Use an Actor/Permission Matrix to map specific constraints per Actor.
- Permissions Patterns
3. Edge Case & Boundary Analysis
- State Validation: Verify behavior across all entity (e.g.,
Active,Suspended) and network states. - Boundary Detection: Analyze currency, date, and count limits.
- Negative Testing: Identify flows for Unauthorized Access, Invalid Input, and Null-safety.
4. Anti-Patterns (Analysis)
- No Surface Reading: investigate the implications, don't just restate.
- No Assumption: Flag undefined states (e.g., Offline) as P0 blockers.
- No Loose Mapping: Ensure AC aligns 100% with Technical Impact notes.
5. User Story Authoring Standards
- Story Structure: Every story must use
As a [Actor], I want [Goal], so that [Value]. - AC Format: Each AC must be one
Given / When / Thenblock — one condition per block. - Platform Tag: Prefix each AC with
[WEB],[MOBILE], or[BOTH]— never mix platforms in one AC block. - Toggle Contract: Each feature flag AC must name the flag and state:
Toggle: <FlagName> = ON/OFF. - Market Isolation: Any market-specific AC must be prefixed
[Market: VN],[Market: MY], etc. - Scope Fence: Include explicit
## In Scope,## Out of Scope, and## Deferredsections. Deferred items must link to a Jira ticket — never write "to discuss". - Translation AC: Language/locale behavior is a separate AC, not an inline note.
See User Story Template for the full authoring template.
6. Anti-Patterns (Story Authoring)
- No mixed-platform AC:
[MOBILE ONLY]buried inline hides parity gaps — use platform tags. - No "to discuss": Replace with a linked Jira ticket in
## Deferred. - No implicit toggle states: Always declare both ON and OFF behavior per AC.
- No bundled AC: "User sees X and Y and Z" → split into three separate AC blocks.
7. Validation Checklist
Run after authoring or reviewing any User Story before marking it ready for development:
- Every AC has a
[WEB],[MOBILE], or[BOTH]platform tag - Every toggle AC declares both
= ONand= OFFstates explicitly - No AC block contains more than one
Andcondition (split if it does) - No "to discuss" text anywhere — replaced by a Jira link in
## Deferred - Story has
## In Scope,## Out of Scope, and## Deferredsections - Story uses
As a / I want / So thatheader - Market-specific ACs are prefixed
[Market: VN],[Market: MY], etc. - Translation / locale behavior is its own AC or deferred with a Jira link
> related_skills --same-repo
> common-store-changelog
Generate user-facing release notes for the Apple App Store and Google Play Store by collecting git history, triaging user-impacting changes, and drafting store-compliant changelogs. Enforces character limits (App Store ≤4000, Google Play ≤500), tone, and bullet format. Use when generating release notes, app store changelog, play store release, what's new, or version release notes for any mobile app. (triggers: generate changelog, app store notes, play store release, what's new, release notes, ve
> golang-tooling
Go developer toolchain — gopls LSP diagnostics, linting, formatting, and vet. Use when setting up Go tooling, running linters, or integrating gopls with Claude Code. (triggers: gopls, golangci-lint, golangci.yml, go vet, goimports, staticcheck, go tooling, go lint)
> common-ui-design
Design distinctive, production-grade frontend UI with bold aesthetic choices. Use when building web components, pages, interfaces, dashboards, or applications in any framework (React, Next.js, Angular, Vue, HTML/CSS). (triggers: build a page, create a component, design a dashboard, landing page, UI for, build a layout, make it look good, improve the design, build UI, create interface, design screen)
> common-owasp
OWASP Top 10 audit checklist for Web Applications (2021) and APIs (2023). Load during any security review, PR review, or codebase audit touching web, mobile backend, or API code. (triggers: security review, OWASP, broken access control, IDOR, BOLA, injection, broken auth, API review, authorization, access control)