hoangnguyen0403/quality-engineering-appium-mcp
skills/quality-engineering/quality-engineering-appium-mcp/SKILL.md
Drives iOS/Android mobile devices via Appium MCP. Use for verifying mobile bugs, E2E tests, and navigating real device clouds (LambdaTest/BrowserStack).
$ install --global
skillsauthnpx skillsauth add hoangnguyen0403/agent-skills-standard quality-engineering-appium-mcpInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 20, 2026, 3:06 AM109.5s5 files scanned
SKILL.md
- name:
- quality-engineering-appium-mcp
- description:
- Drives iOS/Android mobile devices via Appium MCP. Use for verifying mobile bugs, E2E tests, and navigating real device clouds (LambdaTest/BrowserStack).
📱 Appium MCP (Mobile Automation)
Priority: P1 (HIGH)
[!IMPORTANT] Tier 0 (Infrastructure): Session creation, device farm connectivity, basic OS interactions. Tier 1 (Core Gestures): Taps, swipes, text input for native mobile elements. Tier 2 (Flutter/Single-Canvas): Visual-first automation via screenshot + coordinate taps.
🔌 Activation
Triggers: appium, mobile verify, android verify, ios verify, lambdatest, real device cloud, flutter widget tap.
🛠 Core Workflow (Goal-Oriented)
| Step | Tool | Purpose |
| :--- | :--- | :--- |
| 1 | appium_session_management (create) | Open session. Resiliency: Retry with noReset: true on failure. |
| 2 | appium_get_window_size | Scale coordinates for high-density displays. |
| 3 | appium_screenshot | Capture visual state for Semantic Reasoning. |
| 4 | appium_gesture / appium_set_value | Interact. Self-Healing: Re-scan hierarchy if UUID stale. |
| 5 | appium_session_management (delete) | MANDATORY Cleanup. |
💡 AI-Driven Methodologies
- Semantic Intent: Find element in hierarchy (e.g., "Login button") instead of raw coordinates. Resilient to layout shifts.
- Dynamic Handling: Unexpected pop-up appears? Pause, reason about alert, dismiss, resume.
- Visual Anchors: Find stable "Anchor" (e.g., Header) and derive coordinates relative to it.
🚫 Anti-Patterns (Zero-Tolerance)
- Hardcoded XPaths: Use
accessibility idoruiautomator. XPath flaky. - Implicit Wait-Only: Never assume page loaded. Poll for "Source of Truth" element.
- Ignoring QoS: Audit CPU/Memory via
appium_mobile_performance_data. Prevent lag/crashes. - Orphaned Sessions: Teardown mandatory. Call
deletein cleanup block.
✅ Evaluation Criteria
- Cleanup Rate: 100% session closure.
- Visual Accuracy: Coordinate-based taps land within 5% of target center.
- Security: No secrets in tool arguments or logs.
🔗 References
- Visual Testing: common-mobile-visual-testing — Methodology for what to verify.
- LambdaTest Setup: lambdatest-cloud-setup — RDC configuration.
- Tool Cheatsheet: tool-cheatsheet — Fast copy-paste args.
- Project Context: project-context — Project-specific overlays/macros.
Related Skills
hoangnguyen0403/specialist-pr-reviewer
development
VerifiedTrustedCommunity
Summarizes GitHub PR, GitLab MR, or Azure DevOps PR metadata, review threads, changed files, and template completeness. Use during review-ticket or code-review workflows when PR/MR context exists.
498SKILL.mdUpdated May 23, 2026
hoangnguyen0403/typescript-tooling
tools
VerifiedTrustedCommunity
Development tools, linting, and build config for TypeScript. Use when configuring ESLint, Prettier, Jest, Vitest, tsconfig, or any TS build tooling.
498SKILL.mdUpdated May 21, 2026
hoangnguyen0403/typescript-security
development
VerifiedTrustedCommunity
Validate input, secure auth tokens, and prevent injection attacks in TypeScript. Use when validating input, handling auth tokens, sanitizing data, or managing secrets and sensitive configuration.
498SKILL.mdUpdated May 21, 2026
hoangnguyen0403/typescript-language
development
VerifiedTrustedCommunity
Apply modern TypeScript standards for type safety and maintainability. Use when working with types, interfaces, generics, enums, unions, or tsconfig settings.
498SKILL.mdUpdated May 21, 2026