Testland
Browse all skills & agents

data-contract-extractor

Reads a data-product spec (data PRD, dataset README, lineage doc) and emits a structured data contract - schema (columns + types + nullability + PII flags), freshness SLA, volume bounds, distribution invariants, and ownership. The contract is consumable by data-quality tools such as dbt tests, Great Expectations, or Soda checks as their assertion baseline. Use when scoping a new data product or formalizing assertions on an existing one.

Install with skills.sh (any agent)

npx skills add testland/qa --skill data-contract-extractor
View source

data-contract-extractor

Overview

This skill formalizes the prose of a data PRD into a data contract - the producer/consumer agreement on schema, freshness, volume, semantic invariants, and ownership - that the QA test suite can mechanically assert against, typically via dbt-tests, great-expectations, or soda-checks (see the qa-data-quality plugin). "Data contract" is practitioner-emergent terminology (Andrew Jones / Chad Sanderson), not ISTQB-canonical; this skill cites industry-engineering sources.

When to use

  • A new data product (dbt model, table, file feed) is being scoped and the team wants assertions before shipping.
  • An existing data product has implicit assumptions consumers rely on; the team is documenting them ahead of a refactor.
  • A PRD or design doc references a dataset and the team needs the schema / SLA pulled out into structured form.
  • A data-quality engineer needs the contract as input to suite generation.

What goes in a data contract

The five required sections, in order of authoring priority:

1. Schema

For each column:

FieldRequiredNotes
Nameyessnake_case; matches the warehouse table.
TypeyesWarehouse-native type (VARCHAR, BIGINT, TIMESTAMP, etc.).
Nullableyestrue / false - the test suite's not_null decision.
PKyestrue for primary-key column(s).
Uniqueyestrue for candidate keys (separate from PK).
FKoptionalIf foreign key, the <table>.<column> reference.
PIIrequiredTag values: none, direct (email/name), indirect (zip, dob alone), sensitive (SSN, payment).
ConstraintoptionalRange / enum / regex (per the qa-data-quality plugin's data-quality-conventions skill).
DescriptionyesOne-sentence semantic meaning; not just the type.

2. Freshness SLA

FieldNotes
Update cadencedaily / hourly / continuous / weekly.
Max stalenessThe point past which downstream consumers should treat the data as broken (per data-quality-conventions in the qa-data-quality plugin: typically 2× cadence).
Source-of-truth columnThe timestamp column the freshness check reads (e.g. updated_at, loaded_at, event_time).

3. Volume bounds

FieldNotes
Expected min/maxRow-count range under normal operation.
Volatilitystable / monotonic-growth / cyclical / event-driven.
Recovery actionIf volume falls outside bounds, what does the consumer do?

4. Distribution invariants

For each business-meaningful column, what must hold:

FieldExample
Categorical: accepted valuesstatus ∈ {placed, shipped, completed, returned}.
Numeric: rangediscount_pct ∈ [0, 100].
Frequency / ratecancellation_rate ≤ 5% (rolling 7-day window).

5. Ownership and governance

FieldNotes
Producer teamWho runs the pipeline.
Owner handleRouting handle (Slack / email) for breaks.
ConsumersKnown downstream models / dashboards / services.
VersioningHow breaking changes are communicated.

Output format

Emit as YAML for direct consumption by dbt / GX / Soda:

# data-contracts/<dataset-slug>.yml
contract_version: 1
dataset:
  name: orders
  description: One row per customer order; updated within 1h of placement.

schema:
  - name: order_id
    type: BIGINT
    nullable: false
    pk: true
    unique: true
    pii: none
    description: Surrogate key.
  - name: customer_id
    type: BIGINT
    nullable: false
    fk: customers.customer_id
    pii: indirect
    description: Customer who placed the order.
  - name: email
    type: VARCHAR
    nullable: false
    pii: direct
    constraint: { format: email }
    description: Customer email at time of order (immutable snapshot).
  - name: status
    type: VARCHAR
    nullable: false
    constraint:
      accepted_values: [placed, shipped, completed, returned]
    description: Current fulfillment status.
  - name: discount_pct
    type: DECIMAL(5,2)
    nullable: true
    constraint: { range: [0, 100] }
    description: Promotion discount applied; null = no promo.
  - name: updated_at
    type: TIMESTAMP
    nullable: false
    description: Last-modified timestamp; freshness source-of-truth.

freshness:
  cadence: hourly
  max_staleness: 2h
  source_column: updated_at

volume:
  min_per_day: 100
  max_per_day: 1000000
  volatility: cyclical
  recovery_action: |
    Investigate ingestion pipeline at <runbook-url> if volume falls outside bounds for >2 cycles.

distribution:
  - column: status
    rule: accepted_values
    values: [placed, shipped, completed, returned]
  - column: discount_pct
    rule: range
    range: [0, 100]
  - column: cancellation_rate
    rule: rolling_window
    window: 7d
    max: 0.05

ownership:
  producer_team: data-platform
  owner: '@data-platform-oncall'
  consumers:
    - dbt: marts/orders_summary
    - dashboard: 'Order Health'
    - service: shipping-microservice
  versioning: |
    Breaking changes coordinated via #data-contracts Slack 14d in advance.

Step-by-step extraction

When reading a data PRD:

  1. Schema - look for table-spec sections, ER diagrams, or per-column descriptions. If only column names are given, flag missing types as gaps; do not guess.
  2. PII tagging - every column gets a pii: tag, even pii: none. Force the data-product author to confirm; PII handling drives downstream architecture.
  3. Freshness - look for "updated daily" / "real-time" / "<X minutes." If absent, flag as a gap.
  4. Volume - look for traffic projections or current scale. If absent, flag as a gap to be filled before the contract is actionable.
  5. Distribution - look for business rules in prose form ("status is one of...", "discount up to 100%") and translate.
  6. Ownership - look for the responsible team / Slack channel.

Gap flagging

The agent never fabricates contract fields. Every gap becomes an explicit question:

## Contract gaps (HUMAN INPUT REQUIRED)

| Section       | Field                  | Question                                                                 |
|---------------|------------------------|--------------------------------------------------------------------------|
| schema        | `customer_phone.pii`   | Direct PII (yes - phone numbers are PII per most jurisdictions). Confirm. |
| freshness     | `cadence`              | PRD says "fresh data" - daily? hourly? real-time? Each implies a different gate. |
| volume        | `max_per_day`          | Not specified; required to set a `row_count between` assertion.          |
| distribution  | `payment_method`       | What's the accepted-value set? PRD lists four; are there more (e.g. "apple_pay" added recently)? |

Until the gaps are filled, the contract is incomplete and the test suite cannot be generated.

Examples

Three worked examples (PRD to contract, minimal source with a gap list, and refactor of an existing dataset) are in references/examples.md.

Anti-patterns

Anti-patternWhy it failsFix
Auto-tagging every column pii: noneMisses real PII; downstream ungoverned.Force the author to make the call; default to "needs review" rather than "none".
Generic freshness "real-time"Ambiguous; "real-time" varies from <100ms to <1min by team.Quantify: cadence: continuous, max_staleness: 60s.
Distribution rules without a window"Cancellation rate ≤5%" - over what window? Lifetime?Always specify a window: rolling_window: 7d.
Skipping OwnershipA contract without an owner is a wishlist; nobody's on the hook.Require ownership before declaring the contract complete.

References

  • ISTQB Glossary V4.7.1 - testability + non-functional testing (cited in non-functional-requirement-extractor) - for the underlying observability heuristic.
  • ISO/IEC 25012:2008 - data-quality model (cite by stable ID; paywalled at iso.org).
  • The qa-data-quality plugin - the downstream consumer of this skill's output. A data-quality engineer reads contracts produced by this skill.
  • data-quality-conventions (in the qa-data-quality plugin) - naming and threshold conventions referenced from the contract.

data-contract-extractor - worked examples

View source (opens in new window)

data-contract-extractor - worked examples

Three end-to-end examples. The five contract sections, the YAML output format, the extraction steps, and the gap-flagging pattern live in SKILL.md (opens in new window).

Example 1: PRD -> contract

Input (data PRD excerpt):

"We're building an orders table. One row per order. Updated within 1 hour of order placement. Statuses: placed, shipped, delivered, cancelled. Discount up to 100%. Payment methods: card, bank, paypal. Owned by the data platform team."

Output: see the Output format YAML in SKILL.md (the example mirrors this PRD).

Example 2: minimal source

Input: "We need a users table. Email and name."

Output:

## Contract gaps (HUMAN INPUT REQUIRED)

| Section       | Field                | Question                                       |
|---------------|----------------------|------------------------------------------------|
| schema        | types                | `email VARCHAR(?)` `name VARCHAR(?)`?           |
| schema        | pii                  | Direct (email, name)? Confirm.                  |
| schema        | uniqueness           | Email unique per user? Or shared (e.g. household)? |
| schema        | PK                   | `users.user_id` implied but not stated.         |
| freshness     | cadence              | Real-time on signup? Daily?                     |
| volume        | range                | Expected user count?                            |
| ownership     | team                 | Who owns this?                                  |

A 2-line PRD generates a 7-line gap list. Fill the gaps before
authoring the contract.

Example 3: refactor of existing dataset

Input: an undocumented events table, used by 5 dashboards. Discovered via git grep of the warehouse client code.

Output:

The agent reads the SQL queries hitting events and infers the observed contract - column references, status values used in WHERE clauses, recency expectations from INTERVAL filters. Then it produces a contract draft with a header note:

**Status:** observed-from-usage (NOT producer-attested).
The producer team must review and amend; this contract is the
consumers' best-effort reverse-engineering.

Until the producer attests, the contract is one-sided - useful for the consumer's tests, NOT a binding agreement.

Related skills

acceptance-criteria-extractor

Reads a user story, PRD section, or feature spec and emits well-formed acceptance criteria as Given/When/Then steps in Gherkin (Feature/Scenario file format) or as a numbered plain-text list. Identifies missing-precondition gaps and proposes Background blocks for shared context. Use after a story is testability-confirmed and before implementation begins.

gherkin-scenario-coverage-map

Parses new Gherkin scenarios produced by acceptance-criteria-extractor, fingerprints each scenario by its Given/When/Then step sequence, diffs the fingerprints against existing step-definition usage in the live suite, and emits a coverage/duplicate map showing which new scenarios are already covered, which overlap partially, and which are genuine gaps. Use when acceptance criteria have been converted to .feature files and before any new automated tests are authored.

non-functional-requirement-extractor

Reads a PRD, design doc, or product brief and pulls out the non-functional requirements (performance, accessibility, security, internationalization, reliability, observability) as concrete, threshold-bound, testable assertions. Maps every NFR to its measurement source (Lighthouse, axe, OWASP ASVS, WCAG criterion, etc.) so the test suite knows what to assert against. Use after acceptance-criteria-extractor handles functional requirements.

spec-testability-heuristics

Judges whether a written requirement can be tested at all, by scoring each claim against three heuristics: Observable (a state or output visible from outside the system), Decidable (a deterministic pass/fail against a named oracle), and Bounded (stated inputs, states, and users). Supplies untestable-to-testable rewrite pairs per heuristic, severity assignment, a BLOCK / REVIEW / OK verdict rule, and a findings table that pairs every flagged sentence with a concrete replacement. Scope is testability only: it does not write the tests, rank risk, or judge whether the requirement is correct or complete. Use when a user story, acceptance criterion, PRD section, API contract, or PR description is about to be handed to implementation and someone needs to know which sentences cannot be verified as written.

stride-threat-modeling

Enumerates security threats against a feature specification or design using Microsoft's six STRIDE categories (spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege), each paired with the security property it violates. Covers the asset-and-trust-boundary walk that produces threat rows, the threat-row output schema, a likelihood x impact triage rule labelled plainly as practitioner convention rather than standard, a worked example, and an anti-pattern catalog. Enumerates threats against a design; it does not scan code, run a penetration test, or audit control compliance. Use when a PRD section, user story, design doc, or architecture sketch touching authentication, user data, payments, file uploads, or an external integration is about to enter implementation and no threat model exists for it yet.