bmad-testarch-nfr

Audit non-functional requirement evidence for performance, security, reliability, and maintainability.

Updated Mar 1, 2026
One-click install
npx skills add https://github.com/Hexalith/Hexalith.Parties --skill bmad-testarch-nfr-hexalith
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bmad-testarch-nfr
Source: https://github.com/Hexalith/Hexalith.Parties/tree/main/.agents/skills/bmad-testarch-nfr
Command: npx skills add https://github.com/Hexalith/Hexalith.Parties --skill bmad-testarch-nfr-hexalith

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Teams often ship features without verifying that non-functional requirements like performance, security, reliability, and maintainability are actually met. This Skill audits existing implementation evidence against defined thresholds and produces deterministic PASS, CONCERNS, or FAIL classifications before release. ## Core Features & Use Cases - Evidence-Based NFR Audit: Evaluates test results, metrics, logs, scans, and CI data against thresholds sourced from tech specs, PRDs, and test-design documents, never guessing undefined thresholds. - Four-Domain Assessment: Runs dedicated Security, Performance, Reliability, and Maintainability evaluations with support for parallel subagent or sequential execution modes. - Release Gate Reporting: Generates a structured nfr-assessment.md report with quick wins, prioritized remediation actions, evidence gaps, and a gate YAML snippet for CI integration. - Use Case: Before releasing a bulk export feature, run the audit to discover that a PDF-rendering vulnerability and a missing circuit breaker are release blockers, with specific owners and effort estimates for each fix. ## Quick Start Ask the assistant to audit NFR evidence for the current feature using the bmad-testarch-nfr workflow and point it at your test results, metrics, and logs directories.

Frequently Asked Questions about bmad-testarch-nfr

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit non-functional requirements before a release?

Run the NFR evidence audit workflow after implementation evidence exists. It loads thresholds from your tech spec, PRD, or test-design output, gathers evidence from test results, metrics, and logs, then classifies each NFR as PASS, CONCERNS, or FAIL in a structured report.

What evidence sources does an NFR assessment use?

The audit collects load test results, APM metrics, SAST and DAST scan outputs, dependency vulnerability reports, uptime monitoring data, error logs, CI burn-in results, coverage reports, and code duplication reports. Missing evidence is flagged as a gap with an owner and deadline.

What happens when an NFR threshold is not defined?

Undefined thresholds are marked UNKNOWN and the finding is classified as CONCERNS, never PASS. The workflow forbids guessing thresholds, so an absent target cannot be treated as met even when measured values look healthy.

Can the NFR audit run evaluations in parallel?

Yes. The workflow supports agent-team, subagent, and sequential execution modes for its four domain workers covering security, performance, reliability, and maintainability. Mode resolution follows explicit user request, then config, then runtime capability probing.

When should I use test-design instead of an NFR audit?

Use test-design earlier in the lifecycle to define NFR thresholds and planned evidence before implementation. The NFR audit runs afterward to evaluate existing evidence; it does not run tests or CI workflows itself.