What problem does it solve? Teams often ship releases without verifying that performance, security, reliability, and maintainability requirements are actually met, because NFR evidence is scattered across test results, metrics, logs, and CI outputs. This Skill audits that existing evidence against defined thresholds and produces a deterministic PASS/CONCERNS/FAIL assessment before release. ## Core Features & Use Cases - Evidence-Based NFR Audit: Evaluates four domains (performance, security, reliability, maintainability) against thresholds sourced from tech specs, PRDs, stories, or test-design outputs, never guessing thresholds. - Deterministic Status Classification: Assigns PASS, CONCERNS, or FAIL per finding with documented evidence sources, and downgrades any UNKNOWN threshold to CONCERNS. - Release Gate Reporting: Generates an nfr-assessment.md report with executive summary, quick wins, prioritized remediation actions, monitoring hooks, fail-fast mechanisms, and a gate YAML snippet. - Use Case: Before releasing a bulk export feature, run the audit to discover that a transitive dependency has a critical RCE vulnerability and peak heap exceeds its threshold, blocking the release with concrete remediation steps. ## Quick Start Ask the agent to audit NFR evidence for the current feature using the existing test results, metrics, and logs.
