skills.rest
yekinya
yekinyaCOMMUNITY
Explore all skills by this author →
GitHub

moai-foundation-quality

Validates codebases against TRUST 5 quality gates with proactive issue detection and Context7-powered best practices.

2|Updated May 27, 2026
Search Tags:#code quality#ci/cd#code review#linting#owasp#quality gate#trust-5
One-click install
npx skills add https://github.com/yekinya/moai-novel --skill moai-foundation-quality-yekinya
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: moai-foundation-quality
Source: https://github.com/yekinya/moai-novel/tree/main/moai-novel/.claude/skills/moai-foundation-quality
Command: npx skills add https://github.com/yekinya/moai-novel --skill moai-foundation-quality-yekinya

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Teams struggle to enforce consistent code quality across multi-language projects, often discovering security vulnerabilities, low test coverage, and technical debt too late in the development cycle. This Skill automates quality gate validation so issues are caught during development rather than before release. ## Core Features & Use Cases - TRUST 5 Validation: Scores codebases across Testable, Readable, Unified, Secured, and Trackable dimensions with configurable thresholds per principle. - Proactive Analysis: Scans for performance bottlenecks, security vulnerabilities, code duplication, and technical debt, then generates prioritized improvement recommendations. - Best Practices Enforcement: Uses Context7 integration to validate code against the latest language and framework standards for Python, TypeScript, JavaScript, Go, and more. - Use Case: Before merging a pull request, run a quality gate check that fails the build if test coverage drops below 90% or any critical OWASP security issue is detected, and post the findings as a PR comment. ## Quick Start Ask the AI to run a TRUST 5 quality gate validation on the src directory with a 0.85 quality threshold and report any failed principles.

Frequently Asked Questions about moai-foundation-quality

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce a code quality gate in a CI/CD pipeline?▼

Run the quality analysis with a defined threshold and exit with a non-zero code when TRUST 5 validation fails. The Skill supports GitHub Actions integration, generating SARIF reports and setting pipeline outputs like quality_score and quality_passed.

What is TRUST 5 validation in code review?▼

TRUST 5 is a five-pillar quality framework covering Testable, Readable, Unified, Secured, and Trackable dimensions. Each principle is scored against configurable thresholds, and the overall gate passes only when all principles meet their minimums.

Which programming languages does this quality analysis support?▼

It supports Python, JavaScript, TypeScript, Java, Go, Rust, C++, and C#, with language-specific configurations for linters, formatters, type checkers, and test frameworks such as ruff, black, mypy, eslint, prettier, and golangci-lint.

Does the security scan check OWASP compliance?▼

Yes, the SecuredValidator checks OWASP Top 10 compliance, scans dependency vulnerabilities, and detects code-level issues like SQL injection, hardcoded secrets, and missing authentication. Critical security findings can fail the quality gate.

Can I define custom quality rules for my project?▼

Yes, you can create CustomQualityRule classes with a validator callable and severity level, then register them with the orchestrator. Examples include enforcing project-specific naming conventions or enterprise security policies.

What happens when Context7 documentation is unavailable?▼

The best practices engine falls back to cached language rules when Context7 resolution fails, logging a warning instead of aborting the analysis. Validation continues with the last known standards for that language.

Related Skills

Explore More Software Engineering Skills→
MisonLMisonL
8

lint-and-validate

Run linting and static analysis on Node.js, Python, and multi-language projects.

Community
Intermediate
xalgordxalgord
954

integrating-sast-into-github-actions-pipeline

Configure CodeQL and Semgrep scanning in GitHub Actions pipelines with SARIF uploads and merge-blocking quality gates.

Community
Intermediate
goodstoriesworldgoodstoriesworld

security-audit

Audit codebases for OWASP Top 10 vulnerabilities and generate structured reports.

Official
Advanced
ShmurdocShmurdoc

health

Aggregates linting, typing, and test diagnostics into weighted 0-10 health score with trends.

Community
Advanced