ms-foundation-trust

Enforce TRUST 5 quality principles across codebases during PR checks and CI gates.

Updated Oct 16, 2025
One-click install
npx skills add https://github.com/beomeodev/specter --skill ms-foundation-trust
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ms-foundation-trust
Source: https://github.com/beomeodev/specter/tree/main/.claude/skills/ms-foundation-trust
Command: npx skills add https://github.com/beomeodev/specter --skill ms-foundation-trust

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

TRUST 5 establishes a holistic quality gate that ensures codebases are testable, readable, secure, and traceable, preventing quality debt from entering production.

Core Features & Use Cases

  • Test First: enforce ≥85% test coverage and reliable validation across languages.
  • Readable: enforce SLOC and complexity limits, linting, and clear architecture guidelines.
  • Unified: strict type checking and consistent typing discipline across modules.
  • Secured: incorporate OWASP patterns, vulnerability scanning, and secure coding practices.
  • Trackable: maintain complete TAG chains (SPEC → TEST → CODE → DOC) with remediation guidance.

Quick Start

Run the TRUST validation workflow to generate a compliance report for your codebase before merging.

Frequently Asked Questions about ms-foundation-trust

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce code quality gates for security and traceability in CI?

Code quality gates enforce security and traceability by validating test coverage, typing, and TAG chains during CI checks. This Skill applies TRUST 5 principles to PR checks, generating compliance reports to prevent quality debt from entering production.

What is the TRUST 5 criteria for code review?

The TRUST 5 criteria for code review is a holistic quality gate ensuring test-first coverage above 85%, readability via SLOC limits, unified typing, secured OWASP patterns, and complete TAG chain traceability from SPEC to DOC.

Can I apply TRUST 5 validation across Python and TypeScript stacks?

Yes, you can apply TRUST 5 validation across Python and TypeScript stacks. The validation supports multiple languages including Go, enforcing strict type checking, complexity limits, and complete TAG chain traceability during code reviews.

How do I maintain TAG chain traceability from SPEC to DOC?

Maintain TAG chain traceability by validating the complete SPEC to TEST to CODE to DOC chain during PR checks. This Skill tracks these dependencies across modules and provides remediation guidance to ensure no broken links.

What is the best way to automate secure coding pattern checks in PRs?

Automate secure coding pattern checks in PRs by validating OWASP patterns and vulnerability scanning during CI gates. This Skill enforces secured patterns alongside test coverage and readability limits to prevent quality debt before merging.

Does TRUST 5 code review enforce minimum test coverage thresholds?

Yes, TRUST 5 code review enforces a minimum test coverage threshold of 85%. It applies this test-first validation across supported stacks like Python, TypeScript, and Go to ensure reliable test coverage before merging code.