skills.rest
gracefullight
gracefullightCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

oma-qa

Performs evidence-based quality assurance reviews for security, performance, accessibility, and correctness.

46|2|Updated Mar 23, 2025
Search Tags:#quality assurance#owasp#security audit#test coverage#accessibility testing#iso 25010#performance verification
One-click install
npx skills add https://github.com/gracefullight/krds --skill oma-qa-gracefullight
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oma-qa
Source: https://github.com/gracefullight/krds/tree/main/.agents/skills/oma-qa
Command: npx skills add https://github.com/gracefullight/krds --skill oma-qa-gracefullight

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps teams verify software quality by uncovering security, performance, accessibility, correctness, and test-coverage gaps with standards-aware, evidence-backed findings.

Core Features & Use Cases

  • Security & OWASP-focused QA: Prioritizes injection/auth/data-protection checks and produces actionable remediation guidance aligned to common web risk categories.
  • Performance & accessibility verification: Evaluates core web/performance signals and checks against WCAG 2.1 AA requirements to reduce user-impacting defects.
  • Test coverage and standards alignment: Assesses unit/integration/E2E coverage and maps gaps to ISO/IEC 25010 and improves test planning discipline using ISO/IEC 29119-style evidence expectations.

Quick Start

Provide the diff or PR plus any available test/build outputs and tell it which standards (e.g., OWASP, WCAG 2.1 AA, ISO/IEC 25010) you want enforced, then ask for a prioritized QA report with reproducible, file-and-line evidence and concrete fixes.

Frequently Asked Questions about oma-qa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP security audit before deployment?▼

Performing an OWASP security audit involves providing your code diff or PR and build outputs to generate a prioritized report with file-and-line evidence and actionable remediation steps for injection, auth, and data-protection risks.

Can I verify WCAG 2.1 AA accessibility compliance using code diffs?▼

Yes, you can verify WCAG 2.1 AA accessibility compliance by supplying your code diff. The review evaluates your code against WCAG 2.1 AA requirements to identify and provide evidence for user-impacting accessibility defects.

What is the best way to assess test coverage against ISO/IEC 25010 standards?▼

Assessing test coverage against ISO/IEC 25010 standards involves analyzing your unit, integration, and E2E coverage gaps. The review maps these gaps to quality characteristics and improves test planning discipline using ISO/IEC 29119-style evidence expectations.

How do I get evidence-backed performance verification for a pull request?▼

To get evidence-backed performance verification for a pull request, submit the PR along with available build outputs. The evaluation checks core web performance signals and returns prioritized, reproducible findings with specific remediation guidance.

Does pre-deployment QA review require specific test frameworks to check correctness?▼

No specific test frameworks are required. The correctness and test coverage assessment evaluates your existing unit, integration, and E2E outputs to identify gaps and map them to standards like ISO/IEC 25010 without enforcing a particular framework.

Related Skills

Explore More Software Engineering Skills→
vadimcomanescuvadimcomanescu
24

code-reviewer

Review git diffs and pull requests for correctness, security, and performance.

Community
Intermediate
maxvaegamaxvaega
146

code-reviewer

Review code for bugs, security vulnerabilities, and performance issues.

Community
Intermediate
u9401066u9401066

test-generator

Generate pytest, mypy, ruff, bandit, and Playwright test suites for Python codebases.

Community
Advanced
doanchienthangdevdoanchienthangdev
4

profiling-performance

Run Lighthouse audits and analyze Core Web Vitals for browser performance.

Community
Intermediate