org-quality-governance

Enforce organizational quality and security policies across repositories.

13|3|Updated Mar 2, 2026
One-click install
npx skills add https://github.com/phrazzld/agent-skills --skill org-quality-governance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: org-quality-governance
Source: https://github.com/phrazzld/agent-skills/tree/main/core/org-quality-governance
Command: npx skills add https://github.com/phrazzld/agent-skills --skill org-quality-governance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the challenge of maintaining consistent quality, security, and CI/CD standards across multiple repositories within an organization, reducing manual auditing and enforcement.

Core Features & Use Cases

  • Policy Enforcement: Automates the application of organizational policies for branch protection, required CI checks, and security defaults.
  • Security Hardening: Ensures essential security measures like Dependabot, secret scanning, and trufflehog are enabled.
  • Use Case: A new project is created, and this Skill is used to automatically configure its repository to meet the organization's baseline security and CI/CD requirements, ensuring compliance from day one.

Quick Start

Apply the org-quality-governance skill to enforce the baseline quality and security policies across all repositories in the organization.

Frequently Asked Questions about org-quality-governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce branch protection rules across all repositories in my organization?

You can enforce branch protection rules across repositories by automating the application of organizational policies for protected default branches and required CI checks. This ensures consistent security and compliance standards without manual auditing.

What is the best way to automate CI/CD policy enforcement for new projects?

Automating CI/CD policy enforcement involves applying baseline security and quality requirements automatically upon project creation. This configures repositories with deterministic CI gates, conversation resolution requirements, and security defaults from day one.

How do I configure Dependabot and secret scanning for multiple repositories?

Configuring Dependabot and secret scanning for multiple repositories is achieved through security hardening policies. This automates enabling essential security measures like trufflehog and secret scanning across the organization to prevent vulnerabilities.

Can I use branch protection rulesets to standardize security defaults organization-wide?

Yes, you can standardize security defaults organization-wide using branch protection rulesets. This approach automates auditing and applies consistent security configurations, ensuring all repositories meet baseline compliance requirements.

What are the limitations of automating quality governance policies across repositories?

Automating quality governance policies requires consistent organizational standards to be effective. Limitations may arise if repositories have conflicting custom configurations or if deterministic CI gate designs cannot accommodate non-standard workflows.

Does policy enforcement work with existing CI checks and conversation resolution workflows?

Policy enforcement integrates with existing CI checks and conversation resolution workflows by applying organizational standards as required gates. This ensures that current development processes meet compliance before code merges.