qa

Analyze test coverage, test quality, and security posture to produce a QA report.

1|1|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/45ck/claude-sdlc-plugin --skill qa-45ck
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: qa
Source: https://github.com/45ck/claude-sdlc-plugin/tree/main/skills/qa
Command: npx skills add https://github.com/45ck/claude-sdlc-plugin --skill qa-45ck

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides automated QA verification to measure software quality by analyzing test coverage, test quality, and security signals, enabling teams to identify gaps early.

Core Features & Use Cases

  • Coverage verification: Assess line, function, and branch coverage against defined thresholds to ensure robust tests.
  • Quality assessment: Evaluate test descriptions, assertions, and scenario coverage to improve test meaningfulness and reliability.
  • Security checks: Run dependency audits and static analyses to surface vulnerabilities and misconfigurations.
  • Use Case: When preparing for a release, run /sdlc:qa to generate a comprehensive QA report and update state across the project.

Quick Start

Run the QA workflow to generate a comprehensive QA report: /sdlc:qa

Frequently Asked Questions about qa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate test coverage verification before a release?

Automate test coverage verification by running pnpm and vitest to measure line, function, and branch coverage against thresholds defined in your quality model. This identifies coverage gaps across unit, integration, and E2E tests before release.

What is static analysis for security audits in CI?

Static analysis for security audits runs dependency audits and code scanners to surface vulnerabilities and misconfigurations. It evaluates your security posture and identifies risks early in the development lifecycle.

How do I assess test quality and meaningfulness?

Assess test quality by evaluating test descriptions, assertions, and scenario coverage. This improves test meaningfulness and reliability by ensuring tests effectively validate intended behaviors and edge cases.

Does this QA verification workflow work with pnpm and eslint?

Yes, QA verification works with pnpm and eslint. It uses pnpm for dependency management, vitest for coverage analysis, and eslint for static analysis to produce a comprehensive QA report.

Can I enforce quality thresholds defined in a quality model document?

Yes, you can enforce quality thresholds defined in docs/quality/quality-model.md. The verification process checks coverage, test quality, and security posture against these documented standards to generate a QA report.

What's the best way to generate a comprehensive QA report for a release?

The best way to generate a comprehensive QA report is to run the QA workflow. This analyzes test coverage, test quality, and security posture, updating project state and surfacing risks before the release.