skills.rest
NaveedTechLab
NaveedTechLabCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

qa-auditor

Audit codebases for Zero-Backend-LLM compliance and forbidden LLM API calls.

11|2|Updated Apr 30, 2026
Search Tags:#code review#security#compliance#backend development#api auditing
One-click install
npx skills add https://github.com/NaveedTechLab/skills-library --skill qa-auditor-naveedtechlab
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: qa-auditor
Source: https://github.com/NaveedTechLab/skills-library/tree/main/skills/qa-auditor
Command: npx skills add https://github.com/NaveedTechLab/skills-library --skill qa-auditor-naveedtechlab

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ast, re, os, json, argparse, subprocess, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures compliance with Zero-Backend-LLM standards by auditing code and APIs for forbidden LLM API calls, RAG summarization, or agent loops.

Core Features & Use Cases

  • Code Review: Detects LLM integration violations in codebases.
  • API Auditing: Verifies compliance with Zero-Backend-LLM standards for APIs.
  • Use Case: When developing a backend system, use this Skill to ensure that it adheres to the Zero-Backend-LLM policy, avoiding LLM API calls and ensuring deterministic operations.

Quick Start

Run the audit_backend.py script on your codebase to perform a compliance audit.

Frequently Asked Questions about qa-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my backend codebase for forbidden LLM API calls?▼

To audit a backend codebase for forbidden LLM API calls, run the audit_backend.py script which performs static and dynamic scanning to detect LLM integration violations, RAG summarization, and agent loops.

What is Zero-Backend-LLM compliance and how does API auditing enforce it?▼

Zero-Backend-LLM compliance ensures deterministic backend operations by eliminating LLM API calls. API auditing enforces this by scanning codebases to identify and remediate forbidden RAG summarization and agent loops.

Do I need Python and specific security libraries to run a code review for LLM integration violations?▼

Yes, you need Python and common security libraries to run a code review for LLM integration violations. The auditing process uses Python modules like ast, re, and subprocess for static analysis and dynamic scanning.

Can I use this code review approach to detect RAG summarization and agent loops in my APIs?▼

Yes, you can use this code review approach to detect RAG summarization and agent loops in your APIs. The auditing script specifically targets and remediates these forbidden LLM integration patterns during backend development.

What are the limitations of using static and dynamic scanning for API auditing?▼

Limitations of static and dynamic scanning for API auditing include potential false positives when evaluating complex codebases, requiring manual verification of flagged LLM API calls to ensure valid Zero-Backend-LLM compliance.

Related Skills

Explore More Software Engineering Skills→
bettercallfanbettercallfan

code-semantic-labeler

Automate semantic labeling of code nodes using Python AST analysis.

Community
Advanced
NaveedTechLabNaveedTechLab
11

fastapi-engineer

Develop deterministic FastAPI backends for content delivery, navigation, and rule-based quiz grading.

Community
Advanced
mindspore-aimindspore-ai
258

akg-review

Run deterministic pre-submit checks on AKG code changes and generate Markdown reports.

Official
Advanced
serejarisserejaris
215

api-digest

Fetch raw API data and generate structured digests locally.

Community
Basic