qa

Reviews code and architectures against SOLID, security, and complexity thresholds using the ADIHQ framework.

1.4k|335|Updated Jun 10, 2014
One-click install
npx skills add https://github.com/openwpm/OpenWPM --skill qa-openwpm
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: qa
Source: https://github.com/openwpm/OpenWPM/tree/main/.claude/skills/qa
Command: npx skills add https://github.com/openwpm/OpenWPM --skill qa-openwpm

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Code reviews are often inconsistent, subjective, or miss deep architectural and security flaws. This Skill enforces a rigorous, language-agnostic review process that applies SOLID principles, DRY/KISS/YAGNI heuristics, OWASP/NIST security rules, and quantitative complexity thresholds to every pull request, diff, or design. ## Core Features & Use Cases - ADIHQ Review Workflow: Processes every review through Analyze, Design, Evaluate/Implement, Handle, and Quality self-refinement stages. - Quantitative Gates: Automatically rejects functions with cyclomatic complexity above 15 and flags high cognitive complexity and ABC metric violations. - Security Enforcement: Detects hardcoded secrets, SQL injection risks, deprecated cryptography (MD5, SHA-1), and over-permissioned configurations. - Use Case: Submit a pull request diff and receive a structured matrix of findings with Severity, Dimension, Location, Violation, and Mandated Refactor for each issue found. ## Quick Start Ask the assistant to run a QA review on your pull request or code diff and return the severity matrix of violations.

Frequently Asked Questions about qa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get a rigorous architectural review of my pull request?

Submit your pull request diff or code snippet and request a QA review. The review evaluates the code across nine dimensions including architecture, security, and complexity, returning a structured matrix of violations with mandated refactors.

What code quality rules does an architectural review check?

The review enforces SOLID principles, DRY, KISS, and YAGNI heuristics, plus anti-pattern detection for god objects, big ball of mud, and diamond inheritance. It also checks naming conventions, function purity, and state management rules.

What cyclomatic complexity limit fails a code review?

Any function with cyclomatic complexity above 15 is automatically rejected. The review mandates extracting helper functions so each unit remains testable and matches unit test path requirements.

Does the review check for security vulnerabilities?

Yes, it applies OWASP and NIST guidelines covering input sanitization, SQL injection, XSS, hardcoded secrets, least-privilege permissions, and deprecated cryptography such as MD5 and SHA-1.

Is this review limited to a specific programming language?

No, the review is language-agnostic. It evaluates structural and architectural properties like coupling, cohesion, complexity metrics, and security patterns that apply across all programming languages.

When should I not use this strict QA review?

Avoid it for quick prototypes, throwaway scripts, or early exploratory code where strict architectural enforcement would slow iteration. It is designed for production-bound code where long-term maintainability matters.