Audit git diffs with parallel QA and security reviews.
npx skills add https://github.com/Gold-b/claude-code-governance --skill qa-sec
Please help me install this Agent Skill. Skill: qa-sec Source: https://github.com/Gold-b/claude-code-governance/tree/main/bundle/skills/qa-sec Command: npx skills add https://github.com/Gold-b/claude-code-governance --skill qa-sec
This Skill helps you catch correctness, integration, performance, and security issues before release by coordinating a structured audit across all changed files. It reduces the risk of shipping broken features, insecure code, or unverified infrastructure changes.
Ask the qa-sec skill to audit the current git changes, run parallel QA and security checks, and report any blocking issues before release.
High-intent search queries and answers about installing and using this skill.
A pre-release code review and security audit detects modified files via git diff and dispatches parallel QA, Security, and Integration agents to analyze the changes. It synthesizes release-blocking findings into a structured PASS, FAIL, or WARN report with remediation steps.
Automating OWASP security checks before a merge is best handled by running parallel specialist agents that review active git diffs for vulnerabilities. This approach prioritizes CRITICAL and HIGH findings, allowing agents to fix serious issues directly before synthesizing a final release-readiness report.
Yes, parallel QA and security checks support infrastructure and configuration changes. The audit orchestrator is change-aware, tailoring validation checks to backend, frontend, infrastructure, and config modifications while skipping documentation-only updates.
Yes, the skill requires a CLAUDE.md file for project convention discovery and uses git-based scope detection to identify changed files. It relies on these inputs to tailor parallel specialist reviews and structured reporting accurately.
Integration tests and code review agents handle critical findings by prioritizing CRITICAL and HIGH severity issues, allowing agents to fix serious problems directly. This fix-and-verify workflow remediates severe issues immediately before generating the final release report.
yigitkonurGenerate and audit AGENTS.md and CLAUDE.md files from repository inspection.
alemdissoRun seven-checkpoint pre-merge code reviews with pass/warn/fail outputs.
AvihusittonDetect logic flaws, race conditions, and security risks in code reviews.
statick88Automate vulnerability detection across code, dependencies, containers, and infrastructure.
