spex-qa

Perform QA, security reviews, and code reviews for AI agent framework development.

Updated Mar 5, 2026
One-click install
npx skills add https://github.com/johangm90/spex --skill spex-qa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spex-qa
Source: https://github.com/johangm90/spex/tree/main/skills/spex-qa
Command: npx skills add https://github.com/johangm90/spex --skill spex-qa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures that code meets quality, security, and testing standards before it's merged, preventing bugs and vulnerabilities from reaching production.

Core Features & Use Cases

  • Automated Testing: Designs and validates test plans, ensuring comprehensive coverage.
  • Security Reviews: Conducts threat modeling and checks against security best practices.
  • Code Quality: Performs structured code reviews, identifying potential issues and suggesting improvements.
  • Use Case: When a developer submits a new feature, this Skill can automatically generate a test plan, run security checks, and provide a detailed code review report, ensuring the feature is robust and secure.

Quick Start

Use the spex-qa skill to review the code in the current branch for quality and security issues.

Frequently Asked Questions about spex-qa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review and security checks before merging new features?

Automated code review and security checks validate implementation against specs, identify potential issues, and prevent vulnerabilities from reaching production before merging new features.

What is included in a structured test plan for validating acceptance criteria?

A structured test plan for validating acceptance criteria includes designing test cases, checking test coverage, reviewing AC testability, and gating slice promotion with a formal QASignOff.

How do I perform a security threat model review for AI agent framework development?

Security threat model reviews for AI agent framework development involve authoring threat models, conducting security reviews, and checking implementations against security best practices.

Can I use this to gate slice promotion and prevent incomplete code from moving to done?

Yes, slice promotion gating requires a formal QASignOff to validate test coverage, security reviews, and code quality before any slice can move to done.

What's the best way to determine necessary test cases for comprehensive coverage?

Determining necessary test cases for comprehensive coverage involves reviewing acceptance criteria testability, designing structured test plans, and validating implementation against specifications.