ShaheerKhawaja/pos-qa
skills/pos-qa/SKILL.md
QA composite — browser testing, health scoring, and evaluation with test result memory. Replaces 5 QA skills.
$ install --global
skillsauthnpx skillsauth add ShaheerKhawaja/ProductionOS pos-qaInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 23, 2026, 2:12 AM10.4s2 files scanned
SKILL.md
- name:
- pos-qa
- description:
- QA composite — browser testing, health scoring, and evaluation with test result memory. Replaces 5 QA skills.
- argument-hint:
- [test|audit|browse] [url or path]
pos-qa
QA composite — browser testing, health scoring, and evaluation with test result memory. Replaces 5 QA skills.
Replaces: qa, qa-only, browse, agentic-eval, self-eval
Actions
| Action | What |
|--------|------|
| test [url] | Full QA — browser testing, health score 0-100, bug detection |
| audit [path] | Code quality audit without browser (static analysis + tests) |
| browse [url] | Headless browser interaction — navigate, screenshot, inspect |
Routing
- Parse action from first argument
- Load domain memory from
~/.productionos/domains/pos-qa/ - If first run: auto-detect project context, create profile
- Dispatch to
sub-skills/{action}.md - Score against
evaluation/rubric.yml, update memory
Domain Memory
Stored at ~/.productionos/domains/pos-qa/:
test-history.jsonl (health scores over time), known-bugs.jsonl (tracked issues with status), baseline-screenshots/ (visual regression reference), learnings.jsonl
Inputs
| Parameter | Values | Default | Description |
|-----------|--------|---------|-------------|
| action | test, audit, browse | test | Sub-skill to run |
| target | path, URL, or description | required | What to operate on |
Guardrails
- Memory is append-only. Never delete history.
- Every action scored against rubric. No silent completion.
- Profile is user-controlled. Never change without asking.
- Evidence required. No fabricated metrics.
- Learn from history. Compare to past executions.
Related Skills
ShaheerKhawaja/writing-plans
tools
VerifiedTrustedCommunity
Implementation planning workflow that turns approved ideas into dependency-aware execution plans.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/wiki-rag
development
VerifiedTrustedCommunity
Local RAG and Graph RAG over the SecondBrain wiki vault. Progressive context loading (hot cache -> index -> domain -> entity). Graph traversal via wikilink resolution. Use when agents need cross-project context, when answering questions that span multiple domains, or when building context for planning tasks. Triggers on: "wiki context", "cross-project context", "what do we know about", "check the wiki", "graph context", "/wiki-rag".
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/ux-genie
devops
VerifiedTrustedCommunity
UX improvement pipeline — creates user stories from UI guidelines, maps user journeys, identifies friction, dispatches fix agents. The user-experience equivalent of /production-upgrade.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/tdd
development
VerifiedTrustedCommunity
Test-driven development workflow that writes failing tests first, implements minimally, and refactors safely.
7SKILL.mdUpdated Apr 23, 2026